Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34342e302f32322d3232203d3e20323638333132.roa
File: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (raw, json)
Hash identifier: XRcVsjxdzyJGQAydCNNAzm9pILBQgETYvYVWaIp61uc=
Subject key identifier: 98:0D:0E:F2:DA:35:35:A0:04:83:A1:C8:52:8C:75:0E:C3:00:2B:68
Certificate issuer: /CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Certificate serial: 28CE2B2DD1FC72A51974CB0F3397B940CA37A966
Authority key identifier: 1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34342e302f32322d3232203d3e20323638333132.roa
Signing time: Thu 07 Dec 2023 20:00:00 +0000
ROA not before: Thu 07 Dec 2023 19:55:00 +0000
ROA not after: Thu 05 Dec 2024 20:00:00 +0000
asID: 268312
IP address blocks: 45.238.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ce:2b:2d:d1:fc:72:a5:19:74:cb:0f:33:97:b9:40:ca:37:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Validity
Not Before: Dec 7 19:55:00 2023 GMT
Not After : Dec 5 20:00:00 2024 GMT
Subject: CN=980D0EF2DA3535A00483A1C8528C750EC3002B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:3e:fe:f9:4c:b5:4e:3a:f2:8b:c5:f0:b8:
38:e2:df:b1:81:01:4e:67:10:9d:f7:f5:e4:d6:6c:
44:5d:0e:0e:c1:84:ea:3b:6d:69:60:78:f8:c5:70:
68:b8:9f:4f:22:b4:9d:17:c3:f3:5b:77:93:3a:a3:
6c:61:1c:36:ba:da:bc:0e:40:fd:85:8f:3c:7f:63:
1c:27:3d:35:5a:ae:43:11:0a:09:02:67:99:07:84:
19:49:b5:d0:57:e7:41:a2:8d:9a:10:e5:1e:29:5a:
9c:34:90:d0:1e:7b:63:07:d4:67:09:20:0d:42:b8:
3d:05:53:eb:7b:0b:1c:05:63:1c:41:a8:54:ec:b9:
29:76:14:de:d9:8c:5c:91:76:07:32:46:a5:8b:32:
53:58:a0:75:d4:6d:b3:53:6d:f3:a1:89:80:f8:0f:
65:ac:15:62:8d:00:58:b4:82:f6:6a:d6:e1:7a:9b:
ce:9c:6a:51:8d:83:1f:db:37:b3:69:0e:75:4c:a0:
52:ef:f7:fa:00:a7:02:b4:23:95:33:5f:f9:99:ec:
90:ed:51:c3:5a:c3:b4:4b:57:dc:07:69:09:8e:f5:
15:88:83:7e:4e:0f:5a:e8:48:b6:f0:25:a9:5f:6d:
76:7d:fb:7a:85:3e:91:1f:bb:c7:b0:79:4e:01:6e:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:0E:F2:DA:35:35:A0:04:83:A1:C8:52:8C:75:0E:C3:00:2B:68
X509v3 Authority Key Identifier:
keyid:1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34342e302f32322d3232203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.44.0/22
Signature Algorithm: sha256WithRSAEncryption
21:20:62:a2:ca:d3:ee:7e:83:dd:52:c8:2b:d2:90:bf:89:a3:
6d:d9:8e:c1:2e:e8:8e:b1:5f:3e:dc:73:cf:fe:74:d8:01:96:
66:1f:3f:fe:fe:03:b0:10:84:4c:be:90:6a:09:0b:39:fe:12:
a5:66:ac:ac:f1:2c:c2:d0:04:30:57:7e:5a:76:fa:e8:3a:e3:
1d:58:c9:d0:0d:9f:d7:88:e5:fd:cc:36:db:af:99:42:c8:c1:
a0:c3:eb:dc:8f:dd:b5:4e:70:c0:84:33:92:57:56:b3:c1:16:
a4:21:53:75:29:c3:fb:0e:dd:99:fc:1b:13:dc:a4:31:20:a1:
f0:c2:ab:b1:eb:72:85:22:1a:db:6e:34:d7:47:b4:fb:5e:5e:
ca:6f:db:ca:e9:45:94:29:44:23:79:1d:90:1b:f4:57:6c:98:
33:43:84:d9:4b:1e:52:f0:44:ba:2a:8c:ed:54:70:e2:d1:37:
70:12:cb:ca:04:a0:7d:69:b9:b8:cf:c3:12:e6:a5:ef:ca:9b:
35:61:d1:5c:37:90:cb:f6:ba:29:22:4f:24:06:26:e5:65:cc:
a3:d8:29:d8:bd:77:66:1e:c1:5e:fe:f8:10:22:0b:c1:7f:49:
45:4e:08:72:d9:ea:a5:e1:6c:91:92:9a:f3:63:2d:af:13:58:
96:85:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org