Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32342d3234203d3e20323636303438.roa
File: 34352e342e3131362e302f32342d3234203d3e20323636303438.roa (raw, json)
Hash identifier: 2PDMcsyAKujCzvC3FvRxA3BO1ga8FeDi7F7bFkPHjU8=
Subject key identifier: E1:A0:E3:D1:88:97:5A:76:53:D2:CB:2C:C4:A0:44:EF:33:7B:E1:4B
Certificate issuer: /CN=2DB41A3BC0B44F47245BA46320F4817897477307
Certificate serial: 46749E25DDA1E769D659DEA6D12945F8EF8942D3
Authority key identifier: 2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32342d3234203d3e20323636303438.roa
Signing time: Tue 28 Nov 2023 23:14:46 +0000
ROA not before: Tue 28 Nov 2023 23:09:46 +0000
ROA not after: Tue 26 Nov 2024 23:14:46 +0000
asID: 266048
IP address blocks: 45.4.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:74:9e:25:dd:a1:e7:69:d6:59:de:a6:d1:29:45:f8:ef:89:42:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DB41A3BC0B44F47245BA46320F4817897477307
Validity
Not Before: Nov 28 23:09:46 2023 GMT
Not After : Nov 26 23:14:46 2024 GMT
Subject: CN=E1A0E3D188975A7653D2CB2CC4A044EF337BE14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:d6:04:0b:d3:ac:c7:c7:ad:c8:14:28:cb:
53:ae:a9:91:d5:7e:ab:2e:80:60:81:58:b5:03:e4:
89:0f:2a:a2:36:c3:35:3e:00:2f:53:2b:cd:68:f5:
51:8f:19:a4:76:b7:83:b1:40:5f:e7:f6:65:a7:24:
40:39:6c:86:80:2a:02:d7:fd:59:39:23:01:60:37:
37:e3:fb:ad:b1:96:5e:8f:51:67:0c:4a:1e:91:62:
f8:1f:a6:48:8e:1d:05:83:c3:4f:38:88:f8:15:a2:
c2:a5:f9:eb:c7:eb:f1:d2:2d:7d:62:a9:67:2d:b2:
8c:e6:96:15:04:81:71:77:e4:f5:07:99:84:78:1b:
c1:49:7c:5d:16:7e:b3:55:1a:c2:eb:32:91:db:e0:
76:48:bc:aa:5a:83:e6:99:eb:33:a6:fc:30:9f:aa:
0b:cc:5a:59:a0:e2:61:af:78:ea:e9:ef:c3:04:6a:
de:02:73:01:f0:e9:f8:05:d7:f7:c1:76:0c:ef:eb:
f6:c2:9a:4c:9c:f0:7d:54:91:48:fa:d2:2c:f1:79:
c5:e5:d7:fa:7a:0c:c5:ea:f5:39:62:82:ea:24:1f:
b3:57:69:e8:39:dd:79:67:bf:c0:19:b6:bd:9d:c3:
9f:6d:9b:af:a0:b3:82:a3:13:ff:34:8a:43:bb:ce:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:E3:D1:88:97:5A:76:53:D2:CB:2C:C4:A0:44:EF:33:7B:E1:4B
X509v3 Authority Key Identifier:
keyid:2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32342d3234203d3e20323636303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:00:75:d1:2f:67:f2:fc:8a:3c:ba:e6:32:b0:7d:d7:74:cd:
c3:12:c5:f5:ff:e4:4e:bf:72:94:f9:66:9b:55:81:a2:42:b5:
29:c1:e3:a4:54:5d:8d:d8:a9:fe:ff:78:93:ea:62:5c:25:cc:
10:7b:90:fa:6a:12:b1:ec:d8:35:4c:b8:ce:86:a7:dd:8b:52:
2e:4b:8f:8d:07:2f:14:d7:f2:69:a9:8c:f3:2b:1d:16:c8:15:
a8:2f:0c:68:b4:c4:01:48:dd:c3:4f:22:d3:80:9b:04:92:0a:
34:ad:dc:e1:61:fb:e3:18:19:6c:e3:78:99:73:d4:60:be:24:
92:90:3b:28:c6:6c:9c:7b:ec:79:bb:19:0c:8c:9e:a1:a2:4a:
9e:6b:34:ef:c2:d6:63:f6:1a:87:37:cf:c6:af:98:3c:da:c2:
52:fa:dd:ee:88:9c:64:a5:42:da:45:30:76:34:7a:76:b6:14:
e5:82:69:53:9f:9b:c8:e0:21:e0:24:0f:21:f4:9e:1c:96:5f:
76:60:a9:6a:cf:60:6e:83:7c:ee:65:b5:2f:3d:5e:59:f7:f2:
78:b4:63:88:ab:ed:f1:74:2f:cb:14:93:03:69:4d:2d:8c:b0:
02:52:2c:4b:93:b8:82:60:a1:ea:a0:ec:a7:76:aa:20:2d:af:
38:41:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org