Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
File: 34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (raw, json)
Hash identifier: l3BB/P9V/YfO9zqkpStoHRAkbWYZAsuxBajbr/tIpeA=
Subject key identifier: B5:A1:22:0F:CB:18:9D:E4:A4:B3:42:6F:26:BB:55:51:9F:97:BE:F4
Certificate issuer: /CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
Certificate serial: 056CE3B842032AE1A86B74BEC2E896DBED1E8C27
Authority key identifier: 35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
Signing time: Fri 05 Jan 2024 19:14:14 +0000
ROA not before: Fri 05 Jan 2024 19:09:14 +0000
ROA not after: Fri 03 Jan 2025 19:14:14 +0000
asID: 268230
IP address blocks: 45.235.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6c:e3:b8:42:03:2a:e1:a8:6b:74:be:c2:e8:96:db:ed:1e:8c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35948C139B708ABFE4A11AE018A8F5E25A09BA20
Validity
Not Before: Jan 5 19:09:14 2024 GMT
Not After : Jan 3 19:14:14 2025 GMT
Subject: CN=B5A1220FCB189DE4A4B3426F26BB55519F97BEF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:29:0d:f9:bf:20:48:ad:20:35:f9:3a:1d:
02:79:95:cc:ae:0b:73:9f:31:92:19:ff:a4:b1:cc:
0f:56:cb:95:30:13:23:d9:dd:94:85:87:15:60:bc:
25:88:14:e3:b4:db:a5:88:f1:8b:2a:9a:4c:44:a2:
6f:43:75:38:21:9a:b5:2c:8e:4b:1e:a1:0b:d8:01:
36:37:59:45:c4:d3:b9:dc:41:25:54:a5:ba:39:9b:
ab:d8:2d:07:c6:5a:3c:ed:e7:ef:15:6d:54:34:1b:
1a:0e:2e:1d:88:37:6f:15:1e:18:bc:e9:40:06:24:
66:66:81:9d:9c:11:9f:80:b7:f4:49:ef:c7:31:37:
f4:4d:02:2a:b5:cd:d9:84:22:8b:85:e6:91:6d:74:
17:20:d1:0e:4a:4c:ab:a3:f2:38:f8:0d:d5:84:80:
fb:f6:4c:98:0c:f2:70:f3:ea:a3:f6:13:dd:23:03:
31:01:7e:0c:e0:36:3b:36:06:c0:c1:44:1d:f4:54:
97:71:26:59:7d:21:19:58:ff:7b:f5:39:ec:57:77:
d5:63:86:5b:bf:08:39:0d:31:a4:d3:fb:64:b7:d4:
be:b1:fb:be:24:19:b9:b2:ae:4f:bd:c0:21:09:45:
d0:a7:ca:0e:c4:0e:c5:36:7e:b6:f3:e7:58:a9:02:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:22:0F:CB:18:9D:E4:A4:B3:42:6F:26:BB:55:51:9F:97:BE:F4
X509v3 Authority Key Identifier:
keyid:35:94:8C:13:9B:70:8A:BF:E4:A1:1A:E0:18:A8:F5:E2:5A:09:BA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35948C139B708ABFE4A11AE018A8F5E25A09BA20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.220.0/22
Signature Algorithm: sha256WithRSAEncryption
49:90:c4:fa:21:29:1b:90:06:17:37:ea:37:5d:38:23:94:ea:
f0:66:f7:99:b1:7c:2d:da:00:9f:8d:93:8a:34:67:af:99:13:
82:b1:1c:95:d6:3b:7b:46:e1:25:0e:b9:a5:02:24:67:3b:3a:
d6:fe:5c:2a:32:75:23:18:d4:78:6b:a2:c8:2c:9e:70:3c:a9:
e4:f2:f8:7b:5d:67:52:36:3c:76:8d:c5:01:65:a8:01:ec:b6:
11:57:8a:bf:fc:fc:13:a7:ff:53:e8:c6:fa:94:7a:1c:b4:3d:
68:89:e9:ff:f2:95:bf:68:2d:7a:68:64:a0:eb:d9:b0:ab:a5:
e1:3a:e2:fe:fd:e6:d8:d8:2f:9a:b1:45:69:8f:d1:30:1c:24:
de:4d:46:8d:19:b9:c0:e8:da:91:f9:5d:58:5a:7b:c0:17:0b:
b0:06:2a:a2:53:e5:5e:da:95:3f:63:f7:a7:5d:41:79:0c:12:
18:fe:b0:91:b5:47:26:6d:25:f3:5f:30:02:a4:ff:58:c2:fd:
09:ee:1c:a7:27:56:17:c3:67:ec:c7:42:71:43:9a:b3:90:70:
d5:e0:18:88:39:3f:b2:b6:ba:1c:32:37:37:1f:42:dd:2f:b3:
e8:a8:01:9a:77:ad:95:db:31:4a:f5:e0:f1:fe:9b:70:01:60:
f8:93:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org