Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234322e302f32342d3234203d3e20323636303736.roa
File: 34352e342e3234322e302f32342d3234203d3e20323636303736.roa (raw, json)
Hash identifier: SZ9BsimcTZmnxFjunt+9WTXjvPFaiXC6vTOGMeEQJdY=
Subject key identifier: 05:4F:19:1C:6D:A3:F3:06:6F:D6:49:60:5A:24:17:C1:3E:DF:EF:9A
Certificate issuer: /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial: 0D931F0A2189D326432F6A92DC52224BD57A9C1B
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234322e302f32342d3234203d3e20323636303736.roa
Signing time: Mon 03 Apr 2023 18:50:36 +0000
ROA not before: Mon 03 Apr 2023 18:45:36 +0000
ROA not after: Mon 01 Apr 2024 18:50:36 +0000
asID: 266076
IP address blocks: 45.4.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:93:1f:0a:21:89:d3:26:43:2f:6a:92:dc:52:22:4b:d5:7a:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Validity
Not Before: Apr 3 18:45:36 2023 GMT
Not After : Apr 1 18:50:36 2024 GMT
Subject: CN=054F191C6DA3F3066FD649605A2417C13EDFEF9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:e6:ec:ee:ee:ea:ed:68:09:5d:38:18:d0:
30:61:a0:1f:18:04:f5:a8:5a:0b:19:48:43:c8:17:
a6:ad:d9:21:a1:08:ee:b3:c1:83:f8:e8:75:70:7a:
24:51:9f:6d:07:19:b3:e5:48:33:5f:60:23:8f:76:
99:8e:dd:10:81:b7:1c:e4:0f:1a:ca:39:62:5a:80:
3f:45:c8:e9:7a:83:8a:27:bb:1c:41:f3:94:e5:d1:
17:4b:bf:20:0d:43:9e:2d:0f:85:fc:43:df:7b:e7:
7d:de:67:8d:98:7b:93:39:5c:e6:4d:8e:02:d6:0f:
e4:0c:1b:e1:e1:5d:da:03:9e:49:37:48:99:c3:67:
d7:03:28:40:89:bb:eb:3a:43:3c:a3:4b:2f:98:5a:
a0:d2:d4:3f:67:50:b0:78:ea:e3:53:b8:92:db:5d:
8f:dc:8f:a4:e8:c1:fc:a1:9c:c6:7f:8a:91:4c:c0:
91:cf:1f:e9:b0:b2:c9:52:28:d3:d4:3a:e0:ba:cc:
27:ee:97:06:15:05:aa:be:05:79:71:7f:e8:bc:f0:
34:d9:63:a5:de:27:ac:4d:10:4d:f6:44:44:fc:d9:
76:7a:d1:46:0a:1a:a3:91:b0:b9:05:69:69:c8:a8:
54:1f:63:7f:1b:c0:c7:51:74:19:ed:f0:d1:30:d5:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:19:1C:6D:A3:F3:06:6F:D6:49:60:5A:24:17:C1:3E:DF:EF:9A
X509v3 Authority Key Identifier:
keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234322e302f32342d3234203d3e20323636303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1a:ba:0c:20:61:87:13:d0:92:4c:c6:c6:81:eb:60:8a:ef:
28:71:b2:96:fa:c3:b2:72:d3:9b:1f:58:0a:c3:23:30:9b:87:
ab:72:12:08:3d:a1:b7:63:f0:05:e5:d2:4b:28:a8:60:80:ac:
31:fe:55:81:ff:ba:3e:93:e9:06:a0:03:aa:93:da:d9:8d:b4:
de:c0:90:5f:41:be:90:77:f6:54:57:88:af:94:fc:af:0c:cd:
d1:3e:12:a6:8d:d4:3b:2d:d0:aa:1f:5b:75:c5:2b:bb:94:1b:
94:aa:92:d1:99:a0:4c:98:c1:56:ee:05:56:b6:59:6c:b0:e1:
ff:b0:08:ae:fe:24:24:b8:10:b2:5f:a3:0f:ba:6e:00:8c:16:
12:91:60:d5:2e:f6:6c:dd:82:9c:3f:6e:ee:ca:cf:4c:a0:01:
23:31:47:74:32:fe:7f:8d:2d:df:13:36:c0:72:44:3d:e3:c7:
0b:58:ae:f3:bf:45:2c:fc:1a:e3:0c:af:3b:64:e8:d0:a4:c4:
df:cd:75:0e:16:0b:73:2b:b6:8b:d2:3a:00:91:22:a4:a1:66:
14:8d:89:85:8b:44:f3:bf:5b:46:35:7e:fd:ea:5b:0d:b7:69:
ff:af:1c:ce:22:f0:23:57:c0:03:75:23:8b:85:ae:77:1b:5e:
06:ee:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org