Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131372e302f32342d3234203d3e20323636353834.roa
File: 34352e372e3131372e302f32342d3234203d3e20323636353834.roa (raw, json)
Hash identifier: hKdwH2ws15W7S8HutDNLzQq+HsvJ98bJFfTThIVRis4=
Subject key identifier: 04:75:76:CF:1D:FC:3C:68:F8:16:EF:22:16:33:09:F9:0E:9C:50:31
Certificate issuer: /CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Certificate serial: 02A95B5B8DBBEFEC29860AB2C69F23313E78407F
Authority key identifier: 40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131372e302f32342d3234203d3e20323636353834.roa
Signing time: Tue 02 Jan 2024 19:02:46 +0000
ROA not before: Tue 02 Jan 2024 18:57:46 +0000
ROA not after: Tue 31 Dec 2024 19:02:46 +0000
asID: 266584
IP address blocks: 45.7.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a9:5b:5b:8d:bb:ef:ec:29:86:0a:b2:c6:9f:23:31:3e:78:40:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Validity
Not Before: Jan 2 18:57:46 2024 GMT
Not After : Dec 31 19:02:46 2024 GMT
Subject: CN=047576CF1DFC3C68F816EF22163309F90E9C5031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:b5:d2:cd:11:80:22:7f:f1:9a:88:da:84:
5b:5d:ce:78:11:fe:51:00:4d:24:3c:4e:76:5c:bf:
33:36:ca:ab:d3:1b:01:35:5a:0d:3d:ed:86:9a:9c:
49:1c:cf:c5:c5:70:6b:f7:85:0b:9c:6f:e8:cc:36:
78:6f:52:81:21:b4:d0:f2:cc:08:7c:f9:5f:9b:4e:
8d:b9:d7:3c:ba:77:fa:c7:c0:69:3e:f1:72:98:f1:
ee:45:d9:6c:f3:0b:6c:55:f4:9e:6d:e4:62:83:83:
50:b2:3f:8e:aa:30:e9:92:5c:d4:97:ef:88:9a:84:
fe:ba:1c:ad:9b:d5:61:08:ae:cb:5e:6a:2f:17:ac:
aa:71:d6:75:b6:08:4f:9b:cd:94:c4:16:0e:1f:e6:
69:7a:81:2d:c8:8a:56:ae:c8:c1:bf:b8:66:cb:1d:
35:1e:cc:f3:97:96:83:3d:32:b5:33:90:3e:c2:0e:
6e:0f:15:2e:36:f5:42:e4:7e:27:02:2c:2c:49:d2:
6a:9f:41:c0:b6:91:8e:f1:eb:d9:31:11:09:a9:94:
f9:82:08:b9:6c:fc:89:0d:c1:38:60:df:d1:9c:9d:
2d:7a:a1:a5:3d:9b:55:ff:10:e6:b5:9b:90:c4:9f:
ad:bf:c9:b8:8a:e5:69:94:6d:90:29:b8:4d:2d:e8:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:75:76:CF:1D:FC:3C:68:F8:16:EF:22:16:33:09:F9:0E:9C:50:31
X509v3 Authority Key Identifier:
keyid:40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131372e302f32342d3234203d3e20323636353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.117.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a2:a5:c6:53:b9:c0:95:68:20:22:5e:20:57:3a:d6:fb:0b:
bf:3a:a5:be:0a:01:23:da:c0:6b:ee:aa:64:34:0b:73:96:ef:
af:b9:04:22:aa:03:fb:64:e0:c4:d7:2f:fb:e3:69:29:4d:ea:
e1:b0:01:27:bd:18:c3:8e:57:67:ae:93:0b:17:1b:f4:79:c5:
8c:f0:68:bf:0b:2d:45:df:bc:43:70:09:63:1f:fd:83:ef:dc:
52:63:75:49:d7:c0:9e:e9:e8:57:b3:0c:10:9f:ca:26:61:07:
58:da:2c:e3:4c:0e:cc:a1:0f:f0:b4:fb:eb:a7:53:1b:2e:e5:
d2:76:24:f5:45:f8:5a:05:3e:c5:73:69:22:d5:62:c3:b9:77:
55:d1:a2:e8:21:a7:df:dd:aa:8e:f8:42:14:4c:1f:97:e7:d8:
81:18:ef:48:3e:c5:09:54:9a:00:2b:bf:ec:fa:ee:3c:66:72:
8c:22:94:ad:78:68:44:6d:b3:86:a5:59:b6:7c:2b:2a:2e:ac:
63:7d:07:80:44:04:77:76:32:95:37:38:ce:1f:be:c1:20:3c:
d7:b6:fb:ab:92:71:20:d2:df:b0:7b:52:3f:92:47:89:52:67:
c9:b3:e7:0c:a5:82:45:73:de:0a:f5:c3:58:cf:6e:89:18:84:
3d:f5:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org