Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/34352e352e38382e302f32322d3232203d3e20323636303834.roa
File: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (raw, json)
Hash identifier: y2euuAlYhHYtoMCHRH4fmjX+cxxiLx1A5in6B3A7OQM=
Subject key identifier: B9:24:FE:31:EC:DB:68:E1:11:B8:8F:3E:4C:05:70:B3:E3:28:28:21
Certificate issuer: /CN=3ABA369F9008028C8B61246DD199EA286A62F0EE
Certificate serial: 32CE86B9CFF18D990768E302F1B0D6C1B9A8B589
Authority key identifier: 3A:BA:36:9F:90:08:02:8C:8B:61:24:6D:D1:99:EA:28:6A:62:F0:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABA369F9008028C8B61246DD199EA286A62F0EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/34352e352e38382e302f32322d3232203d3e20323636303834.roa
Signing time: Fri 01 Dec 2023 17:19:23 +0000
ROA not before: Fri 01 Dec 2023 17:14:23 +0000
ROA not after: Fri 29 Nov 2024 17:19:23 +0000
asID: 266084
IP address blocks: 45.5.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ce:86:b9:cf:f1:8d:99:07:68:e3:02:f1:b0:d6:c1:b9:a8:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABA369F9008028C8B61246DD199EA286A62F0EE
Validity
Not Before: Dec 1 17:14:23 2023 GMT
Not After : Nov 29 17:19:23 2024 GMT
Subject: CN=B924FE31ECDB68E111B88F3E4C0570B3E3282821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:41:f3:e8:20:aa:fa:f3:e8:ea:4f:1b:f5:
71:b1:49:27:0f:9e:7d:a3:85:e4:d4:19:a5:3e:97:
51:ee:5c:86:0a:1b:76:cb:9a:81:a6:5f:55:b8:53:
2d:5a:d7:79:34:12:8d:da:a4:32:e5:4a:4e:0b:45:
89:1b:56:3c:b4:28:7f:88:4c:30:0a:c5:7e:fb:4c:
c2:35:50:fb:ec:be:51:3f:ee:e2:76:5b:08:d3:e2:
36:0c:71:a8:7c:cb:9b:69:98:a9:16:ed:cd:f3:64:
4b:e2:78:6b:43:2f:8d:81:e3:f4:c4:41:5a:67:56:
b7:9d:14:c5:ff:49:11:58:7a:ba:0d:8f:04:2e:98:
f0:d5:0d:29:87:2e:de:82:0c:93:a4:95:24:e0:de:
c8:06:b7:8d:34:3e:26:e6:cf:38:d6:c6:4a:8a:8e:
f0:af:5f:fe:52:97:6f:b2:b8:86:fd:bf:7c:41:06:
5f:ba:11:c4:74:8e:5c:95:8c:38:32:74:2d:89:1e:
bc:fa:2b:1a:73:07:4f:28:1e:1d:c3:fe:c8:f6:a2:
6e:f8:ae:cf:7c:a6:cc:7b:2d:cc:34:0b:a9:03:e1:
79:e3:74:27:5e:68:a4:d1:47:4e:3c:f6:58:19:90:
fd:1c:9a:05:af:c1:bb:9d:64:46:e5:31:2a:ef:e6:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:FE:31:EC:DB:68:E1:11:B8:8F:3E:4C:05:70:B3:E3:28:28:21
X509v3 Authority Key Identifier:
keyid:3A:BA:36:9F:90:08:02:8C:8B:61:24:6D:D1:99:EA:28:6A:62:F0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/3ABA369F9008028C8B61246DD199EA286A62F0EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABA369F9008028C8B61246DD199EA286A62F0EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/34352e352e38382e302f32322d3232203d3e20323636303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:8d:61:5e:2c:82:73:40:3a:e4:51:8b:9c:38:dd:b9:c6:3a:
a6:89:4b:22:95:4b:1b:d4:13:38:b6:19:d2:2f:a9:72:55:14:
81:8e:ae:0a:9c:07:94:af:30:73:35:7a:79:40:4e:cc:b4:ef:
7d:25:26:e1:46:3a:5f:2f:cd:c8:c8:4e:f1:13:c4:a7:7f:81:
94:95:1d:66:d0:53:45:71:e3:9c:bb:13:e6:2f:95:fa:f4:46:
bd:9c:39:05:53:7f:6c:83:e0:7c:d2:4c:c1:93:dd:40:da:62:
7e:4d:be:01:66:99:2b:46:34:7a:aa:51:fa:5e:1d:26:4e:96:
f2:1b:13:00:ca:eb:8d:78:87:7e:79:44:cf:ed:aa:3e:66:8c:
c7:e4:da:4b:65:ae:d8:a6:05:52:24:3d:a2:17:2e:16:84:fd:
38:c7:bf:72:32:71:a7:f3:48:94:b2:95:97:f8:0a:e5:46:73:
91:da:a4:7e:38:8d:3e:89:74:b4:e3:fe:8b:16:1e:15:18:a1:
4f:0e:24:54:9b:a0:5d:b7:25:b3:87:bb:06:64:98:af:94:7a:
56:0c:66:7f:7a:00:1e:cf:e5:a8:c2:c0:14:a8:4f:1b:96:3d:
e1:eb:ea:cc:fb:f1:f1:bc:1d:1a:36:4c:df:54:db:28:cc:ec:
14:e7:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:32 2025 by rpki-client