Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
File: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (raw, json)
Hash identifier: ebLhk1XKA0RSnn6QkY1nGTgcmbARSansPj+Uv7BI+wg=
Subject key identifier: 15:8F:E6:76:FA:F7:C4:A2:86:61:D3:EC:CB:18:03:A7:94:3D:45:B7
Certificate issuer: /CN=168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2
Certificate serial: 3F2B14853F57BAED14E59F863C38B92FB2166DF8
Authority key identifier: 16:8A:ED:4F:A1:6F:CD:E9:F4:E0:C5:DF:9C:58:35:2F:63:B6:B5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
Signing time: Mon 24 Apr 2023 22:01:08 +0000
ROA not before: Mon 24 Apr 2023 21:56:08 +0000
ROA not after: Mon 22 Apr 2024 22:01:08 +0000
asID: 268681
IP address blocks: 45.165.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2b:14:85:3f:57:ba:ed:14:e5:9f:86:3c:38:b9:2f:b2:16:6d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2
Validity
Not Before: Apr 24 21:56:08 2023 GMT
Not After : Apr 22 22:01:08 2024 GMT
Subject: CN=158FE676FAF7C4A28661D3ECCB1803A7943D45B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:23:0d:2b:5b:88:27:96:b6:5f:1a:ac:b4:
ab:65:f6:7a:9f:bd:4c:16:8f:70:18:f2:57:31:fd:
21:03:d3:83:8a:41:e2:a1:d9:09:dd:ea:54:21:96:
fc:f5:9c:70:77:3b:7e:23:76:37:6e:c8:b2:01:1e:
2c:24:34:54:0f:35:a4:1d:58:0b:94:60:c3:a0:5b:
69:ef:86:ce:2a:4e:f0:6a:38:2f:36:f3:ea:07:09:
32:50:6b:ef:01:61:9f:a2:30:71:67:49:69:33:5d:
59:fc:1f:b8:fd:e4:72:41:25:47:3f:e2:6a:7d:b5:
20:b0:ed:9c:d7:4c:70:df:10:a6:0b:7a:b7:d1:a2:
7a:06:58:22:15:9c:5c:cc:b5:52:29:00:24:46:96:
a4:c8:94:a9:20:b4:1e:7a:ce:81:da:9a:db:56:dd:
76:29:d4:ad:7f:70:c6:25:2e:30:0c:b5:41:e4:64:
d5:1a:17:53:1f:8c:9a:25:ad:1a:38:60:c7:2f:a1:
88:da:3c:fa:23:fe:38:49:8f:8d:10:0b:21:b2:ef:
7b:d3:59:eb:0b:79:53:32:d3:b4:ee:92:88:f5:ed:
f7:9e:ba:dd:4b:70:e9:1c:41:25:65:30:70:75:c8:
54:31:7c:0f:4c:49:f2:c7:a7:b6:33:a1:6c:f9:2c:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:E6:76:FA:F7:C4:A2:86:61:D3:EC:CB:18:03:A7:94:3D:45:B7
X509v3 Authority Key Identifier:
keyid:16:8A:ED:4F:A1:6F:CD:E9:F4:E0:C5:DF:9C:58:35:2F:63:B6:B5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/168AED4FA16FCDE9F4E0C5DF9C58352F63B6B5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.92.0/22
Signature Algorithm: sha256WithRSAEncryption
83:a1:57:b7:1d:eb:fe:1c:9e:5a:65:5e:25:7d:c3:54:7b:ef:
12:0e:c2:b7:5b:15:6e:c4:0c:8c:8c:96:84:8c:9a:64:07:4f:
14:4c:fa:df:68:0c:f4:3f:84:9a:e6:5a:76:93:ac:4a:42:bf:
28:62:fe:51:3f:5e:88:bb:0d:75:7b:0d:07:05:b1:d5:d1:91:
d8:8e:e7:3f:2e:98:cc:8b:b6:d2:42:6e:41:aa:cc:c5:42:ed:
02:4c:fe:be:27:62:24:91:13:b0:b7:4d:c3:a2:4f:3b:06:9d:
4b:dc:7e:81:4a:c9:2d:26:1b:a9:a4:7c:f6:45:70:95:bb:dc:
51:b3:ea:61:8b:7a:05:df:fc:d9:47:2b:3e:0b:98:bd:bd:4e:
15:78:1a:de:6a:c4:91:3a:fa:d8:6c:93:5c:bd:f1:a1:81:91:
29:fa:3a:3a:fc:2a:57:7a:43:31:ac:ee:a7:b6:df:76:02:c0:
54:8a:f2:77:84:ff:6f:3c:86:57:80:38:3e:e3:bc:e9:3b:ff:
85:d5:d5:2c:0b:4f:7f:f0:b9:23:2a:48:d6:16:78:17:12:86:
41:a3:08:5a:17:c7:60:75:df:a4:9c:c0:e0:f2:91:61:67:d5:
f0:a2:02:bf:23:6d:94:7a:e1:16:28:2a:88:5a:72:f8:9d:c0:
37:c2:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org