Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa
File: 34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa (raw, json)
Hash identifier: 5I2Y7wFDTKnDZrj0yMbQm8iZLGNJCjFdPFHkcgqhRVc=
Subject key identifier: 01:29:D6:66:CD:99:DB:E0:2A:00:8E:02:87:14:3C:5F:C6:96:9B:FB
Certificate issuer: /CN=9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC
Certificate serial: 013CF1EE5168C4DB20C070F2795697A13FCD3BCF
Authority key identifier: 9E:22:BA:4D:80:00:A0:BC:2E:D9:B9:BE:FC:9E:9A:30:F7:71:66:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa
Signing time: Fri 13 Jan 2023 15:36:06 +0000
ROA not before: Fri 13 Jan 2023 15:31:06 +0000
ROA not after: Fri 12 Jan 2024 15:36:06 +0000
asID: 268034
IP address blocks: 45.167.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3c:f1:ee:51:68:c4:db:20:c0:70:f2:79:56:97:a1:3f:cd:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC
Validity
Not Before: Jan 13 15:31:06 2023 GMT
Not After : Jan 12 15:36:06 2024 GMT
Subject: CN=0129D666CD99DBE02A008E0287143C5FC6969BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:e4:ea:4a:15:4b:25:e0:18:2a:4f:84:d8:
c9:f0:02:af:5a:1e:16:5d:35:ee:7f:88:5e:ed:17:
c8:a1:16:51:52:47:c5:21:db:f8:a8:95:37:45:0b:
8e:fc:24:b5:56:ed:5f:80:3a:fb:11:e4:6f:ec:14:
59:52:11:96:2d:18:53:16:16:1d:91:47:af:ef:c7:
ae:94:af:4d:e4:11:55:46:21:16:68:da:c6:43:4a:
b1:6a:4e:9b:3f:96:4d:04:37:93:39:b2:88:76:e9:
6b:38:5c:25:3f:3c:5d:c8:c6:6a:40:d4:fe:56:8d:
ea:ed:1b:45:08:59:96:84:d7:df:0b:18:ac:db:75:
44:c8:cc:09:2e:7f:a8:ac:d4:a5:0f:61:2b:f9:3d:
bd:d6:47:53:94:48:13:de:4e:5b:7f:0c:ff:0c:a5:
91:90:77:ff:65:86:62:4e:8f:7d:ba:92:e2:ae:b8:
b0:32:d5:ae:6e:6e:7e:f2:24:98:58:64:98:f5:e0:
ca:46:cd:1e:1d:ad:3a:75:23:d5:bf:59:56:0c:bb:
51:e7:90:be:f3:7b:5a:f7:48:6a:8c:70:2a:d2:3d:
9b:f5:37:a7:9c:86:1a:d0:77:86:c0:b2:53:9d:11:
ad:e8:d3:67:ea:5b:29:11:2a:7c:9f:97:62:c0:c0:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:D6:66:CD:99:DB:E0:2A:00:8E:02:87:14:3C:5F:C6:96:9B:FB
X509v3 Authority Key Identifier:
keyid:9E:22:BA:4D:80:00:A0:BC:2E:D9:B9:BE:FC:9E:9A:30:F7:71:66:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:6b:85:ca:93:7e:28:f6:49:e9:5c:77:be:41:2b:ce:0a:02:
2a:0c:45:55:ba:d4:0e:89:68:67:3e:02:99:09:89:e3:44:33:
92:0a:b5:e7:66:37:10:67:1d:bf:4b:34:dd:3d:8f:c0:30:21:
f2:9d:d8:cc:14:ea:dc:74:2e:30:c8:80:73:24:c5:90:d9:90:
3c:a5:68:b5:7a:93:9b:ef:e2:76:9d:28:6a:eb:ce:f2:97:e0:
08:97:08:31:e5:83:97:17:2e:8d:17:bc:01:86:ac:60:70:03:
03:6b:07:9e:8c:b4:e5:3d:6c:32:6e:7f:3d:ee:d4:66:ad:a2:
c1:3b:2a:46:0f:10:c3:8f:bf:bc:7b:bb:db:23:d5:ce:66:ca:
e3:15:b9:8b:6b:df:2f:63:d0:c5:51:27:f3:4f:fe:73:e9:1a:
5c:1e:30:2e:7c:be:95:3b:2f:67:81:7c:77:7a:b2:57:db:72:
78:ce:60:d5:0f:8d:d1:b2:24:80:85:c5:59:ef:fd:65:b6:39:
3c:88:ef:dd:60:c4:ea:ce:1e:78:48:b7:22:51:e8:b8:e0:63:
d1:2d:de:15:7f:e0:d7:90:37:44:d0:ff:24:8b:62:25:e4:67:
64:c1:e7:5c:74:c0:71:10:03:f0:96:69:5a:9c:6e:94:12:b5:
a1:1d:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:30 2025 by rpki-client