Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323635313437.roa
File: 34352e3137312e3233312e302f32342d3234203d3e20323635313437.roa (raw, json)
Hash identifier: w2lPKER3vLawO0a3yYtjDj4kUFnc75Yqpf/6iuGdm0I=
Subject key identifier: 6D:95:F5:45:81:A2:7F:2E:DF:40:78:7F:C9:1C:FA:9D:F3:FD:C1:24
Certificate issuer: /CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Certificate serial: 3D58E410D22F8B9A7F218DE7DF6AA2CE3DF4A4FB
Authority key identifier: CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323635313437.roa
Signing time: Mon 18 Dec 2023 20:00:17 +0000
ROA not before: Mon 18 Dec 2023 19:55:17 +0000
ROA not after: Mon 16 Dec 2024 20:00:17 +0000
asID: 265147
IP address blocks: 45.171.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:58:e4:10:d2:2f:8b:9a:7f:21:8d:e7:df:6a:a2:ce:3d:f4:a4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
Validity
Not Before: Dec 18 19:55:17 2023 GMT
Not After : Dec 16 20:00:17 2024 GMT
Subject: CN=6D95F54581A27F2EDF40787FC91CFA9DF3FDC124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:e8:df:c9:7b:64:ae:f6:88:39:5a:b7:2a:
bb:a8:19:9d:12:25:97:e5:33:01:31:c7:f7:0d:86:
ae:a4:f5:2e:86:2c:a4:50:96:c1:e7:96:51:f6:c1:
71:8a:c4:b7:87:a6:52:76:fe:4d:4d:5b:27:a1:a9:
0f:ac:03:3e:04:96:a6:41:92:8c:36:1f:35:79:59:
e1:37:89:5e:7f:7a:a6:9b:8d:0f:2d:36:36:ec:90:
a2:48:50:a6:bc:8b:c3:99:ed:80:b5:5b:84:4d:d5:
5a:96:ef:32:f1:d8:6c:b8:cf:0e:55:e7:04:6e:6e:
93:b0:36:ae:10:d9:6b:29:55:63:fd:26:09:aa:d7:
84:b8:55:1e:97:4c:c7:f4:05:78:47:8b:67:00:25:
1a:03:19:6b:e7:f1:35:b5:50:d7:90:82:22:cf:b4:
f0:c9:95:68:41:05:36:98:40:49:27:10:23:1a:f0:
c7:c0:dd:56:71:36:ec:89:bf:50:5e:ff:f4:73:2a:
75:77:7d:36:a2:86:4e:32:50:c4:11:60:7f:bc:cd:
49:02:de:6b:7e:c3:81:ba:a4:0a:4c:de:a9:e1:4e:
73:41:c8:64:6c:f6:91:b8:58:77:91:46:c5:0c:b1:
8b:c6:a9:de:e7:5a:c4:0a:8b:e5:71:81:cb:83:94:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:F5:45:81:A2:7F:2E:DF:40:78:7F:C9:1C:FA:9D:F3:FD:C1:24
X509v3 Authority Key Identifier:
keyid:CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323635313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1b:3a:59:76:1e:0b:01:7c:6b:6c:8d:83:cb:aa:a5:04:74:
9a:3d:c1:be:55:8e:da:17:d9:d8:ed:57:e3:e2:59:63:d7:95:
d3:fb:bf:4b:27:31:c4:fa:e7:58:db:0b:27:8c:15:70:a6:00:
1d:02:16:7d:9f:da:d7:3b:19:10:4c:ac:28:0f:e9:89:fe:9c:
ac:98:e0:f0:3e:93:a2:c8:58:4e:d4:62:6d:da:a4:e5:60:7d:
de:a7:e1:99:5c:eb:1f:b4:5f:45:15:72:f7:75:61:ed:47:80:
62:cb:48:d1:8a:08:49:a4:46:4c:8f:d7:32:5e:e5:9f:5f:91:
3c:36:da:7e:d6:8a:3a:99:59:77:a6:7a:52:0b:9a:e3:8c:2b:
4b:8c:f4:a7:b0:04:70:35:c7:e4:25:9c:cf:81:5f:d5:ea:ba:
5a:25:ef:4a:40:f0:b4:36:24:3a:2b:93:c5:bb:11:9d:45:b6:
01:c4:60:90:fc:5b:16:5f:10:20:05:56:0a:f4:ac:13:f3:5a:
21:90:12:ae:b1:b2:ed:9e:fb:77:56:2e:60:c3:4d:84:ba:b6:
9b:7a:8e:cd:7d:8d:b0:7a:49:ed:b8:de:04:8f:de:4e:3e:b8:
da:bc:3f:8e:fa:f3:fa:21:0f:b6:80:3e:bf:de:e5:e7:7e:6c:
0e:7a:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:07 2025 by rpki-client