Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
File: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier: 6ri1hNiSB1QJfc/qjrsKPry0NChrkOcgT7qVY7trsdw=
Subject key identifier: D5:0F:54:6A:F9:E9:B4:54:EC:BE:18:6E:1D:DE:31:1D:32:02:37:2F
Certificate issuer: /CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Certificate serial: 772EECCF40370A3D57E9F84A300614E2287F9229
Authority key identifier: 1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
Signing time: Thu 07 Dec 2023 20:00:00 +0000
ROA not before: Thu 07 Dec 2023 19:55:00 +0000
ROA not after: Thu 05 Dec 2024 20:00:00 +0000
asID: 268312
IP address blocks: 45.238.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2e:ec:cf:40:37:0a:3d:57:e9:f8:4a:30:06:14:e2:28:7f:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
Validity
Not Before: Dec 7 19:55:00 2023 GMT
Not After : Dec 5 20:00:00 2024 GMT
Subject: CN=D50F546AF9E9B454ECBE186E1DDE311D3202372F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:86:af:22:79:b7:21:ab:6d:b0:64:3b:49:
74:fd:03:ae:cd:68:86:75:85:06:a8:14:62:30:9b:
6d:e6:8b:2e:52:32:c9:90:8d:e2:fa:b3:36:4e:13:
db:80:0e:be:4b:d3:82:78:ef:56:85:89:55:0b:d3:
a7:1e:b9:61:9a:69:b6:1c:ee:bc:7a:b3:68:ee:a0:
57:44:e3:90:e3:72:d1:82:69:79:f6:5e:51:02:d7:
7d:c9:a3:7e:f3:5c:3b:ea:27:48:10:7c:66:5c:2e:
89:07:78:0d:d7:3b:0e:02:50:15:33:95:5d:85:dd:
83:99:d7:e7:7e:c6:95:e2:85:1e:42:8d:1c:e1:6c:
5b:90:1c:6c:78:d1:36:bf:36:29:b9:9c:13:2c:88:
aa:2b:46:75:46:0a:fa:68:7d:00:d4:cd:74:e9:dd:
93:5e:30:bb:ee:d2:69:b0:99:51:3f:ff:8c:9a:0c:
c7:a7:5d:86:06:46:95:30:53:fa:dc:87:88:74:d8:
89:bf:9f:72:f8:5e:93:ce:e3:87:1c:3e:fc:e1:40:
0c:cb:b0:72:1d:5a:95:d7:77:cc:11:2a:bb:d3:52:
d1:69:25:4f:cb:1c:a5:aa:1d:8b:c7:28:f6:e7:10:
56:ff:1f:16:7d:28:96:00:41:d4:3a:00:11:ce:0f:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:54:6A:F9:E9:B4:54:EC:BE:18:6E:1D:DE:31:1D:32:02:37:2F
X509v3 Authority Key Identifier:
keyid:1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:03:b0:c2:4a:27:51:72:74:e2:ba:ed:de:f5:60:5e:76:64:
d3:71:9c:82:39:c6:8c:d0:fa:ba:c2:7a:89:af:5a:a1:28:2a:
96:a6:59:74:9f:ea:a8:05:23:3a:b4:09:b5:a8:f9:e8:49:6e:
00:e1:81:17:f6:2f:9a:fc:9a:75:52:70:ba:c3:c5:d9:c1:06:
b8:ea:5c:a9:e8:a6:a5:be:dd:69:3d:51:63:94:89:4f:24:4c:
b2:e2:3d:24:2a:4b:ab:99:14:a6:d9:62:41:be:a5:61:0e:42:
3f:7f:67:3e:63:59:b5:d5:7e:b2:cb:c1:22:3a:59:2b:f7:67:
aa:26:88:7a:30:19:a9:10:e1:f2:fe:f3:6e:0e:f6:5b:c4:f3:
7e:b0:de:4a:ec:12:bb:f5:b4:31:9b:56:70:2b:bc:e3:a5:f4:
52:0b:6b:5b:e8:a2:6a:42:d3:03:92:ec:33:eb:07:01:38:1b:
74:6c:0f:c4:a8:89:5b:ae:83:85:40:fc:b7:38:01:53:9d:30:
10:58:3a:21:ce:a7:ec:9a:2c:a2:fd:11:48:c9:a1:b6:75:09:
04:07:9b:6c:c8:dd:70:a3:44:19:dc:09:bf:0b:56:54:6e:ca:
3a:08:24:7f:cc:83:2b:f6:6a:70:b6:39:a3:b8:c0:c5:34:99:
e2:d1:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org