Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32322d3232203d3e20323638333535.roa
File: 34352e3233392e37322e302f32322d3232203d3e20323638333535.roa (raw, json)
Hash identifier: fER4ysvKo/NRLaokfqAWX7Xz1IG8VPcyiu9GnbE7jro=
Subject key identifier: FF:41:72:5B:6D:F1:81:5B:A5:42:48:EE:C7:11:76:1B:97:EA:3F:A5
Certificate issuer: /CN=2DD7DB25073BEE444F1A2C15B600446279751268
Certificate serial: 6EEA0A0F5569178841C81A91448DBED2840770C6
Authority key identifier: 2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32322d3232203d3e20323638333535.roa
Signing time: Mon 04 Dec 2023 15:05:16 +0000
ROA not before: Mon 04 Dec 2023 15:00:16 +0000
ROA not after: Mon 02 Dec 2024 15:05:16 +0000
asID: 268355
IP address blocks: 45.239.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ea:0a:0f:55:69:17:88:41:c8:1a:91:44:8d:be:d2:84:07:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD7DB25073BEE444F1A2C15B600446279751268
Validity
Not Before: Dec 4 15:00:16 2023 GMT
Not After : Dec 2 15:05:16 2024 GMT
Subject: CN=FF41725B6DF1815BA54248EEC711761B97EA3FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:ee:65:4a:80:7d:51:6d:08:da:b9:73:d7:
65:68:a8:0a:8d:c5:b6:4c:97:bc:41:9f:4f:f5:ba:
35:7c:5d:ca:87:85:ad:64:3a:a4:79:60:bd:cb:dc:
66:db:f9:bb:5a:75:3e:3b:72:8f:51:56:04:fb:34:
54:82:22:36:12:83:2a:26:26:8f:16:f4:43:e5:79:
f1:9e:df:4b:fa:bb:35:40:fc:c1:72:33:05:64:4e:
af:e2:e7:20:1f:a5:7a:17:fd:83:9c:fb:dd:73:b3:
40:7f:58:2a:0e:ff:e9:14:31:f8:4b:3e:48:96:df:
88:35:54:16:9e:47:60:65:00:83:06:74:5e:a2:51:
6d:33:19:b1:f0:5f:3f:57:cf:19:a0:3f:86:6f:eb:
50:d0:08:8f:bf:f1:c0:3c:5b:34:68:b6:b9:41:49:
b8:ff:f3:f6:2c:ed:ca:6d:11:7b:d9:7b:9f:65:dd:
64:c5:5b:2f:e7:78:78:0d:7f:4c:f2:ef:bb:1e:c8:
0c:d4:c2:1f:a2:14:b0:f6:a0:e6:97:fa:21:3c:24:
04:f9:80:21:f1:5d:77:d8:b8:f7:ae:e3:77:ef:76:
19:6d:6c:c3:d3:a6:1a:25:b1:fc:93:c1:a3:63:8f:
db:31:8d:1a:76:29:6f:49:1b:bb:70:2d:0f:df:43:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:72:5B:6D:F1:81:5B:A5:42:48:EE:C7:11:76:1B:97:EA:3F:A5
X509v3 Authority Key Identifier:
keyid:2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32322d3232203d3e20323638333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.72.0/22
Signature Algorithm: sha256WithRSAEncryption
88:5e:c3:1d:2b:dd:6b:3a:b8:5a:2f:9a:77:7a:16:d9:88:94:
ef:2f:b4:70:00:5b:55:f4:2b:04:16:77:9a:2f:c2:1e:7b:77:
41:a8:8b:7a:51:85:6c:7b:bf:5d:aa:f8:f2:b2:71:09:b6:94:
37:95:3e:32:7b:8b:4d:87:42:39:06:67:c4:44:4d:db:27:67:
e3:32:c2:d7:ca:be:59:ee:c9:0f:17:dd:25:4b:e8:13:0e:04:
7a:7b:cc:b6:15:f0:15:d9:89:0f:9e:ba:a2:e6:a3:49:a7:37:
e2:05:40:07:26:c7:e4:dc:06:8e:2f:13:e9:e0:31:a9:6e:f6:
cb:b1:3a:09:49:23:48:69:c6:a7:46:eb:1f:13:6a:42:04:ac:
ed:78:e2:fd:31:f6:b4:86:41:24:eb:11:6e:cd:1e:e6:94:64:
f2:e9:49:72:6e:4d:9d:90:51:2e:31:6b:c1:5e:f6:a6:cd:82:
7a:ec:4c:03:44:71:98:9d:87:df:c4:cf:25:1b:f6:8c:2a:cc:
64:3a:46:b3:43:b6:bd:7d:70:79:19:ca:e0:d8:aa:1f:1f:64:
02:77:df:d1:02:e6:b9:85:9a:c1:11:16:83:41:f3:87:0b:94:
d4:6d:cf:19:80:82:f2:35:b5:85:2f:73:51:fd:99:2f:ff:60:
54:88:e4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org