Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/34352e362e36382e302f32322d3234203d3e20323730393835.roa
File: 34352e362e36382e302f32322d3234203d3e20323730393835.roa (raw, json)
Hash identifier: hXyiq2zxGnk7JnYWSKbOS5MsR1frkonmriZd3FSgxSM=
Subject key identifier: FE:CD:82:24:3F:09:B7:71:0D:94:16:F9:A7:59:EE:3C:CD:B3:ED:5F
Certificate issuer: /CN=9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D
Certificate serial: 7159E6145AC2F549A12E583C9B86C07D671321F9
Authority key identifier: 9A:C4:31:98:A2:CE:4D:BB:19:BD:A8:C7:E8:35:E6:C5:6F:D7:1F:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/34352e362e36382e302f32322d3234203d3e20323730393835.roa
Signing time: Fri 17 Nov 2023 19:15:03 +0000
ROA not before: Fri 17 Nov 2023 19:10:03 +0000
ROA not after: Fri 15 Nov 2024 19:15:03 +0000
asID: 270985
IP address blocks: 45.6.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:59:e6:14:5a:c2:f5:49:a1:2e:58:3c:9b:86:c0:7d:67:13:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D
Validity
Not Before: Nov 17 19:10:03 2023 GMT
Not After : Nov 15 19:15:03 2024 GMT
Subject: CN=FECD82243F09B7710D9416F9A759EE3CCDB3ED5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:da:1d:2c:75:86:ba:52:2f:ea:b5:14:07:
6d:21:40:0c:ef:4f:65:8a:b7:c4:a8:5f:62:79:64:
86:a9:88:1b:d5:93:e0:f4:c9:03:e3:2d:62:8d:f0:
ce:9c:bd:52:f6:1e:d0:ca:33:76:5d:28:fd:17:0d:
4b:08:f4:0c:2c:fa:d0:73:38:f7:db:d5:80:bc:2d:
8a:74:ae:f6:0f:0b:19:61:27:c4:88:86:b9:4f:11:
cc:22:eb:4b:f7:63:2b:e0:1c:cc:06:64:17:c1:ca:
a5:5d:51:dc:d3:87:f5:c9:84:1a:8e:7d:3b:30:b9:
34:c4:09:a8:88:36:60:c4:24:be:c7:30:e4:9e:d6:
61:bd:4f:ff:6d:2e:94:22:7e:07:f6:03:fb:11:d1:
a2:e2:d8:88:5f:6f:bd:b3:06:b1:3c:6f:d6:ee:e0:
91:5f:a7:94:13:3e:e4:51:b7:fa:f9:6e:7f:53:7e:
b0:39:fd:80:81:a4:c5:e6:cc:c2:91:d0:0e:9c:92:
f7:4c:b9:89:71:98:06:66:32:02:dd:b1:b2:70:f2:
9f:e2:eb:90:60:01:20:2f:7f:e9:91:5c:d8:69:75:
fb:51:7d:2f:a1:a5:db:a5:18:c8:50:bc:04:e7:2b:
0d:8a:51:66:3e:95:ee:ad:01:2d:28:4a:d5:8a:bd:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:82:24:3F:09:B7:71:0D:94:16:F9:A7:59:EE:3C:CD:B3:ED:5F
X509v3 Authority Key Identifier:
keyid:9A:C4:31:98:A2:CE:4D:BB:19:BD:A8:C7:E8:35:E6:C5:6F:D7:1F:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/34352e362e36382e302f32322d3234203d3e20323730393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:da:30:2b:82:cf:3d:b9:94:5c:39:bb:11:6e:3c:19:e5:de:
5a:56:98:e0:fb:14:6f:09:61:b6:3f:d1:7f:e7:c1:08:03:9c:
5c:95:3b:d0:59:ea:f1:1f:5f:b1:f9:ab:d8:3b:b5:e7:05:fd:
f8:93:04:5c:3a:d1:d7:b2:05:ff:9d:b8:65:30:fe:ae:19:ba:
6f:ba:87:13:7b:fe:56:47:be:9b:bb:dc:ba:ea:b5:24:cd:3f:
4d:d4:00:4a:5b:86:4b:33:40:6e:03:30:ca:9f:7d:52:0f:32:
61:3e:6e:05:b4:c4:9a:21:ef:62:bf:98:f6:a8:00:a3:4f:5b:
d6:a9:3e:75:06:0c:8b:96:d8:14:28:60:da:af:78:a6:38:74:
46:5f:ea:24:af:b0:27:7c:90:fa:9d:5d:77:34:f6:c3:d3:ed:
d3:d7:d9:96:d1:b6:f6:ba:75:15:07:f2:dc:2c:22:f4:b1:a8:
6a:24:b9:01:bd:cc:2b:bb:12:25:fd:33:75:8e:58:11:30:6c:
d2:ac:0d:ad:d5:09:e6:65:02:a6:13:dc:9d:4a:cb:f3:78:53:
3e:4b:28:7a:45:9f:0d:b5:4b:32:86:a5:f8:1d:01:79:ec:b3:
25:bd:11:51:79:87:47:29:84:3e:c7:41:6c:d9:e6:43:ac:cb:
b0:bf:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org