Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
File: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier: 757kxP3DeSP5JmPEBiiEu0EDaWK8eChwXRczIDI877Y=
Subject key identifier: 10:BE:99:93:54:19:7F:E1:C6:5E:15:0E:E9:F6:2D:68:85:CA:5D:64
Certificate issuer: /CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Certificate serial: 2C704F106C1129C931004866405B4369C51A96A4
Authority key identifier: 01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
Signing time: Thu 04 Apr 2024 04:13:39 +0000
ROA not before: Thu 04 Apr 2024 04:08:39 +0000
ROA not after: Thu 03 Apr 2025 04:13:39 +0000
asID: 267596
IP address blocks: 45.71.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:70:4f:10:6c:11:29:c9:31:00:48:66:40:5b:43:69:c5:1a:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Validity
Not Before: Apr 4 04:08:39 2024 GMT
Not After : Apr 3 04:13:39 2025 GMT
Subject: CN=10BE999354197FE1C65E150EE9F62D6885CA5D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:2d:06:c2:6f:f0:a3:51:ba:7e:f7:36:38:
64:74:13:18:2a:22:48:34:eb:46:d6:36:46:e2:c0:
4d:f8:d3:8a:34:82:f8:2a:dc:65:df:1f:ff:6c:61:
0e:6b:1c:71:71:af:fd:cd:5a:46:31:2b:e2:c2:f5:
30:b1:90:b7:67:20:1b:e2:a3:ed:3e:f7:2b:26:37:
21:4c:ea:4a:53:5b:e6:6f:42:59:f1:50:62:54:75:
47:f7:5e:cd:f7:72:71:bd:f7:d4:4c:1d:58:60:ae:
0f:94:d2:df:ab:84:bf:8a:fe:00:f2:3c:8c:08:39:
ca:b4:3d:15:d6:cc:41:af:19:14:e9:4b:a5:65:4b:
fe:13:ea:f9:20:25:3a:25:27:b6:16:a7:db:a1:ff:
11:f9:fe:79:9e:87:c0:54:cb:e9:32:fb:fe:a5:f3:
40:62:9d:5b:de:6b:f7:79:42:58:33:4a:e0:ab:17:
f6:f2:cb:6d:ec:ee:79:11:f0:6f:cc:df:3a:0f:7c:
0b:d8:c1:b2:9d:0a:f2:e7:eb:01:4a:84:0c:35:cf:
58:24:66:a2:5b:5c:8b:b3:c7:04:02:b1:08:51:d5:
74:d3:db:5d:29:fa:b9:ab:84:8c:87:96:90:dc:cc:
e9:39:38:bc:06:24:6e:30:f8:1d:66:8a:22:a0:1d:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:99:93:54:19:7F:E1:C6:5E:15:0E:E9:F6:2D:68:85:CA:5D:64
X509v3 Authority Key Identifier:
keyid:01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:9e:cf:6e:bb:e0:b2:0a:9f:c5:c8:c4:51:ef:7f:d1:bb:3b:
68:bc:88:9e:78:db:f1:52:ce:61:e6:a8:99:f4:17:84:4c:e8:
07:97:da:9f:11:8d:12:29:36:b3:b5:f1:d4:1a:1c:44:95:36:
e1:d9:a8:ba:78:a4:ec:04:2a:ab:9c:a5:86:fb:f6:e8:12:e5:
de:55:6c:05:ad:41:54:32:3b:38:71:50:ff:af:92:8b:cf:6f:
3f:e3:0d:8d:9b:9a:de:c9:cf:f9:89:6e:e8:20:ab:fe:d1:bc:
0e:56:41:66:c8:38:20:0f:e2:77:b0:25:bf:c2:7d:6b:05:87:
e3:d1:b1:81:18:65:e0:8e:ca:21:53:9d:a4:e6:ae:54:88:76:
bb:35:fd:9f:b7:7e:95:6e:f8:0e:e6:ce:63:c0:38:d4:9a:87:
25:4d:af:b3:51:52:dc:57:0c:79:04:e5:59:ff:f0:d8:a3:c6:
e7:2d:0a:b5:93:a4:ed:ed:1e:7f:fe:33:a5:06:49:4c:dc:14:
35:04:56:69:ee:3a:6b:71:ea:01:5b:af:71:bf:8e:fe:b9:5f:
67:ba:cc:4e:5e:2c:8d:27:a9:fd:28:ba:ba:0e:fa:6f:1e:c6:
e3:75:0d:18:c4:3c:8a:1b:8e:43:49:e3:5a:d4:06:71:76:25:
d0:f9:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:49:51 2025 by rpki-client