Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
File: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (raw, json)
Hash identifier: 6KZ5X2T+oF/5Jd1H74dNOYztbQynyTG3n9hM/S9Fh3E=
Subject key identifier: 9E:57:E5:62:ED:A8:98:75:AB:EE:27:80:EA:55:24:DB:18:71:50:3A
Certificate issuer: /CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
Certificate serial: 2A3AFC3400C715DBEF1227C0757F53DBFF8A3449
Authority key identifier: 79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
Signing time: Wed 03 Jan 2024 14:01:15 +0000
ROA not before: Wed 03 Jan 2024 13:56:15 +0000
ROA not after: Wed 01 Jan 2025 14:01:15 +0000
asID: 267324
IP address blocks: 45.233.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:3a:fc:34:00:c7:15:db:ef:12:27:c0:75:7f:53:db:ff:8a:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
Validity
Not Before: Jan 3 13:56:15 2024 GMT
Not After : Jan 1 14:01:15 2025 GMT
Subject: CN=9E57E562EDA89875ABEE2780EA5524DB1871503A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:a0:c6:60:c5:74:c8:9d:e5:97:bf:66:d6:
82:66:a0:f1:f9:b4:1a:56:37:16:21:29:e7:c0:13:
e8:3d:81:00:58:ea:ae:db:1e:68:8b:fd:a2:aa:a2:
0e:8a:34:97:1e:ec:2a:88:eb:9b:dc:24:f5:ef:70:
cd:df:5a:e5:49:a6:1f:92:f9:8a:36:66:06:22:e3:
1b:54:38:99:9c:ff:74:ef:7f:73:06:44:fc:66:e8:
f2:df:c0:1e:f7:9d:b7:50:36:92:a4:d8:77:49:66:
80:a9:39:db:6a:7f:c5:30:2f:0f:74:3f:f3:03:ad:
6d:7b:e8:0e:17:cb:d7:7f:59:54:c9:f3:6e:33:40:
f9:47:08:3a:17:18:4d:98:0c:d8:cc:31:46:e8:2a:
fc:6c:82:e9:16:c7:56:a4:c7:2a:73:8f:87:c2:4a:
6f:7c:7c:5f:2a:22:36:a9:52:42:9a:68:51:a6:fa:
9f:de:9b:f6:01:70:01:5a:4c:14:23:40:2d:d9:83:
21:00:7b:e9:8b:38:05:c9:b3:03:62:43:79:6b:a9:
06:70:55:ab:f8:66:68:f1:0c:65:a4:9f:b9:8f:a4:
b9:2e:d0:ef:6c:11:af:f3:b4:b1:31:45:9e:79:1b:
a5:50:23:da:d4:16:86:db:a2:69:c1:62:7f:44:de:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:E5:62:ED:A8:98:75:AB:EE:27:80:EA:55:24:DB:18:71:50:3A
X509v3 Authority Key Identifier:
keyid:79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:07:e3:64:3d:e7:e7:fa:62:a7:eb:f3:63:e0:83:52:c6:27:
30:d6:7e:f4:47:3b:0c:4c:24:b6:01:11:0b:44:c3:a3:64:89:
18:69:38:f1:93:76:da:1b:64:ef:84:b2:8b:e9:67:fe:5b:f1:
0a:41:f0:93:21:25:66:cb:10:c1:fc:c7:41:ee:b2:21:34:fe:
c2:63:ab:da:89:30:75:ad:54:54:58:03:f6:d4:df:82:4a:6f:
3c:67:83:99:ab:1a:e0:40:cb:22:94:21:36:fe:49:1e:9f:79:
fe:70:fa:f8:76:05:69:88:27:3a:7a:bf:7d:d0:d9:7a:87:ed:
45:8a:1d:c1:55:41:8b:c6:9c:8e:56:ef:99:ac:0d:ec:70:da:
46:05:0d:09:ab:71:3a:f3:c1:d6:18:13:b6:36:bc:3c:30:d6:
ac:4b:ca:d7:76:3e:ff:00:4e:f5:85:b1:d9:15:61:28:c5:90:
1c:8f:09:bb:c2:6e:86:94:7a:ee:a3:1d:77:31:ab:19:18:5e:
7f:88:24:80:1c:3c:59:3c:9a:8a:60:f8:40:e7:d4:80:9a:aa:
c2:28:42:66:15:95:d4:58:a5:4d:62:a3:78:96:e4:81:3a:3b:
59:35:76:69:20:ae:fa:b8:90:09:06:0e:d1:1c:d1:37:05:56:
97:a0:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org