Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32322d3232203d3e20323637303637.roa
File: 34352e3232382e38342e302f32322d3232203d3e20323637303637.roa (raw, json)
Hash identifier: hR/+rOYJKXaFVK0zpvEb8BL3j0uMwlI2WHx2eFNj2qA=
Subject key identifier: 4C:8B:27:79:55:23:11:C7:37:A2:22:E4:83:50:EF:E8:F4:44:BE:32
Certificate issuer: /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial: 7B896BAF38E6BA4F1FCF405102202DCE969DC762
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32322d3232203d3e20323637303637.roa
Signing time: Fri 23 Feb 2024 14:40:53 +0000
ROA not before: Fri 23 Feb 2024 14:35:53 +0000
ROA not after: Fri 21 Feb 2025 14:40:53 +0000
asID: 267067
IP address blocks: 45.228.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:89:6b:af:38:e6:ba:4f:1f:cf:40:51:02:20:2d:ce:96:9d:c7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Validity
Not Before: Feb 23 14:35:53 2024 GMT
Not After : Feb 21 14:40:53 2025 GMT
Subject: CN=4C8B2779552311C737A222E48350EFE8F444BE32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:1e:1e:67:52:71:6d:9a:5c:3a:ce:45:10:
b2:45:a4:3b:13:70:05:0f:83:fa:e5:63:c2:79:69:
f0:94:19:4e:1a:91:50:83:44:ec:d0:3e:7f:e5:ea:
d5:73:a4:0d:62:05:2c:a8:9a:5e:35:fe:47:85:16:
91:d0:c7:9c:7b:ce:99:90:8b:3c:a4:4a:7e:57:53:
32:6c:76:27:3e:4d:83:7e:a3:9d:1e:7c:a4:b7:92:
ea:b2:4d:27:77:96:8f:7c:1f:97:ab:7e:fa:4e:a8:
34:da:1f:2b:d9:e8:53:9d:8c:49:e2:a7:1c:5f:c4:
a5:94:3d:68:1f:90:b4:48:25:ad:3b:17:2c:f0:c7:
78:12:75:04:d9:23:21:3f:5a:91:48:af:51:ee:65:
b1:d5:81:04:f4:b1:cd:a8:0c:bc:34:f1:2e:e1:bc:
4a:03:ac:68:28:bc:3d:3a:63:53:c6:6e:a1:ca:c4:
37:6a:30:85:53:e0:47:9f:65:80:e7:bd:65:d3:0d:
71:3f:be:1a:93:7a:c6:03:b4:f4:0e:fb:6c:70:f3:
71:24:d0:6d:14:53:56:32:8f:6f:2f:d1:45:f8:c2:
30:22:50:0a:fe:39:c8:80:84:49:b0:34:28:92:cf:
d6:e6:04:dd:4b:6a:16:ae:d2:80:be:66:8a:31:9b:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:27:79:55:23:11:C7:37:A2:22:E4:83:50:EF:E8:F4:44:BE:32
X509v3 Authority Key Identifier:
keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32322d3232203d3e20323637303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.84.0/22
Signature Algorithm: sha256WithRSAEncryption
04:c0:77:d7:5b:07:44:9c:b4:24:61:28:eb:91:37:d6:44:11:
e9:54:72:8a:d2:45:50:cc:1e:ca:4d:3c:05:0c:0f:9c:20:aa:
93:14:ec:f3:90:1a:c6:ba:eb:93:e0:e9:12:99:3a:97:04:34:
9e:9c:3a:db:24:7f:7f:cb:1b:ba:7c:3c:e1:4f:5e:20:62:cd:
e5:c7:e5:3a:06:2d:f2:2b:39:a8:c6:65:72:6d:56:56:38:bc:
8f:e8:51:38:ea:da:f8:62:2b:10:91:32:27:ec:3b:a7:36:f4:
99:e7:ad:fd:ae:92:f8:04:95:fc:1f:f5:44:15:1d:c1:5e:96:
c7:1a:58:3b:a5:e0:c4:93:7c:2b:9e:f2:c0:6a:70:1e:f9:6a:
18:90:84:89:f1:fb:2d:55:4f:f8:b0:93:d7:fc:c9:2e:b6:83:
5a:7f:69:59:c0:ff:d1:d9:6b:2f:e4:f7:8f:bd:78:fb:86:8a:
af:06:09:40:62:76:97:97:d0:9f:05:f5:e3:99:00:92:88:e2:
69:8d:e7:3a:5e:ba:93:b5:3f:94:2d:ff:14:34:73:75:d2:10:
06:47:71:21:c9:c6:83:d0:75:86:49:be:a1:59:63:0b:b6:0d:
94:df:fc:57:b6:d4:ee:e7:56:27:5c:f2:4d:85:74:37:8d:55:
4a:22:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org