Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131392e302f32342d3234203d3e20323636303438.roa
File: 34352e342e3131392e302f32342d3234203d3e20323636303438.roa (raw, json)
Hash identifier: 9r5iBSsi7CowRMk8tcJcy8spDzAjtoX59r93mj5vbfA=
Subject key identifier: A1:45:0E:71:F1:B7:02:88:BC:DB:46:8F:B1:52:39:BB:36:C7:3F:AB
Certificate issuer: /CN=2DB41A3BC0B44F47245BA46320F4817897477307
Certificate serial: 2D7672A8BAFC4C51710F0E24B88B897259ECDB20
Authority key identifier: 2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131392e302f32342d3234203d3e20323636303438.roa
Signing time: Tue 28 Nov 2023 23:16:10 +0000
ROA not before: Tue 28 Nov 2023 23:11:10 +0000
ROA not after: Tue 26 Nov 2024 23:16:10 +0000
asID: 266048
IP address blocks: 45.4.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:76:72:a8:ba:fc:4c:51:71:0f:0e:24:b8:8b:89:72:59:ec:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DB41A3BC0B44F47245BA46320F4817897477307
Validity
Not Before: Nov 28 23:11:10 2023 GMT
Not After : Nov 26 23:16:10 2024 GMT
Subject: CN=A1450E71F1B70288BCDB468FB15239BB36C73FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:73:34:c2:b7:89:b3:98:99:2a:bb:dd:a2:
a7:04:43:a1:15:27:96:dd:b1:e9:40:36:cd:06:d1:
d7:22:9e:51:d4:cf:ea:52:c4:46:db:4a:35:c0:4a:
94:30:64:46:99:0c:33:f2:92:0c:75:f2:82:01:91:
ab:35:35:d8:bd:c6:76:31:a5:a9:c7:29:3b:14:88:
05:c4:fd:a3:5c:84:ee:58:5a:de:20:31:19:b7:19:
47:6c:54:f2:28:ae:95:18:ed:0f:71:76:47:b0:e9:
21:38:9e:16:c8:4d:7c:9c:42:45:26:a8:0d:78:71:
3f:3a:a9:cd:46:56:70:76:72:67:97:d9:2f:44:af:
70:6e:03:2a:6b:c9:30:c2:7c:56:7b:76:e9:12:35:
d8:80:49:ca:59:b1:9a:1d:8d:05:01:81:4a:af:66:
b0:58:43:86:42:92:2e:5c:ea:ea:c5:ff:aa:49:a8:
b7:60:27:61:12:56:23:2f:57:c1:7b:c4:a0:0c:f7:
21:76:f4:f2:7f:98:e8:e0:dd:ee:18:88:6b:c9:83:
f9:3c:af:9c:80:86:be:e6:e9:74:f6:29:c2:c5:09:
de:13:a4:af:97:4a:20:e9:69:2b:48:5c:36:0b:47:
77:50:e5:5d:1f:a0:46:c8:73:0c:4d:5f:cc:dd:7e:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:0E:71:F1:B7:02:88:BC:DB:46:8F:B1:52:39:BB:36:C7:3F:AB
X509v3 Authority Key Identifier:
keyid:2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131392e302f32342d3234203d3e20323636303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.119.0/24
Signature Algorithm: sha256WithRSAEncryption
91:aa:36:a8:cf:1a:9e:a9:ef:84:7d:0c:01:75:7a:53:d1:a2:
35:a0:9f:ad:a2:b8:68:ea:ff:8a:8e:aa:4b:58:82:2e:cf:5a:
05:62:bf:a5:8e:1e:5a:ee:1f:f2:6f:eb:b9:9f:0e:e8:21:71:
f3:3d:23:76:3c:e3:d7:81:51:33:f4:24:cf:b5:8d:16:e4:c3:
ae:ec:a3:03:82:e0:a0:d1:32:14:ed:11:04:de:4e:68:2b:6a:
35:15:85:a4:3b:17:61:d0:ac:ef:e9:5e:a8:4a:2e:20:19:db:
a7:41:4c:53:2e:75:62:50:94:bd:8b:2b:06:8e:5a:0a:4a:f6:
3d:90:84:d3:d7:a3:9f:fa:53:48:50:b4:68:fc:11:70:81:22:
b3:e8:08:cf:76:93:7c:d9:ab:ee:c4:70:09:43:a7:fa:14:68:
82:6c:b0:2d:bd:cb:f9:e7:ef:9e:10:0e:8c:70:ab:c4:c1:10:
c9:ec:5b:ff:6c:f7:c9:52:24:52:6a:6b:32:40:a6:2f:ea:62:
ee:73:26:b6:3d:08:21:a9:5c:3f:49:0d:8d:bd:65:df:6e:61:
70:1b:fa:96:c1:bb:23:ff:33:45:68:ae:c4:ed:3c:36:31:64:
f4:86:46:0b:d4:28:7a:72:55:23:df:f7:96:f7:5b:df:15:5e:
05:19:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org