Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32322d3232203d3e20323639343935.roa
File: 34352e3138372e3134342e302f32322d3232203d3e20323639343935.roa (raw, json)
Hash identifier: lE8PhCoJGcZqu1QuntCWgGAOsWQgezAhYpqYdW9wEw4=
Subject key identifier: D1:6D:2D:E8:23:79:EB:A3:1A:08:ED:C0:D8:A3:0C:B1:0D:80:FA:47
Certificate issuer: /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial: 6EA2AE58E6B5DBEC112C2F5455983E8CA08808C1
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32322d3232203d3e20323639343935.roa
Signing time: Fri 26 Jan 2024 13:45:36 +0000
ROA not before: Fri 26 Jan 2024 13:40:36 +0000
ROA not after: Fri 24 Jan 2025 13:45:36 +0000
asID: 269495
IP address blocks: 45.187.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a2:ae:58:e6:b5:db:ec:11:2c:2f:54:55:98:3e:8c:a0:88:08:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Validity
Not Before: Jan 26 13:40:36 2024 GMT
Not After : Jan 24 13:45:36 2025 GMT
Subject: CN=D16D2DE82379EBA31A08EDC0D8A30CB10D80FA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:de:56:6a:27:f3:77:1c:e4:f9:39:3c:ac:
fb:4d:07:7e:9b:b2:18:7e:26:9b:e2:4e:e2:e6:c7:
7f:b5:5e:8b:c5:de:7e:97:09:25:7a:39:c7:77:8c:
09:df:c9:31:83:1a:10:78:2f:82:6b:de:b2:7a:07:
a5:b0:65:32:cf:2d:d3:ac:ec:14:6f:f3:94:8f:b8:
cb:6a:2e:1c:33:ae:c0:6d:5b:08:5c:f2:ab:f7:e9:
29:c2:6c:a5:43:b7:dc:9c:bd:e6:4a:89:03:aa:a2:
80:aa:01:b5:b6:98:a2:61:6c:32:f3:17:f3:25:94:
cc:6a:70:3c:76:07:1d:8a:15:a5:c5:ea:b7:56:ef:
c7:c4:70:21:1d:f5:9c:32:e2:ff:01:83:eb:39:8a:
2e:ef:0a:bd:4e:2d:68:7d:9a:a6:4b:49:be:0d:a7:
b0:d2:2c:be:3d:05:bc:b0:cf:97:3b:c6:7a:93:d0:
68:b8:22:e7:d8:0b:07:9a:8c:33:36:fa:49:6e:bf:
21:e6:0b:71:b2:d1:8a:53:5e:5c:d2:b6:28:30:0d:
eb:ef:19:9f:2e:89:02:77:ab:4c:f8:bf:0e:ac:39:
62:53:18:c7:35:dc:d6:7a:60:39:6f:4a:3d:3c:70:
59:c8:5d:36:8e:bc:e8:3a:e4:a2:fc:b8:bf:57:d7:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:2D:E8:23:79:EB:A3:1A:08:ED:C0:D8:A3:0C:B1:0D:80:FA:47
X509v3 Authority Key Identifier:
keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32322d3232203d3e20323639343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.144.0/22
Signature Algorithm: sha256WithRSAEncryption
00:13:00:6a:31:d9:3a:a6:a9:f1:6c:18:70:88:bf:a4:7a:68:
4b:ef:25:38:6c:3d:a4:e1:b9:75:06:04:ef:d8:d3:27:89:a8:
55:ae:fd:77:9d:46:73:ec:ab:ce:68:13:22:d4:a7:2d:0c:fc:
c7:cf:2c:86:85:72:b4:45:87:00:e3:46:e5:db:8b:05:57:90:
56:88:7f:cc:31:d1:44:3b:33:2b:b1:68:a0:63:35:f3:5a:35:
cb:34:a4:43:23:9f:dd:6a:fd:80:d9:8f:27:ae:83:60:e4:08:
f9:07:94:15:e3:81:50:2c:c4:b1:b1:97:8a:e5:1a:45:22:cb:
5c:9a:b2:5a:a3:84:65:c3:4c:fa:0d:6d:06:5f:b2:95:e2:a8:
af:02:92:fd:ae:b4:2d:01:8d:71:a7:1c:b0:67:06:27:e2:00:
77:3c:f1:ff:55:a4:ac:4c:4c:f9:a7:80:38:b5:98:93:ca:e1:
90:97:78:bd:0f:6e:11:5d:b5:e8:9e:ef:8a:25:36:c5:14:81:
1b:8b:d2:83:df:3e:2b:5d:1d:54:c7:b2:32:fd:2e:6e:db:e2:
65:7a:3e:5e:24:92:eb:c7:e0:2e:c6:72:dc:e9:cf:ed:49:a4:
fc:78:5f:52:c9:3d:8c:43:21:9a:17:31:96:54:41:52:8c:d7:
ee:27:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org