Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37342e302f32332d3233203d3e20323638333535.roa
File: 34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (raw, json)
Hash identifier: ldd3XBVf8hSN+fcL3fEEvDHyc5du0qlEplLoFgLP4o0=
Subject key identifier: 2F:05:96:C0:D9:E8:63:9C:1B:F8:19:34:4C:95:98:75:B4:7B:98:2C
Certificate issuer: /CN=2DD7DB25073BEE444F1A2C15B600446279751268
Certificate serial: 20F4509B187642A22B4E1811DD32450F020B1614
Authority key identifier: 2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37342e302f32332d3233203d3e20323638333535.roa
Signing time: Mon 04 Dec 2023 15:05:16 +0000
ROA not before: Mon 04 Dec 2023 15:00:16 +0000
ROA not after: Mon 02 Dec 2024 15:05:16 +0000
asID: 268355
IP address blocks: 45.239.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f4:50:9b:18:76:42:a2:2b:4e:18:11:dd:32:45:0f:02:0b:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD7DB25073BEE444F1A2C15B600446279751268
Validity
Not Before: Dec 4 15:00:16 2023 GMT
Not After : Dec 2 15:05:16 2024 GMT
Subject: CN=2F0596C0D9E8639C1BF819344C959875B47B982C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:c4:92:ea:88:47:46:e0:66:bd:54:6c:79:
d0:88:a1:fd:4b:09:2f:3d:c8:1e:80:34:4e:71:be:
b2:1d:49:b5:88:db:95:a9:43:19:42:0b:99:00:04:
66:fa:63:8b:8b:4c:92:bb:bd:de:9b:73:d7:15:f0:
ab:bc:7d:eb:a9:52:02:24:70:17:2f:48:a8:2c:22:
50:d6:20:37:7a:91:6e:40:24:58:3a:de:d8:e4:c3:
1d:ae:8e:ef:f3:24:5d:2c:2b:58:59:b0:c7:ff:2d:
56:f3:17:08:aa:5d:c8:e7:7d:80:02:af:8e:9d:6f:
49:33:34:cc:00:7b:25:91:64:ba:b4:24:f2:89:9e:
c3:d1:c7:e4:b7:6f:d0:20:94:ab:b8:e8:56:0c:75:
6e:45:ce:46:d3:a1:17:2a:89:13:57:f0:34:83:5d:
11:24:f3:ad:91:a4:99:68:ee:4a:46:2e:83:03:a9:
60:01:ec:8b:0a:15:7a:08:4e:e0:d0:60:f8:08:81:
ea:07:3d:a2:3e:9d:3e:ed:0e:13:35:e5:25:ed:df:
d9:b1:63:cc:05:20:56:55:b5:d3:2c:04:61:41:43:
6e:00:bd:49:cd:54:5e:3c:dc:eb:52:6a:3a:eb:a3:
2a:ec:2b:cc:aa:88:3f:e9:6a:35:50:b6:9f:c4:e1:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:96:C0:D9:E8:63:9C:1B:F8:19:34:4C:95:98:75:B4:7B:98:2C
X509v3 Authority Key Identifier:
keyid:2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37342e302f32332d3233203d3e20323638333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.74.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:d1:34:53:c0:35:13:fd:a3:af:e6:20:e6:42:41:6b:23:a2:
96:20:14:b4:da:31:8e:e5:80:70:ec:69:f7:3d:6b:2c:9b:6e:
91:03:f8:2b:4f:88:57:f6:4d:05:b5:82:f5:c3:ac:a0:a3:79:
8a:24:2b:44:6f:e4:ec:fd:5a:02:2a:95:99:c4:75:e9:f4:87:
b4:15:bf:32:ba:bd:dd:2e:38:f7:7d:cd:4e:9f:ac:b0:56:a0:
a6:51:00:9e:e5:2c:33:eb:6f:ce:aa:7a:1f:12:03:75:27:31:
6a:c6:1b:a2:ca:06:c7:c9:55:52:c6:21:58:b5:42:cd:f2:b2:
a4:5f:23:3b:9c:76:63:01:d3:f1:67:a4:2a:32:53:57:a4:6f:
3e:06:45:74:0c:a8:51:e3:04:fb:94:d0:c7:07:20:96:ee:db:
3c:33:94:15:a9:9d:32:bc:57:5c:d4:6d:1e:54:31:82:04:0d:
52:6b:d0:72:27:27:15:fe:da:25:43:53:cc:43:78:c2:6e:f6:
27:7d:af:76:26:70:34:89:8f:ba:a7:c8:bb:e4:a4:de:b5:96:
74:36:8c:42:47:b6:21:3f:bd:e2:48:4e:62:5b:15:be:7f:d3:
d1:e7:bb:b5:ed:70:de:e9:0f:b5:46:06:4c:66:d3:bf:99:8e:
f0:ef:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org