Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32342d3234203d3e20323639343935.roa
File: 34352e3138372e3134342e302f32342d3234203d3e20323639343935.roa (raw, json)
Hash identifier: xpPU8wTRgdQ14TTPBB8gkSY3K1ucjWL0FWFLaELQPMA=
Subject key identifier: 2D:4D:F1:7D:4D:BB:60:6F:D6:1E:35:A0:29:67:13:44:21:99:68:D9
Certificate issuer: /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial: 13A13F345ABD753F400736246DCBB534B84B119C
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32342d3234203d3e20323639343935.roa
Signing time: Tue 11 Jul 2023 15:19:23 +0000
ROA not before: Tue 11 Jul 2023 15:14:23 +0000
ROA not after: Tue 09 Jul 2024 15:19:23 +0000
asID: 269495
IP address blocks: 45.187.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a1:3f:34:5a:bd:75:3f:40:07:36:24:6d:cb:b5:34:b8:4b:11:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Validity
Not Before: Jul 11 15:14:23 2023 GMT
Not After : Jul 9 15:19:23 2024 GMT
Subject: CN=2D4DF17D4DBB606FD61E35A029671344219968D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:aa:31:69:e2:88:e3:e2:3f:74:3c:cc:2d:
73:08:b7:48:fb:6b:36:62:35:6f:67:6d:fe:b9:09:
c5:8d:4b:45:db:55:13:89:5b:82:12:ae:f2:6d:59:
83:8d:02:e5:7f:31:37:18:1a:82:18:2a:26:57:2b:
1f:16:9a:2c:9c:13:f1:46:aa:2e:4c:62:b8:d4:85:
81:7e:f6:c5:58:5b:3c:c8:28:05:cb:5c:83:5d:51:
00:0f:90:6d:70:3f:15:fc:64:c7:d2:74:93:63:ae:
3b:8e:78:51:42:7b:64:de:f4:0d:30:0d:14:01:3c:
2e:b2:1a:1d:f4:17:24:b2:d3:b5:41:7d:77:51:1f:
11:8d:4a:62:47:a2:34:f0:30:34:60:45:11:79:80:
15:43:98:63:3c:9e:6c:55:f9:1c:5b:b1:77:ad:e6:
e3:0b:37:4c:4c:af:33:3a:6c:e8:8f:70:76:ee:e2:
e4:3c:90:fd:65:b8:e4:cc:34:8a:c3:fb:5b:d2:ee:
a7:29:52:2f:53:f2:56:e5:e8:c9:51:84:3a:f3:2f:
a9:58:1d:2e:01:b7:4c:a8:3b:d9:8b:05:9d:35:9b:
2c:66:20:f8:8b:51:85:04:e3:fa:78:0b:db:fa:7a:
2b:8a:b9:fc:8c:ff:5c:42:79:7a:bb:42:a3:41:1b:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:F1:7D:4D:BB:60:6F:D6:1E:35:A0:29:67:13:44:21:99:68:D9
X509v3 Authority Key Identifier:
keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32342d3234203d3e20323639343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.144.0/24
Signature Algorithm: sha256WithRSAEncryption
72:63:6a:98:7c:50:de:87:7b:f4:4e:12:96:b7:df:ee:66:ed:
66:f1:bf:4a:12:bf:5a:90:a2:de:12:0f:90:15:55:e9:b3:f4:
46:c6:0b:93:f6:6b:17:4f:b7:40:0f:36:a7:e9:5c:c9:df:0b:
2d:36:a0:e4:8a:c1:fd:cf:74:a2:61:ff:a1:46:23:fc:6d:00:
37:cb:6d:62:d2:2f:2a:ac:d9:5d:d5:77:76:48:15:a3:f2:73:
7d:43:df:7b:60:5b:0f:c5:6c:48:5f:de:94:ab:5c:a0:08:95:
d3:75:a5:0b:ba:5e:61:7e:80:72:a3:46:67:04:bf:f1:a5:35:
d6:fd:ef:48:de:65:ee:10:31:52:a3:4d:1b:71:54:dc:44:95:
90:55:12:1b:b5:5f:29:6b:5e:95:db:04:fc:1a:81:4a:a9:ca:
cc:25:29:5e:4b:83:b2:c0:39:fd:45:af:b7:d9:3e:63:ce:61:
25:06:3c:e6:83:71:37:35:20:1a:2c:26:aa:af:fd:0c:68:9d:
17:95:51:c4:39:73:f9:92:1e:02:0c:2d:48:27:cc:c1:f9:8d:
00:0e:18:0e:ec:e2:b0:47:47:ec:96:43:34:98:10:16:e7:77:
78:2b:9f:85:58:77:77:d0:cc:e8:7b:b5:fe:50:a1:e8:b0:68:
02:a2:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org