Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32332d3233203d3e20323638303932.roa
File: 34352e3136382e3232302e302f32332d3233203d3e20323638303932.roa (raw, json)
Hash identifier: nQybawVE7sqdW57wJtWyl3VnUgsjSAF3TDSG/e8rt98=
Subject key identifier: 3B:FE:4D:FD:12:A0:24:8F:3E:C9:D4:FF:19:66:AD:29:1D:E2:6E:1A
Certificate issuer: /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial: 76FFD56174DAE10F29C14EF6CD3FCA12BF9A8F82
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32332d3233203d3e20323638303932.roa
Signing time: Fri 10 Nov 2023 19:00:00 +0000
ROA not before: Fri 10 Nov 2023 18:55:00 +0000
ROA not after: Fri 08 Nov 2024 19:00:00 +0000
asID: 268092
IP address blocks: 45.168.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ff:d5:61:74:da:e1:0f:29:c1:4e:f6:cd:3f:ca:12:bf:9a:8f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Validity
Not Before: Nov 10 18:55:00 2023 GMT
Not After : Nov 8 19:00:00 2024 GMT
Subject: CN=3BFE4DFD12A0248F3EC9D4FF1966AD291DE26E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:4b:cb:a7:c4:0f:a3:11:a8:0a:3e:41:1d:
9a:c5:c4:13:b2:1b:5c:93:8f:09:03:62:bd:43:74:
10:25:8e:16:c4:ca:b4:a8:5e:ee:6c:85:d8:f7:ea:
84:06:56:b7:a9:e8:c1:c6:4c:af:de:c9:11:d5:93:
a6:31:47:2b:c7:82:7f:fe:37:09:43:fa:44:cc:57:
30:46:74:3e:d2:39:01:84:6f:27:9d:56:12:fa:42:
9a:30:f6:df:5d:89:1a:50:bb:9f:9e:e5:30:a9:9e:
60:05:d6:4f:f2:10:82:90:02:69:92:21:b5:8d:ff:
6f:38:52:44:59:2e:62:43:56:49:60:8d:16:cd:0a:
a7:87:77:57:12:17:35:26:38:5d:c5:35:70:11:8c:
72:04:4b:37:08:77:9d:33:b0:d6:3a:92:dc:05:e0:
4e:d0:23:1c:2b:c7:b5:cb:3c:30:b1:de:f0:07:ce:
7f:5f:92:71:eb:7e:15:c1:8f:e6:66:71:a0:dd:db:
e0:9b:62:4a:f6:a2:ed:1f:bc:67:75:37:02:56:1b:
1f:a7:00:68:9f:4c:92:0b:7b:bc:c0:2f:8d:e9:98:
b7:71:d6:93:4f:59:5d:67:eb:d9:49:3c:76:56:fb:
a8:81:3c:df:0d:64:b9:c2:c3:0a:24:e6:b7:00:0d:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:4D:FD:12:A0:24:8F:3E:C9:D4:FF:19:66:AD:29:1D:E2:6E:1A
X509v3 Authority Key Identifier:
keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32332d3233203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.220.0/23
Signature Algorithm: sha256WithRSAEncryption
02:21:7d:63:ab:5d:b6:6e:95:ea:f7:0f:e5:05:91:a8:90:96:
54:c3:da:94:12:a3:2e:0c:87:73:d7:bd:d4:ec:90:5d:65:a2:
9b:07:4e:35:69:60:66:3c:5c:2c:e7:2f:e4:9e:cf:52:4c:ff:
51:08:77:31:56:65:ec:6d:7e:4d:c2:9b:e5:b7:c2:c7:f4:c2:
47:69:09:0c:ec:9a:57:90:69:8c:d1:07:ec:d7:41:b5:04:46:
70:ee:bf:23:57:b9:77:97:c1:2f:52:e6:cd:57:61:02:c8:e3:
e7:89:9e:2e:b5:a1:7b:31:a3:48:7a:ad:84:f8:a0:c4:87:3d:
35:7b:ca:e4:aa:3c:71:b4:ca:e5:dc:86:10:61:a4:4b:1a:7e:
00:12:cd:5e:65:3c:40:50:97:81:32:c5:67:b1:5e:b8:a0:5e:
f3:d7:09:cc:de:12:e7:9c:06:78:c8:73:c2:cd:01:6b:24:7a:
f5:78:78:31:41:d2:46:a8:42:43:9b:e5:e9:92:04:ac:55:ec:
ca:7c:23:dd:0d:a0:4a:5a:e9:19:bc:0b:2b:c0:bf:5c:ab:70:
e1:b2:18:bf:3b:47:1e:6c:3e:18:d2:54:3e:58:9e:e5:13:8a:
70:93:a4:f5:2e:ce:f4:26:b5:5f:c8:58:fe:fa:31:3e:5c:f6:
c7:a2:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org