Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3232392e3231342e302f32332d3233203d3e203238353938.roa
File: 34352e3232392e3231342e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier: RxvmW7snfIKe4rgogT5rPXJn1UNk9L+0+k1WEF7PuqQ=
Subject key identifier: 88:E3:77:CD:B1:81:90:90:BF:82:0F:16:DB:11:7F:54:DD:AF:41:E2
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 4223D5116C1E49338CC4FEEB323C9D1ADE311772
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3232392e3231342e302f32332d3233203d3e203238353938.roa
Signing time: Tue 24 Oct 2023 22:02:00 +0000
ROA not before: Tue 24 Oct 2023 21:57:00 +0000
ROA not after: Tue 22 Oct 2024 22:02:00 +0000
asID: 28598
IP address blocks: 45.229.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:23:d5:11:6c:1e:49:33:8c:c4:fe:eb:32:3c:9d:1a:de:31:17:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 24 21:57:00 2023 GMT
Not After : Oct 22 22:02:00 2024 GMT
Subject: CN=88E377CDB1819090BF820F16DB117F54DDAF41E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:84:d6:49:50:fa:40:97:4c:3d:ac:9b:7b:
dd:56:d2:92:9c:fd:9e:73:5b:f7:cd:72:c7:8c:28:
6b:e9:97:d5:fc:cf:b9:38:05:85:2e:7d:07:62:07:
d6:95:23:20:8c:9d:14:14:2a:d6:67:bc:be:0e:df:
26:6f:cf:e5:f9:8e:52:b9:9f:f7:d8:06:f4:c2:2d:
ec:c1:a3:ca:fb:1a:f6:25:06:e7:8d:7e:b5:fe:af:
92:ab:17:09:83:5b:74:9b:8d:3d:bd:6c:a2:57:9e:
0a:11:6e:b8:6c:77:d3:2e:26:31:89:3c:3f:60:d3:
c1:d6:50:e6:13:c1:68:bf:40:83:40:db:1e:7c:b6:
77:3d:c8:18:e5:0d:b2:ec:93:73:44:fb:6d:13:51:
30:a2:9e:04:05:fb:8a:d9:a5:e0:e1:6b:1f:5c:39:
31:c0:dc:65:fd:69:ff:59:a0:41:9c:0b:ab:1b:64:
05:3c:fb:75:f6:cc:11:81:8e:2c:15:73:d1:b8:ac:
63:f8:18:8c:fb:0e:02:8e:8c:93:31:28:13:c3:ef:
3d:85:84:21:c8:b9:b3:b8:79:88:18:67:1d:70:fb:
e3:14:ee:50:ff:72:9a:db:fa:8a:e9:c5:fe:09:b7:
18:08:30:8b:9a:4b:6a:e4:11:96:75:c4:3f:09:ae:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:77:CD:B1:81:90:90:BF:82:0F:16:DB:11:7F:54:DD:AF:41:E2
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3232392e3231342e302f32332d3233203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.214.0/23
Signature Algorithm: sha256WithRSAEncryption
58:6e:5a:35:09:1b:f1:ef:9c:93:b5:ae:b4:b5:37:23:25:e4:
0a:57:07:2b:7c:84:b4:18:f8:a1:5f:14:3b:ea:67:2d:8d:ca:
c7:8c:b9:bd:c1:d1:04:8e:76:2a:a9:39:2a:12:07:98:d0:f7:
ba:8e:74:fb:83:c4:21:f3:92:5e:fc:41:23:57:fe:08:da:70:
5e:e2:46:a6:66:fc:a8:cf:8b:84:93:1e:65:97:ca:4f:d7:3b:
74:77:85:8e:88:18:30:5c:99:67:26:79:a6:6b:44:ac:e6:8e:
ec:c0:09:3f:ed:32:1a:38:ce:3f:ff:2b:88:c2:52:6b:e9:47:
03:73:24:ca:2d:e4:09:ac:fd:f5:1c:b6:66:08:d4:74:4e:4e:
a3:d4:a3:02:c1:64:9a:2b:ee:fb:d1:a2:bd:92:c8:31:85:96:
b8:93:3c:db:81:dd:bb:af:96:08:9f:22:be:d6:e5:6d:f1:7f:
cb:d1:dd:4f:a1:f6:58:49:32:1c:b1:e0:be:d5:59:59:a5:39:
49:2e:5c:7d:bf:62:0e:ff:7f:52:b1:3f:44:64:2f:19:41:91:
cf:38:e2:fb:b8:41:6e:38:7f:31:29:e5:39:22:9f:83:0c:5a:
5f:a0:56:91:7a:01:7f:26:0d:bb:e7:d3:f4:a2:b4:0e:75:8b:
1a:50:b9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:23 2025 by rpki-client