Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131382e302f32332d3234203d3e20323636353834.roa
File: 34352e372e3131382e302f32332d3234203d3e20323636353834.roa (raw, json)
Hash identifier: LtzbCXUkIf21B4MKdkn/ZP1UYWv7GBqag6KLmGszKZI=
Subject key identifier: A5:9E:29:6B:04:45:ED:1D:2F:8C:97:7E:FB:55:35:99:35:A0:3B:8D
Certificate issuer: /CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Certificate serial: 3B17034749BBD7C7D2530419E841F92EF91C2060
Authority key identifier: 40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131382e302f32332d3234203d3e20323636353834.roa
Signing time: Tue 02 Jan 2024 19:02:39 +0000
ROA not before: Tue 02 Jan 2024 18:57:39 +0000
ROA not after: Tue 31 Dec 2024 19:02:39 +0000
asID: 266584
IP address blocks: 45.7.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:17:03:47:49:bb:d7:c7:d2:53:04:19:e8:41:f9:2e:f9:1c:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40C85279D2EB71F1B3DF1E15E0F4676C22BA650A
Validity
Not Before: Jan 2 18:57:39 2024 GMT
Not After : Dec 31 19:02:39 2024 GMT
Subject: CN=A59E296B0445ED1D2F8C977EFB55359935A03B8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:63:2a:ed:4d:94:dd:cb:a1:bb:9f:36:92:
85:eb:4c:d9:9b:b8:d7:cc:08:2e:a9:34:36:cf:5d:
61:b5:9b:b8:1c:dd:7e:84:a3:d6:d4:46:da:7d:40:
fd:27:2e:c4:71:dc:15:92:2d:3a:ad:a3:6f:84:51:
fe:79:d8:51:c7:cb:af:49:6a:8a:e0:07:36:ad:cc:
a8:5e:3c:55:33:08:ea:99:ff:d1:d9:26:a1:84:58:
61:40:f0:1b:bb:d7:33:ce:ce:bd:f7:3a:fa:06:68:
3a:1e:44:50:3b:a0:33:c1:d4:5f:62:85:ab:18:7f:
85:f7:a3:af:21:b9:81:5b:20:05:7c:f9:4f:d8:df:
dc:6b:2b:e7:6c:11:99:03:cf:d4:bf:86:60:02:e1:
30:12:d8:ba:04:b5:bc:0f:74:0c:02:3d:f2:7a:ca:
e2:54:18:15:34:9c:d9:49:43:a4:1f:61:83:b3:44:
f4:01:76:e2:b1:1c:2f:16:5b:eb:a6:51:a8:82:3e:
33:48:08:b8:51:de:70:a1:70:b8:01:26:6a:50:7f:
6d:9c:74:91:f6:49:38:19:89:ea:a9:24:98:9a:4d:
5e:b3:ed:cd:6e:65:27:0b:26:8f:6e:c6:4d:fb:03:
c3:4d:f8:ac:63:fd:3a:bb:f1:76:cb:cb:76:cf:82:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:29:6B:04:45:ED:1D:2F:8C:97:7E:FB:55:35:99:35:A0:3B:8D
X509v3 Authority Key Identifier:
keyid:40:C8:52:79:D2:EB:71:F1:B3:DF:1E:15:E0:F4:67:6C:22:BA:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40C85279D2EB71F1B3DF1E15E0F4676C22BA650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/34352e372e3131382e302f32332d3234203d3e20323636353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.118.0/23
Signature Algorithm: sha256WithRSAEncryption
60:50:0f:bb:51:1f:eb:e2:2f:ee:1e:ce:8f:22:8f:8a:77:0d:
28:1d:3f:69:ce:9a:b4:e3:43:0b:99:30:93:dc:d7:d1:28:56:
26:e1:12:0f:79:74:d7:61:95:1f:59:49:00:59:2e:8e:f6:cf:
64:b5:17:ab:bf:65:2d:65:e9:92:a3:54:3f:50:44:f5:d8:a3:
f7:50:64:c3:b6:18:25:e9:6c:7a:ec:e5:4d:4d:7e:15:03:3f:
c1:77:ea:8b:3c:65:34:d5:27:0b:da:e5:99:80:a0:e1:29:a5:
98:25:c6:c6:1f:81:77:00:52:fb:bc:76:2a:be:06:a3:49:87:
1a:ce:a2:df:e8:12:d5:49:bf:11:c2:b4:db:fc:4f:f6:00:49:
96:69:75:5a:5c:b1:dd:24:09:51:71:f7:3d:82:47:e6:d4:35:
5e:4b:b5:ef:f5:fb:fe:82:5f:34:c9:c2:2a:bd:55:05:d4:ef:
6b:6f:a4:80:7b:35:a9:0b:66:8a:96:ec:9e:49:82:77:be:4c:
ac:d1:40:b4:8f:3f:dc:1f:61:c2:05:4d:27:78:50:d5:58:55:
a2:4f:63:16:76:16:e0:a4:2f:af:b2:05:3e:5f:78:8e:f8:6b:
77:7e:da:96:48:db:22:92:1d:44:58:e7:88:de:22:7a:c3:c2:
83:9f:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org