Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/34352e3233362e32302e302f32322d3234203d3e20323638323232.roa
File: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (raw, json)
Hash identifier: jJ7Dv49Ir5W8PzbbhPZjeB+HyRS1hHRsyKYEKRib3Xo=
Subject key identifier: 98:6B:D4:80:1D:F7:1A:B7:4D:22:6D:3D:83:FB:FE:C4:F3:42:96:45
Certificate issuer: /CN=2B7C28300318BBB841E13A29F56C5A04DC2E7785
Certificate serial: 5FE09A9EAEDA81E27DC5FED3A07AA860D25940AA
Authority key identifier: 2B:7C:28:30:03:18:BB:B8:41:E1:3A:29:F5:6C:5A:04:DC:2E:77:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7C28300318BBB841E13A29F56C5A04DC2E7785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/34352e3233362e32302e302f32322d3234203d3e20323638323232.roa
Signing time: Thu 04 Apr 2024 18:17:03 +0000
ROA not before: Thu 04 Apr 2024 18:12:03 +0000
ROA not after: Thu 03 Apr 2025 18:17:03 +0000
asID: 268222
IP address blocks: 45.236.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e0:9a:9e:ae:da:81:e2:7d:c5:fe:d3:a0:7a:a8:60:d2:59:40:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B7C28300318BBB841E13A29F56C5A04DC2E7785
Validity
Not Before: Apr 4 18:12:03 2024 GMT
Not After : Apr 3 18:17:03 2025 GMT
Subject: CN=986BD4801DF71AB74D226D3D83FBFEC4F3429645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:0b:b1:d5:25:88:5d:40:07:f3:59:a3:30:
20:34:fa:eb:96:81:e4:ac:da:57:4b:b4:b7:12:a4:
e2:22:d1:88:18:f0:1a:91:4a:32:b9:8c:7e:a8:e8:
dc:17:a3:75:57:46:f5:2a:eb:29:f5:60:27:37:86:
7e:9a:d0:5c:db:10:40:67:39:93:0e:41:ff:ec:b8:
bf:cd:ce:e6:40:37:5f:a9:2f:b2:24:74:36:f8:be:
60:fa:e9:a1:a4:e1:97:37:91:bc:7d:10:bf:8d:be:
46:07:a4:65:9b:81:47:7f:a5:1a:2b:38:e1:eb:24:
11:38:ff:0b:3c:6e:da:cc:e7:84:27:d5:45:c8:9f:
36:6e:e6:e1:da:9c:bf:6d:36:f6:03:25:b4:e0:3b:
09:c4:2c:06:36:b3:f2:4f:74:80:db:5b:8f:76:c0:
28:7b:4d:1a:e4:26:51:dd:db:46:59:06:60:2a:25:
fb:7f:51:fc:16:4c:73:42:ed:c1:a0:0b:d3:23:c7:
30:9a:8c:09:b5:4e:fb:b0:b9:18:6f:b8:1d:e2:65:
b5:f2:1a:70:66:42:36:a1:35:d3:db:7e:4b:b6:13:
9a:a0:f5:3d:fb:88:45:cd:ee:9e:c3:8f:c5:71:95:
89:9e:1f:1c:93:89:8e:59:7d:c0:80:8c:3f:25:dd:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:D4:80:1D:F7:1A:B7:4D:22:6D:3D:83:FB:FE:C4:F3:42:96:45
X509v3 Authority Key Identifier:
keyid:2B:7C:28:30:03:18:BB:B8:41:E1:3A:29:F5:6C:5A:04:DC:2E:77:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/2B7C28300318BBB841E13A29F56C5A04DC2E7785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7C28300318BBB841E13A29F56C5A04DC2E7785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/1/34352e3233362e32302e302f32322d3234203d3e20323638323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.20.0/22
Signature Algorithm: sha256WithRSAEncryption
42:96:35:55:cb:b8:c8:6b:b6:e7:5c:b9:01:aa:f2:91:d4:40:
44:73:5d:d1:83:14:96:58:a8:1b:1a:58:e1:9b:a9:65:d4:49:
e5:47:ce:31:b8:46:fa:02:59:c1:f4:8c:46:d6:e0:ad:84:ac:
32:cb:12:6b:9f:af:be:fa:4f:9c:72:8a:3a:7f:ae:59:a3:2b:
db:3b:bd:16:72:dc:73:5c:d4:d2:ee:62:84:f4:6c:f6:46:e6:
ea:94:74:42:08:f2:87:c7:4e:fd:ea:1c:a7:d3:b1:16:b5:27:
a8:07:83:52:7d:3f:f7:a6:62:26:c4:21:80:c2:2f:6e:58:b0:
cb:87:c3:80:2c:55:f6:6d:72:72:5a:f1:91:31:a2:7f:16:92:
ab:8e:10:c2:4f:61:7a:25:60:e2:92:60:87:fe:50:da:46:c9:
67:fb:8a:b4:5f:b7:5a:fb:a3:b9:ce:e0:42:91:8c:72:da:8a:
81:94:5e:a7:9f:01:0f:6e:69:cb:07:e4:bd:d1:cb:4d:05:12:
d5:44:3b:26:ed:14:c5:3e:e3:18:4e:fb:13:4d:6e:8f:eb:5b:
b4:cc:da:7a:db:bf:62:e9:08:3c:16:45:3b:e9:b8:9e:22:3b:
3f:f7:a1:ae:02:3a:4c:c4:3e:9b:99:9b:8d:13:22:36:9e:63:
d3:32:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org