Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa
File: 34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa (raw, json)
Hash identifier: XSFiF/kFe/8XMwCMIrs6CT2kltZrEOwyRQKFWnE35uA=
Subject key identifier: 02:54:47:06:3F:C8:67:F0:D0:E5:C8:3A:B7:A2:FD:7C:50:30:1A:34
Certificate issuer: /CN=03B7839EAB56EABD873F350BD6ACC062C9336DAB
Certificate serial: 18BC3A38656C5519F055428E00B33177F3F023CB
Authority key identifier: 03:B7:83:9E:AB:56:EA:BD:87:3F:35:0B:D6:AC:C0:62:C9:33:6D:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B7839EAB56EABD873F350BD6ACC062C9336DAB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa
Signing time: Wed 10 Jan 2024 20:43:55 +0000
ROA not before: Wed 10 Jan 2024 20:38:55 +0000
ROA not after: Wed 08 Jan 2025 20:43:55 +0000
asID: 268535
IP address blocks: 45.162.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bc:3a:38:65:6c:55:19:f0:55:42:8e:00:b3:31:77:f3:f0:23:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03B7839EAB56EABD873F350BD6ACC062C9336DAB
Validity
Not Before: Jan 10 20:38:55 2024 GMT
Not After : Jan 8 20:43:55 2025 GMT
Subject: CN=025447063FC867F0D0E5C83AB7A2FD7C50301A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:11:01:5f:bb:93:d9:f2:36:84:5a:b1:86:00:
ff:23:69:bc:b2:76:55:01:b2:c9:a7:8c:b7:a2:e5:
6f:ab:1d:31:58:0a:b0:c9:ab:5b:bd:af:0d:5b:c6:
73:1a:d2:b9:03:fe:6a:65:50:46:92:77:4c:f7:51:
12:00:99:9f:7e:0a:d1:f9:aa:51:d7:3c:61:ec:48:
0a:1e:96:5d:e0:fe:98:51:62:6e:db:5d:b4:53:86:
58:ee:bd:33:80:16:44:21:9b:80:4d:ff:f8:ea:c1:
d7:ac:6b:9a:7e:af:cd:46:b9:13:0b:d6:6a:10:cb:
51:6c:c1:1d:85:b5:71:10:25:a4:a1:a1:a2:a4:9f:
59:4d:f4:a4:5d:4d:8f:51:f1:63:d3:1e:dd:04:ec:
b9:0a:bb:94:0d:93:65:2c:b1:ad:91:31:2c:e4:1b:
ec:af:f0:27:c7:12:4b:57:00:78:06:0b:38:7d:fa:
bd:e3:bd:b2:43:f6:21:fc:de:3d:2e:01:09:cb:48:
85:e8:1d:af:ed:30:b5:2b:34:0f:58:20:2a:ec:37:
e6:35:81:86:ec:05:25:07:15:54:90:f4:62:9d:89:
3f:b9:79:5c:65:f4:1f:77:4d:6c:9f:2b:18:65:c8:
12:57:81:08:57:3f:22:99:9e:70:c4:9e:1f:66:f0:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:47:06:3F:C8:67:F0:D0:E5:C8:3A:B7:A2:FD:7C:50:30:1A:34
X509v3 Authority Key Identifier:
keyid:03:B7:83:9E:AB:56:EA:BD:87:3F:35:0B:D6:AC:C0:62:C9:33:6D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/03B7839EAB56EABD873F350BD6ACC062C9336DAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B7839EAB56EABD873F350BD6ACC062C9336DAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/0/34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f2:79:8b:f0:a7:e6:8a:3a:fe:83:25:2d:48:60:55:ec:80:
6c:7f:cf:6c:34:39:3b:bf:dc:c3:7e:f3:f9:34:f4:2c:1b:bc:
3b:97:84:bf:c3:f2:0a:8c:ea:8f:89:2d:6e:dc:b6:80:4d:c6:
24:1b:a6:40:81:a5:90:be:cd:cf:fd:b7:8e:73:41:34:6b:e0:
7b:04:f2:ba:4a:ae:24:d8:e9:94:89:a4:73:77:f3:e1:89:e0:
1c:f3:84:20:bf:5c:89:7a:58:9b:06:b0:77:e4:5a:9e:83:88:
d6:93:9b:76:00:8d:5b:cd:54:53:a0:44:52:78:a7:43:0a:e0:
8a:50:d9:c8:e8:0a:50:ec:cb:32:65:99:f4:84:f9:94:c5:49:
e8:b5:bc:23:1d:78:ba:cf:55:32:d7:44:e4:7c:b3:26:60:6a:
34:89:cd:ed:02:b1:7f:fa:ff:1f:b9:d0:66:aa:f0:a5:94:00:
f7:11:22:d7:52:c3:5c:41:65:38:7c:85:c8:20:81:03:3a:27:
0e:c2:92:a6:18:72:fb:cb:7c:15:1a:7f:69:8c:12:08:41:e6:
e0:aa:f8:9d:62:93:90:36:d9:7a:b2:c7:d5:b0:0c:ac:3e:e6:
be:10:73:ab:d4:77:1d:8b:81:26:3a:04:44:35:2a:a3:79:a0:
72:f5:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org