Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136382e302f32342d3234203d3e20323637363232.roa
File: 34352e37312e3136382e302f32342d3234203d3e20323637363232.roa (raw, json)
Hash identifier: R3oZEkTS9KLOmF75iKl6ULby8yAkaZqew0pSdOE4PBA=
Subject key identifier: DC:3D:25:BC:7E:51:26:81:DC:5D:D8:E5:2F:8E:1B:28:6C:FC:BA:2B
Certificate issuer: /CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
Certificate serial: 6542D25E73FB5B352A244DDF479520C1076DD8E1
Authority key identifier: BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136382e302f32342d3234203d3e20323637363232.roa
Signing time: Wed 29 Nov 2023 03:49:44 +0000
ROA not before: Wed 29 Nov 2023 03:44:44 +0000
ROA not after: Wed 27 Nov 2024 03:49:44 +0000
asID: 267622
IP address blocks: 45.71.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:42:d2:5e:73:fb:5b:35:2a:24:4d:df:47:95:20:c1:07:6d:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
Validity
Not Before: Nov 29 03:44:44 2023 GMT
Not After : Nov 27 03:49:44 2024 GMT
Subject: CN=DC3D25BC7E512681DC5DD8E52F8E1B286CFCBA2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:af:7a:8f:23:b9:3c:0d:55:07:74:bd:00:
af:5d:aa:6e:09:cb:f3:70:87:26:81:ae:04:64:fb:
3f:9c:cd:85:08:5d:64:f8:5f:c9:6c:aa:38:be:18:
71:27:85:e2:43:c4:ef:dd:00:b2:30:a5:15:c7:78:
47:49:92:37:c5:f2:09:6c:54:40:7d:e9:0c:49:59:
8a:66:08:a5:2e:4b:62:2b:7a:2c:6d:78:de:d4:d8:
9c:4c:4f:5c:95:fd:2a:72:6b:b7:19:5c:3c:d3:9e:
6d:f9:1c:9e:06:ad:2e:77:5f:ea:cf:d6:59:20:6b:
81:1f:4f:b7:03:6a:8f:1f:e3:fb:df:28:03:37:74:
b6:d3:5c:bd:46:67:1d:59:b0:c8:39:1f:c9:5c:25:
c6:11:34:78:51:b1:13:92:3e:fa:0e:59:74:5b:0d:
49:7e:2a:ca:ee:18:7a:81:c1:04:45:2e:e8:ba:50:
79:2a:a2:97:b8:28:98:bc:dd:91:f6:cd:a2:a7:a5:
79:10:57:1d:91:d4:87:cc:9f:d4:40:2f:b2:af:3e:
00:b2:fc:e8:93:1b:a0:1b:94:09:aa:b3:de:e8:ca:
cc:f8:be:32:51:0b:27:d9:d7:19:14:7b:ed:4c:22:
a4:a0:07:1d:48:9e:de:7e:34:43:60:9f:46:28:29:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3D:25:BC:7E:51:26:81:DC:5D:D8:E5:2F:8E:1B:28:6C:FC:BA:2B
X509v3 Authority Key Identifier:
keyid:BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136382e302f32342d3234203d3e20323637363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:15:1f:ef:fc:54:cd:36:9f:6d:33:40:e0:b4:11:bc:d0:c7:
d5:66:a9:c0:c5:69:83:72:8f:cb:2d:d4:21:9a:55:c9:51:eb:
e1:d6:3f:65:18:77:1d:4f:5b:c9:6d:96:9d:f8:2a:a7:c7:2e:
f0:4a:de:e3:ad:57:f4:dd:a9:3e:97:75:f3:36:3c:43:1c:82:
71:a1:e5:4e:93:ab:a7:46:d5:57:43:c4:05:05:a7:36:0a:a3:
a4:f7:6d:f6:7c:0f:54:79:b3:37:1e:ab:26:31:e2:02:f7:46:
1a:44:ed:f7:0b:a4:e1:54:ec:c4:94:eb:03:41:56:d2:b3:c4:
fb:5d:31:0c:7c:a3:f1:c9:ec:9f:85:98:26:39:7c:2f:0e:bc:
71:c8:4c:9e:8d:1c:84:bb:e2:48:b3:16:7c:1f:bc:d5:f7:8c:
9c:cc:9a:e5:b3:03:40:5e:57:f7:e9:82:47:18:81:97:14:5d:
46:1a:c4:54:62:b2:68:cf:66:ad:c6:83:2a:c2:fc:b4:07:a8:
84:5a:17:9d:48:59:c3:2b:5e:b0:28:e5:23:72:5a:0b:d4:d7:
04:85:55:75:74:2d:69:ca:18:b7:6b:a0:2c:85:f0:9d:6a:d5:
1c:78:e4:3d:95:0a:ba:e2:79:0b:d1:f5:c1:61:78:ab:9a:5a:
27:0c:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org