Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e20323033.roa
File: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier: gl27s5rDWpSQYGCqOzZv6csR0Oc0zBIXwHKiz5sw22w=
Subject key identifier: 54:B1:E1:60:5E:3B:F4:86:58:0B:3E:AF:1A:20:A7:77:74:45:46:12
Certificate issuer: /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial: 203417E788A69A1CEB3FD660D63A9E221D3F6D18
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e20323033.roa
Signing time: Wed 29 Nov 2023 09:55:34 +0000
ROA not before: Wed 29 Nov 2023 09:50:34 +0000
ROA not after: Wed 27 Nov 2024 09:55:34 +0000
asID: 203
IP address blocks: 45.65.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:34:17:e7:88:a6:9a:1c:eb:3f:d6:60:d6:3a:9e:22:1d:3f:6d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Validity
Not Before: Nov 29 09:50:34 2023 GMT
Not After : Nov 27 09:55:34 2024 GMT
Subject: CN=54B1E1605E3BF486580B3EAF1A20A77774454612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:03:f0:04:42:07:1b:00:32:2d:91:45:05:
4a:07:49:c2:c8:3e:cf:52:ba:4e:ad:30:92:f6:a6:
54:29:7e:6c:da:a6:f0:6b:2c:aa:96:66:1d:cc:cb:
e0:5f:73:6a:17:b0:a5:0d:7f:30:9a:25:79:b9:06:
d2:5a:0a:ef:84:5b:80:2e:8a:98:65:d1:af:b2:ad:
5b:a6:8e:09:1e:9f:71:ef:ac:51:c8:29:a2:67:15:
e6:bb:8e:b6:1d:ea:a8:b2:e0:c1:21:64:3c:09:ad:
a9:99:05:c0:22:cf:59:f1:67:3b:93:97:29:55:d8:
62:35:21:53:b0:f9:1b:50:63:dc:49:b9:00:6d:fc:
d3:7d:f8:8b:b2:c5:c5:b0:c0:54:66:d5:8b:78:b0:
e3:69:f6:87:4e:20:1c:bb:21:b2:5c:19:5d:69:ab:
e7:3a:f3:3d:52:64:c8:ab:59:7f:c7:86:e8:b9:7b:
b5:99:33:04:b4:fd:a8:9e:a5:3a:09:e3:d6:a0:fc:
69:bd:82:c8:61:14:c9:35:d6:8e:c8:7a:3a:c1:3a:
cf:52:e7:59:03:7d:9e:4d:fd:8f:ee:58:2d:2f:3d:
f3:c2:90:4b:af:a3:38:4b:aa:48:8d:b1:f9:61:32:
67:8b:c0:76:32:c0:e4:64:4e:81:5c:92:f1:12:25:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:E1:60:5E:3B:F4:86:58:0B:3E:AF:1A:20:A7:77:74:45:46:12
X509v3 Authority Key Identifier:
keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.220.0/22
Signature Algorithm: sha256WithRSAEncryption
18:47:99:c2:b0:fa:89:c0:4f:23:95:17:11:8a:98:6c:54:ed:
40:cc:92:53:28:9d:4d:9f:27:5a:af:54:99:99:28:c8:26:41:
8a:7e:53:24:bb:9b:7f:58:f3:ca:f7:51:f1:59:09:2e:e2:69:
5d:52:84:1d:d4:30:68:0a:d2:8f:6d:cc:96:c2:2a:fd:cc:1d:
9d:78:37:2c:b0:49:fd:ca:18:c9:ad:97:89:f1:d8:ce:01:54:
e9:91:6f:53:3f:e7:9e:b4:a8:33:45:b8:4f:f9:b7:26:c5:f9:
28:91:77:e9:2b:76:63:39:f2:51:26:d6:e0:05:0a:c3:2b:68:
60:b8:2d:bd:d1:c0:a4:6c:43:95:68:e3:52:a5:8f:4a:b4:bf:
57:bc:34:6b:48:50:2f:ee:40:7a:b6:69:98:86:62:ff:b4:d2:
96:c6:61:82:c3:32:b9:6b:5e:2b:3b:62:44:01:9d:fe:35:2c:
97:96:c8:3e:75:50:54:55:3e:cd:44:97:93:05:e7:86:a7:3e:
03:1b:71:2b:87:7f:0f:36:f1:b8:a4:d0:92:60:8b:b1:f9:44:
47:63:5e:3d:88:dd:f9:c7:0d:2d:d8:7e:b5:c4:56:96:54:d9:
fe:84:99:a9:ad:ca:b7:b3:09:20:b1:de:07:bb:cc:c2:71:cb:
1a:a5:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org