Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
File: 34352e342e35362e302f32322d3234203d3e20323636303338.roa (raw, json)
Hash identifier: 9/uc1MoUYSgPl5kNzK5nNaFjvv7HHO3ps6C8SN0vut0=
Subject key identifier: 23:21:F3:4F:16:6F:84:5B:05:0E:FA:B9:2D:FA:EF:4B:57:85:AA:CF
Certificate issuer: /CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Certificate serial: 090C5802EDED5DC1E16536D4D1673DE772026385
Authority key identifier: 96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
Signing time: Thu 04 Apr 2024 18:12:53 +0000
ROA not before: Thu 04 Apr 2024 18:07:53 +0000
ROA not after: Thu 03 Apr 2025 18:12:53 +0000
asID: 266038
IP address blocks: 45.4.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0c:58:02:ed:ed:5d:c1:e1:65:36:d4:d1:67:3d:e7:72:02:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE
Validity
Not Before: Apr 4 18:07:53 2024 GMT
Not After : Apr 3 18:12:53 2025 GMT
Subject: CN=2321F34F166F845B050EFAB92DFAEF4B5785AACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:ac:80:ba:5a:52:1d:03:cb:28:ac:60:ec:
08:ae:9f:de:97:92:7e:37:37:5d:7d:26:50:f8:99:
d4:e8:36:ba:f3:9f:b5:45:75:24:d2:f7:42:c7:49:
6d:07:05:5e:d0:d4:f0:8c:2c:af:0d:83:09:c3:f6:
54:4e:8e:17:10:a3:87:59:ab:13:fc:9d:3b:fd:cf:
4d:73:2d:d2:c2:f3:f1:b1:97:fb:c6:fe:05:fd:62:
3c:6e:45:af:f8:c5:90:aa:1e:ab:99:df:d9:94:eb:
b7:a3:8b:6e:72:a2:80:6e:79:31:a8:7b:4a:62:13:
7b:b8:8a:77:ad:bb:38:99:dd:8e:fd:54:4b:c4:32:
8d:0f:3a:ed:16:9c:b4:6e:30:03:27:cb:a5:12:94:
18:a5:47:30:65:fe:47:8f:f0:12:bc:b7:28:37:ea:
7e:d0:90:69:99:b4:ce:96:d3:eb:76:9b:c0:58:e5:
a7:ba:9b:94:35:87:75:c6:42:af:45:b3:93:b5:76:
ac:a9:a1:23:84:f3:a2:b1:f3:c9:b5:c4:99:ee:ce:
d0:87:65:f3:98:fd:fc:8b:9e:51:17:4c:82:37:19:
aa:9c:0a:95:12:26:f8:6d:4f:4d:61:2e:67:aa:93:
3b:e8:9c:cd:85:21:d3:a7:3e:7a:07:40:3b:3c:b5:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:F3:4F:16:6F:84:5B:05:0E:FA:B9:2D:FA:EF:4B:57:85:AA:CF
X509v3 Authority Key Identifier:
keyid:96:F2:FB:F6:6A:D2:E9:F6:1E:CC:CE:C6:77:41:C6:AD:17:36:AC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F2FBF66AD2E9F61ECCCEC67741C6AD1736ACDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNMgf2Am6tWhzJyaAH2ii2XfVRi5t4xGf6TH3cvBhuhG/1/34352e342e35362e302f32322d3234203d3e20323636303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.56.0/22
Signature Algorithm: sha256WithRSAEncryption
74:86:73:9b:9d:90:8c:63:db:74:86:4b:63:05:e4:f7:d8:13:
48:45:49:14:00:2b:b0:47:fe:bd:68:35:c2:d3:be:d4:9c:a5:
d1:94:18:d4:74:9c:2d:76:29:b9:4a:26:cb:a6:66:87:24:13:
81:5c:8b:07:ce:d3:05:0d:a3:7c:5f:47:23:57:27:57:3c:93:
c3:c6:45:4a:a1:0f:2a:fe:41:3b:97:28:ba:b3:e8:35:f3:48:
b7:46:12:a3:f9:f5:74:46:6e:39:d9:b0:5f:af:ef:a1:7a:38:
60:bf:5c:79:46:f8:30:71:10:f6:53:02:e1:b8:cb:e5:35:a8:
2e:09:11:96:e9:6b:fd:5e:b6:e1:38:1f:59:3b:2b:b7:11:f7:
49:9c:26:03:6d:ee:fc:03:71:d6:38:67:32:13:df:90:23:a9:
4e:30:f8:f8:fe:09:39:cd:e0:fa:8b:98:97:0c:9f:b4:56:9b:
1d:4a:2a:08:3b:b8:18:9e:90:74:fd:bf:37:32:52:02:ad:3a:
97:8a:6a:26:b5:e0:4f:b8:84:38:f5:eb:cf:0f:63:15:d5:a1:
97:6a:07:83:d8:54:90:ed:20:23:9a:21:c9:9e:78:5d:a4:6e:
03:00:46:0a:99:df:5c:ca:e7:b5:01:c5:35:43:65:c7:c5:be:
33:a2:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:46 2025 by rpki-client