Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
File: 34352e3139312e3230342e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier: QC7IvdfLTLc9JbRn/v+DbUrjjPnOxuGF+5cN6Y4ivNk=
Subject key identifier: A0:AD:49:11:F6:DC:8C:24:14:BE:51:D8:66:56:75:5B:CF:B9:5A:20
Certificate issuer: /CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Certificate serial: 55B8975BDA33F2AAD5FFC8C547CD9C05CA871F39
Authority key identifier: EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
Signing time: Wed 29 Nov 2023 10:55:35 +0000
ROA not before: Wed 29 Nov 2023 10:50:35 +0000
ROA not after: Wed 27 Nov 2024 10:55:35 +0000
asID: 3356
IP address blocks: 45.191.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b8:97:5b:da:33:f2:aa:d5:ff:c8:c5:47:cd:9c:05:ca:87:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
Validity
Not Before: Nov 29 10:50:35 2023 GMT
Not After : Nov 27 10:55:35 2024 GMT
Subject: CN=A0AD4911F6DC8C2414BE51D86656755BCFB95A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:45:23:dd:9a:69:04:f2:e5:58:66:fa:03:
b1:7f:93:e9:96:b3:a1:3b:55:57:fa:77:56:31:da:
f9:4e:0e:23:1b:1d:96:91:bb:3a:d9:de:37:d5:24:
a7:1c:f4:0b:f4:90:d0:4b:92:b2:7e:2f:19:e9:e0:
75:44:cc:93:0b:5a:a1:be:74:45:6a:7e:6b:60:14:
fd:d4:2d:0f:a7:54:ad:d0:76:1b:c7:00:ce:13:9c:
39:3d:01:c1:77:d0:38:06:85:0d:c4:31:88:15:81:
71:e7:f1:28:aa:cf:44:1d:67:07:7a:9a:03:b9:c9:
10:64:99:15:02:f1:e1:f6:0a:9a:9b:39:b6:1d:1a:
fe:7c:c5:b1:25:10:c4:3d:29:03:27:6f:7a:cb:9a:
a2:4d:27:1c:dc:bf:2b:9d:3a:94:c9:7d:d0:b7:51:
f7:15:f3:a5:55:dc:3b:ed:3d:15:28:59:ec:da:09:
a2:8a:23:9d:1d:13:2c:73:1e:db:9b:78:e8:b7:39:
17:89:49:54:6a:b2:0b:9d:c9:66:83:92:cd:6a:5a:
16:c8:10:cf:ea:a5:20:ca:f7:ba:c6:7e:f2:a3:df:
a6:91:49:35:6f:da:82:a7:44:9e:20:32:d4:dc:6a:
e4:db:08:3c:52:d4:fc:ab:a0:93:5c:26:e3:db:f7:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AD:49:11:F6:DC:8C:24:14:BE:51:D8:66:56:75:5B:CF:B9:5A:20
X509v3 Authority Key Identifier:
keyid:EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:d1:d7:47:d1:bd:99:5f:6c:7e:9d:84:6f:c1:0f:73:56:b0:
79:9d:d0:49:24:5f:b6:6b:1c:55:06:9e:55:f7:af:8a:4b:5c:
d2:ca:a2:9f:2c:cc:a6:df:49:30:4b:b6:71:22:5e:d4:14:31:
8e:df:0e:48:a2:e6:49:05:f2:3e:7c:24:c2:a1:ea:18:e6:7e:
e5:16:70:fd:4a:f7:76:50:c0:c1:2c:b7:a8:dd:85:4a:f4:bb:
3c:1c:3c:ad:a1:99:8d:eb:5c:df:53:e3:0b:5f:3b:d8:d7:f1:
b0:19:07:ac:e1:98:a2:17:ff:e2:b1:9c:26:f0:80:5c:9e:6a:
8f:e5:b9:6b:03:17:73:62:33:de:48:ab:23:b4:68:31:34:ac:
e2:62:de:e2:87:ef:84:d3:91:0d:a6:f0:23:9d:3a:eb:86:0e:
f9:55:91:51:0e:5b:fa:df:24:dc:92:1a:bc:31:55:75:cd:cd:
1a:be:90:26:a4:ce:3d:3d:c0:44:4b:42:86:0d:5b:bc:d8:45:
12:4a:d6:1e:09:4a:c6:be:78:3f:7e:d6:ce:cc:fd:ae:54:dc:
ea:0b:80:80:72:e3:d9:34:d5:bb:7f:69:56:9d:c7:13:7d:de:
c0:7b:d7:2f:63:59:a1:2b:c6:a9:ca:a4:3a:63:78:89:37:cd:
6a:1b:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org