Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32342d3234203d3e20323634333836.roa
File: 34352e362e3234302e302f32342d3234203d3e20323634333836.roa (raw, json)
Hash identifier: p9QRRcIJfQF/tnEUVYFWqwOFTXCd8JgBU0WI8DgXa7A=
Subject key identifier: A4:67:E2:D1:07:B3:78:34:84:41:C4:E8:80:8E:E5:F9:39:DB:C1:44
Certificate issuer: /CN=7CAEA8972637476DBD3EB95073B9755AF312D410
Certificate serial: 46ED2CE35DFD1E1E55F9722B48B37602FBA1A665
Authority key identifier: 7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32342d3234203d3e20323634333836.roa
Signing time: Tue 12 Mar 2024 17:38:36 +0000
ROA not before: Tue 12 Mar 2024 17:33:36 +0000
ROA not after: Tue 11 Mar 2025 17:38:36 +0000
asID: 264386
IP address blocks: 45.6.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ed:2c:e3:5d:fd:1e:1e:55:f9:72:2b:48:b3:76:02:fb:a1:a6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAEA8972637476DBD3EB95073B9755AF312D410
Validity
Not Before: Mar 12 17:33:36 2024 GMT
Not After : Mar 11 17:38:36 2025 GMT
Subject: CN=A467E2D107B378348441C4E8808EE5F939DBC144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:15:c6:c4:ba:dc:2d:f3:29:00:a9:75:bd:
d4:d8:b7:78:94:5e:58:49:b2:8b:63:d6:41:81:68:
de:87:b3:5e:32:93:69:b3:32:5e:50:7b:e8:06:cc:
66:e5:60:3e:ec:15:18:fe:48:ed:3a:00:17:24:a7:
80:a7:76:44:8c:ff:5f:91:8f:9c:ad:f7:ff:e1:6f:
9e:2b:fc:0d:6b:a0:28:df:41:53:b5:03:41:29:39:
b9:3a:eb:73:4a:4b:7f:9b:15:d4:95:a3:d0:11:00:
9c:0a:32:05:ca:33:31:b9:59:de:e8:c1:54:10:e4:
bc:37:2b:7d:79:ee:74:c8:f8:2f:e1:dd:0e:94:5b:
56:62:2f:6f:c0:7e:69:6a:6e:88:5c:67:23:00:72:
3a:31:c8:be:fd:ef:6f:2e:a7:0b:bc:26:09:d6:af:
1b:c3:87:01:97:b9:5e:58:de:25:ba:4a:11:3f:31:
d3:d6:5c:dd:a2:22:95:b4:4c:3e:97:4b:6e:87:97:
5d:bb:ad:be:56:17:f7:3e:f7:6b:71:79:ba:1f:6b:
1b:d6:8f:c3:7a:e4:86:9f:b9:4c:3a:4d:85:54:d9:
be:80:e1:07:89:e1:fb:7b:11:af:0a:de:9c:d0:ec:
6c:2d:99:70:fc:8f:a2:21:25:9f:82:f4:dc:8c:96:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:E2:D1:07:B3:78:34:84:41:C4:E8:80:8E:E5:F9:39:DB:C1:44
X509v3 Authority Key Identifier:
keyid:7C:AE:A8:97:26:37:47:6D:BD:3E:B9:50:73:B9:75:5A:F3:12:D4:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/7CAEA8972637476DBD3EB95073B9755AF312D410.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAEA8972637476DBD3EB95073B9755AF312D410.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32342d3234203d3e20323634333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.240.0/24
Signature Algorithm: sha256WithRSAEncryption
be:d9:01:30:4b:ba:31:0f:d5:00:21:4b:16:73:67:f6:d5:3e:
be:cf:1b:c1:68:3a:b9:45:19:4a:95:f1:93:42:07:a8:57:5c:
b8:bb:63:61:20:03:98:5f:55:b5:46:f3:b7:69:5b:ee:7c:ab:
b8:11:c8:9c:4e:39:ee:db:8e:15:a8:d5:2a:5a:ec:e8:fc:2f:
18:b2:1a:2f:95:17:c8:c5:41:21:4c:38:ce:41:c4:2e:41:6a:
76:03:7f:8d:25:c7:3e:f5:8c:35:87:92:79:84:1b:8d:2f:a3:
60:5e:f6:e1:b5:5a:00:25:7e:92:47:54:14:59:e4:27:29:0f:
3f:59:58:6d:ab:08:cf:71:95:76:35:b0:b0:8b:bf:f9:be:a7:
d5:52:06:21:05:01:2e:88:1f:32:24:e2:d4:50:0f:62:8f:fe:
7a:23:b9:c1:fc:64:8e:b9:d7:1d:16:da:42:2d:64:59:1b:c8:
22:4c:75:3c:1e:be:d3:e4:ab:f1:58:85:8c:08:11:bc:ce:74:
be:51:f3:b2:72:8f:a9:7a:9f:d6:ac:63:64:65:3b:b8:94:7e:
f8:79:45:21:d4:3c:08:b6:e7:dc:ef:b6:41:de:d6:f8:9b:36:
e0:2f:06:bd:29:24:b1:df:ba:f0:b7:be:e1:0b:1f:c9:f4:ef:
8c:72:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org