Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/34352e3137312e31322e302f32322d3332203d3e20323638313737.roa
File: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (raw, json)
Hash identifier: TgGC/UbAEnoCDV4QJPYfQMHinfxBfu9NKLXoTdGPv34=
Subject key identifier: 02:F6:B4:74:F2:86:AA:A9:5E:60:0D:87:3E:FA:1B:76:33:11:8C:CE
Certificate issuer: /CN=D89B0FED7D290296B533B374765DEA8424476141
Certificate serial: 33BC576E69A897431F16DDD6631A0185A6DA6767
Authority key identifier: D8:9B:0F:ED:7D:29:02:96:B5:33:B3:74:76:5D:EA:84:24:47:61:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D89B0FED7D290296B533B374765DEA8424476141.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/34352e3137312e31322e302f32322d3332203d3e20323638313737.roa
Signing time: Mon 25 Mar 2024 13:21:45 +0000
ROA not before: Mon 25 Mar 2024 13:16:45 +0000
ROA not after: Mon 24 Mar 2025 13:21:45 +0000
asID: 268177
IP address blocks: 45.171.12.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:bc:57:6e:69:a8:97:43:1f:16:dd:d6:63:1a:01:85:a6:da:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D89B0FED7D290296B533B374765DEA8424476141
Validity
Not Before: Mar 25 13:16:45 2024 GMT
Not After : Mar 24 13:21:45 2025 GMT
Subject: CN=02F6B474F286AAA95E600D873EFA1B7633118CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:ac:f3:b0:74:d1:0c:94:18:10:05:6e:6a:
bf:0c:31:b3:2c:2d:ea:06:e9:84:e1:36:84:b6:08:
86:fa:af:9a:3f:5f:41:e2:3b:5d:6f:a2:55:f1:38:
4b:2b:37:27:6a:9f:7c:df:0e:0b:ba:22:1e:93:55:
1e:a4:61:60:5e:e0:0a:f3:aa:da:2f:9b:bc:5d:58:
e7:0c:6c:76:a5:33:7d:31:0f:a0:04:95:e5:43:88:
f8:5f:e5:20:bf:5c:b0:d8:8f:4d:2e:b9:6d:a0:fa:
90:d2:db:59:50:db:de:75:7a:82:56:42:f5:4a:1f:
01:e6:26:06:79:c7:ac:b6:d9:2d:25:c6:08:82:20:
01:29:6e:73:ed:a6:e5:d2:60:af:95:5e:7f:f4:53:
48:e1:ba:42:a9:60:15:ee:d0:a3:cc:98:b8:e1:0c:
30:f0:31:dd:df:e5:0b:4c:98:cb:a9:66:14:1f:1b:
27:9b:cd:cc:28:8c:4d:13:8a:af:c5:f0:6b:9f:da:
8f:fe:48:94:ab:6f:e0:47:f1:e8:c1:27:80:7a:c2:
ad:5a:41:f4:36:69:f1:02:da:fe:59:07:9c:9a:c1:
6b:65:65:d5:2b:90:be:87:49:4b:a9:1c:8d:0b:22:
2a:b9:3c:b9:13:4e:e7:c3:19:a2:ce:e4:5f:c8:b2:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F6:B4:74:F2:86:AA:A9:5E:60:0D:87:3E:FA:1B:76:33:11:8C:CE
X509v3 Authority Key Identifier:
keyid:D8:9B:0F:ED:7D:29:02:96:B5:33:B3:74:76:5D:EA:84:24:47:61:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/D89B0FED7D290296B533B374765DEA8424476141.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D89B0FED7D290296B533B374765DEA8424476141.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/34352e3137312e31322e302f32322d3332203d3e20323638313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.12.0/22
Signature Algorithm: sha256WithRSAEncryption
85:5c:f9:73:07:de:1c:d6:1f:59:08:1e:33:74:26:5b:e6:fe:
f7:64:00:fd:92:a0:a9:58:af:09:29:94:85:80:12:90:f5:12:
f3:60:05:42:be:d6:13:cf:e2:4e:c4:2f:f0:56:ba:24:a3:82:
73:a9:55:c8:07:38:4c:16:1b:99:41:7e:41:dd:f4:e0:b5:27:
a6:77:4c:fe:93:ee:ee:92:ba:42:c4:4c:e1:3b:05:2e:65:d5:
29:69:00:6d:50:45:ea:d7:5d:04:65:99:62:37:6b:43:04:99:
20:35:d5:d8:09:0f:53:39:fd:16:7d:67:a0:ad:96:4d:25:6c:
33:c3:0c:57:61:a1:e2:a0:a5:87:5a:50:a4:7f:f7:3f:1a:05:
18:49:d0:0c:2a:6d:9f:bc:0a:40:61:21:ba:25:da:db:85:02:
4e:a0:8e:3f:ca:23:89:32:a7:68:ca:ee:e4:4a:5b:d3:58:2c:
78:5a:e2:1e:a9:89:6c:c4:bb:89:f0:92:71:14:5d:82:bb:59:
66:52:9f:f8:eb:e9:73:19:75:3c:69:47:d7:43:70:59:fd:23:
7e:1e:27:9b:e1:95:a8:3b:55:86:3f:84:f9:ea:67:a5:23:19:
91:69:43:d5:21:10:a3:d0:6f:f8:03:38:19:42:2e:5b:e0:07:
83:76:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org