Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e342e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: Kbcn3nwVfcey49nJZ2NkKdte5MQ3f4ALOu4ezCGDefc=
Subject key identifier: 9F:52:83:4A:D6:11:80:3D:05:D4:12:70:73:35:22:BC:AC:C6:F5:FF
Certificate issuer: /CN=88C04555C130EFBD50B75032689878210EFAA940
Certificate serial: 20CE6D879254E685B8D31B643AB65A3435BE4F3A
Authority key identifier: 88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
Signing time: Mon 18 Dec 2023 18:48:29 +0000
ROA not before: Mon 18 Dec 2023 18:43:29 +0000
ROA not after: Mon 16 Dec 2024 18:48:29 +0000
asID: 268308
IP address blocks: 45.238.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ce:6d:87:92:54:e6:85:b8:d3:1b:64:3a:b6:5a:34:35:be:4f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88C04555C130EFBD50B75032689878210EFAA940
Validity
Not Before: Dec 18 18:43:29 2023 GMT
Not After : Dec 16 18:48:29 2024 GMT
Subject: CN=9F52834AD611803D05D41270733522BCACC6F5FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:c8:dc:d1:6e:c1:c8:b2:31:0c:b6:56:b5:
95:4b:8f:32:1f:98:47:72:9a:bb:b2:26:53:1f:b1:
45:cc:93:39:06:16:38:69:b5:af:5f:e2:82:24:89:
6f:37:a0:00:4d:a5:2d:b3:96:be:b2:4a:91:2d:4c:
0c:37:f2:c8:d5:70:78:66:ce:74:bb:42:19:be:89:
16:67:3d:c2:c6:a1:75:95:6b:82:22:c1:44:31:02:
88:4f:44:a4:58:3f:ab:bf:d7:33:c0:ce:1d:4c:f4:
f0:e1:f2:d1:e4:be:94:f0:42:3f:ef:a3:d4:07:ed:
8a:e2:d3:24:81:6f:b5:99:ab:11:c9:da:53:f3:66:
49:3c:ea:a5:1f:28:92:83:3e:a8:a5:65:37:79:f6:
d0:b3:60:ce:b8:97:ac:d9:e7:12:c1:37:a7:82:9c:
0b:75:ca:d0:07:4c:d3:47:d9:a7:ae:e9:e4:30:4d:
a5:52:62:84:d4:d3:79:dc:d2:53:31:50:b9:8d:49:
13:1a:17:35:b9:a0:4a:7c:26:60:00:d2:c8:ac:51:
10:8e:69:b1:d3:22:29:50:83:a1:7a:a4:05:e3:47:
7e:26:98:32:54:5e:95:7b:b9:ba:10:cb:31:b1:9c:
98:79:2d:4e:04:bc:b6:86:f8:05:e7:9c:44:27:55:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:83:4A:D6:11:80:3D:05:D4:12:70:73:35:22:BC:AC:C6:F5:FF
X509v3 Authority Key Identifier:
keyid:88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/88C04555C130EFBD50B75032689878210EFAA940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:66:13:02:d4:32:37:b4:e3:87:6f:ff:78:bb:72:81:ef:6e:
ae:26:f3:eb:48:34:02:35:04:bc:aa:d8:9a:30:9c:9a:4f:69:
b7:80:e6:af:04:65:f9:14:a1:3a:b1:f2:a1:dc:c0:7f:26:3d:
fb:07:6c:a1:91:41:ec:9a:b4:38:1b:d7:7b:e9:63:ed:11:2c:
2a:5b:ac:ba:b3:8e:fd:de:73:5e:4d:7f:0d:02:64:a5:6e:9c:
83:0f:8d:ab:79:38:e5:8b:2c:82:40:2d:53:ef:9d:89:d5:ed:
d2:38:7e:fe:96:b7:b8:b6:c1:dc:78:47:64:aa:c7:c7:09:74:
0d:a0:b0:1a:57:e8:42:62:8b:fc:d1:01:82:06:0a:f1:12:46:
7d:dc:b0:f8:85:cc:c4:9c:5a:8e:44:0b:ec:f9:cb:6e:a4:0d:
f9:d3:c2:41:4a:9e:16:63:16:04:c0:15:99:56:4a:c0:ae:0f:
14:f6:72:31:d6:52:dd:2a:2b:ae:0b:36:43:60:66:3f:dc:3d:
39:1a:57:37:72:5a:eb:f3:17:a3:fc:58:c5:8b:88:df:35:95:
ad:13:d0:89:50:09:9d:73:ca:6d:5c:f4:f9:63:b1:e2:ea:dc:
44:09:80:eb:ba:6e:b5:b3:06:df:f2:b1:cb:77:11:68:f8:ef:
de:95:98:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org