Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/34352e362e3232382e302f32322d3234203d3e20323636323333.roa
File: 34352e362e3232382e302f32322d3234203d3e20323636323333.roa (raw, json)
Hash identifier: PZSZROIV/VYcX89XnGD2DYEpRvYoBzf7nKGatAMK+T4=
Subject key identifier: A6:7A:AF:B2:EC:CB:B3:D4:14:0F:05:1D:D5:47:D0:47:EE:D0:7B:0C
Certificate issuer: /CN=358972EA5F2854BF4F3269CE4A8CF29D5D529B8D
Certificate serial: 660A9E0F86DEA14214530BB0E6FDE9684F365FB3
Authority key identifier: 35:89:72:EA:5F:28:54:BF:4F:32:69:CE:4A:8C:F2:9D:5D:52:9B:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/34352e362e3232382e302f32322d3234203d3e20323636323333.roa
Signing time: Fri 20 Oct 2023 18:39:25 +0000
ROA not before: Fri 20 Oct 2023 18:34:25 +0000
ROA not after: Fri 18 Oct 2024 18:39:25 +0000
asID: 266233
IP address blocks: 45.6.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:0a:9e:0f:86:de:a1:42:14:53:0b:b0:e6:fd:e9:68:4f:36:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358972EA5F2854BF4F3269CE4A8CF29D5D529B8D
Validity
Not Before: Oct 20 18:34:25 2023 GMT
Not After : Oct 18 18:39:25 2024 GMT
Subject: CN=A67AAFB2ECCBB3D4140F051DD547D047EED07B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:b4:1f:3c:d0:0c:7b:cb:cb:92:6b:b3:83:
69:8f:51:45:ec:97:3f:49:3b:bc:0b:ae:6f:13:78:
5e:da:bb:e9:1d:95:44:ca:94:9a:56:76:55:e0:f4:
0f:20:a1:6d:cd:2d:ac:a4:5a:dd:8b:dd:c0:65:60:
06:81:3e:50:5f:6f:dd:28:24:a1:e8:71:21:32:f0:
01:de:dd:e0:b1:d8:fb:fb:1c:1b:f4:e1:e5:de:4d:
03:19:4b:0b:b3:c8:f9:4e:7d:4a:c2:20:47:a6:6a:
3d:d0:40:c0:fa:2f:57:ae:cd:c6:bf:58:5c:22:cf:
64:65:a0:b3:77:91:a4:10:a5:63:a7:3c:f0:47:ae:
c2:6b:cd:74:2d:dc:b6:27:8b:77:3f:4e:b5:f4:08:
10:7f:8d:21:4a:8e:61:0a:58:e6:46:41:dd:48:3d:
ea:08:fd:28:51:00:3f:0e:dc:cf:bf:53:ed:0e:fb:
1f:dd:18:d8:5b:66:f6:12:b7:ed:2c:95:ac:aa:b0:
a0:42:17:e2:dd:7b:cf:a6:ca:24:59:c1:2c:20:9c:
0c:3d:7a:62:62:9c:e3:73:83:6c:3f:86:0f:09:5a:
f5:4c:33:d7:f9:5b:a3:7a:7c:15:15:e0:97:74:a3:
72:ee:58:f8:56:4e:e1:24:bb:57:47:cb:29:89:62:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:AF:B2:EC:CB:B3:D4:14:0F:05:1D:D5:47:D0:47:EE:D0:7B:0C
X509v3 Authority Key Identifier:
keyid:35:89:72:EA:5F:28:54:BF:4F:32:69:CE:4A:8C:F2:9D:5D:52:9B:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/358972EA5F2854BF4F3269CE4A8CF29D5D529B8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eA3pLj4kdoqFLjPm9KP6NbyDqUWitfZRUCkjv3GGyCW/0/34352e362e3232382e302f32322d3234203d3e20323636323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.228.0/22
Signature Algorithm: sha256WithRSAEncryption
46:95:52:52:1a:ae:6f:ed:9a:0b:8a:18:07:11:2a:47:00:07:
ee:3c:6b:00:a1:39:3e:5b:ab:60:f1:17:06:3b:30:21:c8:00:
b1:47:1c:be:47:d5:2b:18:28:9e:ce:7d:9f:8a:4d:01:f5:75:
c3:2a:ec:f6:f3:40:6b:3b:72:9d:30:c1:94:77:34:c2:45:be:
0f:7b:67:e3:f5:d0:65:83:6a:1f:63:dc:d5:f3:b3:e9:26:4e:
fe:13:f6:4f:37:b4:0b:96:e3:9c:06:a5:8e:60:b6:fe:d3:3c:
0c:bf:af:ca:82:ac:a4:ef:09:4d:eb:09:f2:00:4d:66:4c:de:
4e:dd:6e:34:8e:f6:a7:a5:70:69:e1:ef:c4:3c:79:4f:32:44:
35:59:fa:8c:4d:23:64:5a:68:0c:fa:0d:a5:18:1d:df:ee:d4:
9f:9c:43:b0:fb:ed:52:cc:24:a2:fe:41:18:42:4b:ae:16:72:
ef:97:e7:4c:f0:22:a6:35:5d:8c:01:0c:c7:7e:0a:13:cd:f4:
63:fb:4e:16:4f:f6:eb:bc:bb:d4:b1:43:20:bf:e9:e9:f0:1a:
1e:53:a5:1c:1e:f2:d2:34:5d:52:14:2e:de:c0:8a:e4:24:49:
de:82:f4:7f:54:86:a0:5e:75:15:43:5f:99:54:e9:e4:c0:52:
6b:c6:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org