Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/34352e342e3134302e302f32332d3234203d3e20323636303732.roa
File: 34352e342e3134302e302f32332d3234203d3e20323636303732.roa (raw, json)
Hash identifier: 7xSkjK87q8TCRxL0slgCccPaJ5az+GDYpiqJQeEZtD0=
Subject key identifier: 99:2E:F4:AC:89:11:1F:DC:1C:20:8A:B9:81:35:FB:93:0B:2B:21:4B
Certificate issuer: /CN=33494705E93212BFD28AEA719521AE8BF6684199
Certificate serial: 67D3384ABC3A68194EDE0826417E56541AC9D444
Authority key identifier: 33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/34352e342e3134302e302f32332d3234203d3e20323636303732.roa
Signing time: Wed 30 Aug 2023 13:58:41 +0000
ROA not before: Wed 30 Aug 2023 13:53:41 +0000
ROA not after: Wed 28 Aug 2024 13:58:41 +0000
asID: 266072
IP address blocks: 45.4.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d3:38:4a:bc:3a:68:19:4e:de:08:26:41:7e:56:54:1a:c9:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33494705E93212BFD28AEA719521AE8BF6684199
Validity
Not Before: Aug 30 13:53:41 2023 GMT
Not After : Aug 28 13:58:41 2024 GMT
Subject: CN=992EF4AC89111FDC1C208AB98135FB930B2B214B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:34:ed:48:09:28:f8:23:31:7c:dc:d0:ec:7b:
9e:dd:1e:53:7a:e4:67:83:e1:e9:45:dd:e0:2c:74:
9f:ac:e0:99:b8:59:1f:09:ba:24:09:4b:87:6e:3f:
e1:97:1d:71:f5:66:56:fe:6f:0a:81:d2:72:92:19:
93:b7:4c:a8:23:53:4d:a6:a1:15:98:9d:4a:77:23:
2a:42:13:c7:b1:65:14:19:22:90:b9:6f:c2:03:e3:
1c:01:c8:80:ca:0d:19:e8:6d:c4:83:0a:ff:7d:12:
d2:1c:94:86:d0:28:76:54:ed:68:bb:84:a5:2f:5d:
21:3d:82:0a:12:b2:57:d4:fa:64:53:37:6a:2c:0f:
36:d1:2b:51:0e:4b:1a:91:a9:0a:a5:b9:8d:b1:73:
a9:fb:90:32:b7:c6:d4:3b:0c:f7:62:5c:56:82:d9:
04:40:a3:70:4d:f5:84:ca:a5:31:c9:5a:54:94:1e:
3e:56:b8:f3:97:91:e1:d7:4b:1a:e7:70:9a:96:2a:
0b:42:af:c0:21:66:95:77:24:60:3e:2d:f3:57:fa:
44:fd:57:a4:d2:88:96:f7:05:0b:d2:7e:b6:eb:5d:
b4:eb:19:02:66:4e:c7:60:86:a7:5d:1d:88:f5:99:
15:15:bc:69:9d:9d:74:19:9e:5d:ad:0c:50:67:fa:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:F4:AC:89:11:1F:DC:1C:20:8A:B9:81:35:FB:93:0B:2B:21:4B
X509v3 Authority Key Identifier:
keyid:33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/33494705E93212BFD28AEA719521AE8BF6684199.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/34352e342e3134302e302f32332d3234203d3e20323636303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:ad:46:ce:fe:3c:7a:d4:ad:61:8f:82:4d:56:43:55:9c:8c:
56:70:b5:6d:49:bd:96:6d:20:c8:0e:91:e1:36:4a:78:62:91:
5a:e8:0c:d7:89:34:43:30:d3:d6:43:55:da:e1:0d:86:03:41:
3c:47:c1:03:86:91:c1:34:c0:17:ec:ac:64:f1:8f:15:c8:e4:
8b:c9:f4:5f:41:6a:60:d6:d1:60:9a:9d:b0:5b:0a:91:b2:43:
c9:5f:72:2a:83:7f:7d:f3:59:b8:4b:19:bc:5a:a6:4e:cb:27:
e5:01:d2:eb:80:f1:4a:ca:72:18:00:cc:33:93:55:cb:aa:50:
55:0f:e2:eb:70:a4:ea:86:e5:15:65:b9:11:c0:cd:fc:00:ff:
e8:4c:c8:81:49:b3:8f:f3:3c:ae:e3:73:4b:40:60:9e:e4:da:
cb:90:69:29:2a:32:17:7d:0b:43:7c:c1:8c:37:97:45:39:4f:
4e:78:4d:e0:65:3f:97:30:f8:64:d4:4c:ee:7c:aa:a9:90:ec:
38:d3:bd:c3:6d:a8:bc:a1:27:dd:50:98:c4:bb:3b:e5:9c:93:
eb:b4:d6:ab:6b:6e:82:f8:bc:19:43:a0:7d:a0:84:aa:cc:3d:
e1:a1:f8:42:0a:be:a5:9b:15:6d:67:4b:f4:7f:0c:00:ad:fb:
07:f1:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org