Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
File: 34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier: jYJnl5hrvG+R+MH9iXMpBjcXj7Or3Iw9hln/LZYIncU=
Subject key identifier: 01:5E:29:78:DA:9E:D0:30:2B:57:5B:7E:C6:A4:26:D5:54:35:57:C6
Certificate issuer: /CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Certificate serial: 41E96FE601BBFA8C679E55454EDA0C799A7AE04B
Authority key identifier: D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
Signing time: Fri 10 Nov 2023 19:00:00 +0000
ROA not before: Fri 10 Nov 2023 18:55:00 +0000
ROA not after: Fri 08 Nov 2024 19:00:00 +0000
asID: 268092
IP address blocks: 45.168.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e9:6f:e6:01:bb:fa:8c:67:9e:55:45:4e:da:0c:79:9a:7a:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB
Validity
Not Before: Nov 10 18:55:00 2023 GMT
Not After : Nov 8 19:00:00 2024 GMT
Subject: CN=015E2978DA9ED0302B575B7EC6A426D5543557C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:83:4b:b2:ae:bf:a1:63:8f:0a:f9:92:0f:
32:f9:ae:db:e2:08:11:a7:a6:33:57:84:80:5a:76:
bc:f7:a7:4d:1a:cd:7b:85:fa:36:b7:04:59:1e:a1:
b1:2c:83:21:8f:79:16:49:29:8b:81:75:cc:1d:b3:
18:68:22:f9:fa:29:c6:82:f8:bb:48:ef:10:f6:7f:
46:78:b3:a3:bb:39:d1:ef:cc:e1:fd:a5:24:a0:53:
ce:33:35:c3:84:20:88:96:7f:fb:b9:4f:17:72:9b:
fc:20:e4:41:ae:7f:5b:82:0c:98:2f:b7:10:b8:33:
9a:f9:be:82:91:08:eb:a3:34:2f:28:6d:e4:23:47:
6c:21:e6:a1:93:94:d5:02:69:b2:a3:6a:7a:c4:af:
14:43:ba:14:02:0d:2e:40:80:78:c7:f1:fb:c1:b3:
02:73:21:78:6d:74:8c:26:74:02:b9:7a:ee:07:b6:
92:03:66:45:b9:4b:17:2d:36:2c:ef:f4:b6:a0:51:
96:8b:e7:2d:5d:b1:67:61:1a:8b:c6:9f:60:b3:57:
2e:38:63:eb:07:c1:21:a1:7a:66:d8:ff:d7:3f:4c:
88:75:8b:e8:78:13:0d:0c:42:84:c9:ac:67:9e:24:
66:21:c9:9f:f6:1b:1a:c2:8d:38:3b:d7:47:1d:be:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:29:78:DA:9E:D0:30:2B:57:5B:7E:C6:A4:26:D5:54:35:57:C6
X509v3 Authority Key Identifier:
keyid:D9:C1:AF:83:E5:C3:D2:3A:7D:78:AA:5F:10:EB:8C:89:3F:19:F5:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C1AF83E5C3D23A7D78AA5F10EB8C893F19F5CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232332e302f32342d3234203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.223.0/24
Signature Algorithm: sha256WithRSAEncryption
98:26:15:c1:53:1c:00:02:b4:f8:e9:28:9e:eb:bf:e9:54:2f:
ab:7d:2d:49:6b:e6:61:2c:ca:ab:c2:c3:7a:02:c1:e7:e3:cb:
75:56:2e:11:67:ef:2f:49:6c:86:83:31:b3:59:48:2d:a7:b4:
6b:ad:9d:61:99:21:1f:46:03:96:eb:8f:7d:56:f8:08:42:e3:
ab:8d:01:84:87:32:b1:16:1b:b5:55:26:97:c8:f4:16:25:aa:
c6:72:53:45:f8:b6:44:fe:e8:97:16:f8:2a:0a:e3:b1:2e:8e:
86:8f:46:23:f4:91:eb:77:64:92:a4:36:0d:41:86:80:f6:78:
6f:ea:36:fb:b3:95:7d:d3:fe:0a:02:85:b0:2d:71:6e:c3:09:
68:4e:19:00:20:45:3a:25:f6:f5:a3:05:25:a8:dd:df:8e:b8:
c4:80:d4:21:8b:ac:0c:a0:85:15:b7:5f:59:e7:94:25:58:df:
63:66:90:61:e1:fb:93:c6:18:ce:b5:9f:b9:5d:1b:53:51:30:
61:03:45:34:5b:8f:44:e1:a2:4f:17:a7:73:cf:98:4e:04:b5:
91:ed:22:74:ef:9c:92:2a:cc:86:75:c5:76:85:d2:74:12:a7:
90:e9:4b:1d:43:12:52:b5:99:af:84:91:ab:04:9f:9f:3f:29:
49:13:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org