Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/34352e3233392e382e302f32322d3235203d3e20323634353632.roa
File: 34352e3233392e382e302f32322d3235203d3e20323634353632.roa (raw, json)
Hash identifier: xYONhbovXohrquVH7Uv2TowrD77do0N3o00rm0LtlL0=
Subject key identifier: 17:AC:E7:0F:F9:59:84:25:88:19:A5:5E:ED:5F:74:40:8A:59:7E:9A
Certificate issuer: /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial: 187F4CC35CCA7AF35A82A3865CE212C300EB5D46
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/34352e3233392e382e302f32322d3235203d3e20323634353632.roa
Signing time: Fri 26 Apr 2024 19:28:44 +0000
ROA not before: Fri 26 Apr 2024 19:23:44 +0000
ROA not after: Fri 25 Apr 2025 19:28:44 +0000
asID: 264562
IP address blocks: 45.239.8.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7f:4c:c3:5c:ca:7a:f3:5a:82:a3:86:5c:e2:12:c3:00:eb:5d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Validity
Not Before: Apr 26 19:23:44 2024 GMT
Not After : Apr 25 19:28:44 2025 GMT
Subject: CN=17ACE70FF95984258819A55EED5F74408A597E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:02:43:f8:c2:17:b1:19:07:78:23:7e:0d:
9a:d7:43:21:16:94:6f:14:71:96:d8:9b:df:16:cd:
e0:1a:2c:b4:11:19:61:8f:df:70:67:d2:68:4c:60:
a3:3a:f3:f4:64:c1:c9:20:b7:d7:fc:a6:81:03:31:
de:10:69:7f:1f:5c:c7:dc:fa:a2:3e:a6:9f:d1:a4:
c5:6b:e2:63:47:3f:cc:25:28:5b:57:18:04:1a:01:
d8:b4:7b:b6:01:f3:26:7d:37:0e:72:69:4c:a3:fc:
4e:85:db:27:99:6d:10:f1:81:43:55:e5:29:12:19:
d2:ca:ab:50:7a:35:94:03:d4:39:24:cf:30:56:05:
6b:46:33:7e:63:fa:a4:f5:63:a7:95:d2:56:51:78:
87:17:b8:0c:e5:c4:39:0f:9d:36:02:99:80:cc:c5:
00:72:b8:94:8e:5f:68:82:28:21:ba:f7:7b:49:b1:
c9:60:19:b9:6f:fb:68:50:db:e6:53:e9:dc:b3:43:
c9:5c:86:63:1d:e5:01:9a:dd:58:13:44:a2:47:d1:
13:1a:ba:eb:0c:4a:5f:f1:38:3d:4b:92:06:d5:1d:
f0:b4:98:51:d3:08:59:31:47:c7:be:78:68:10:39:
71:54:61:24:7e:56:1b:a7:7c:d1:c9:16:81:f5:2d:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AC:E7:0F:F9:59:84:25:88:19:A5:5E:ED:5F:74:40:8A:59:7E:9A
X509v3 Authority Key Identifier:
keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/34352e3233392e382e302f32322d3235203d3e20323634353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
72:3d:3f:8b:7e:dc:0d:54:3d:21:0b:96:8b:3b:9e:da:06:17:
41:f3:0d:a8:a7:fe:2e:c4:81:49:86:53:fa:6f:20:30:41:16:
10:8c:73:c9:7c:12:80:a3:a9:b1:5f:e9:b4:91:b3:b3:a7:32:
d6:64:dd:b5:d3:60:14:b5:79:2e:08:37:b5:fa:0f:f3:8e:fe:
4e:3d:b4:f5:19:6c:35:b2:8e:94:82:3f:45:c9:83:48:21:1f:
a8:f6:57:bb:4f:ff:04:18:30:20:cc:10:bc:26:53:c5:63:be:
3c:f3:c7:e4:a6:1f:5a:55:1d:9b:34:ab:d2:1d:38:fb:23:8b:
50:ce:01:d7:25:6f:68:d9:6e:e2:7d:11:0d:71:72:73:f9:ba:
25:58:b9:2b:55:4b:db:6a:b0:51:cf:23:16:5a:25:84:39:44:
02:7a:62:46:c0:6e:b0:89:a3:26:08:20:12:e6:ae:ce:5b:6f:
9f:64:64:9c:33:56:71:bb:e0:b1:86:1d:24:fd:8d:ec:c8:9c:
7b:c4:0a:0a:c3:c5:d2:33:d9:ba:28:d2:b9:8a:1b:73:2d:8c:
59:2e:4c:dc:5b:75:57:66:13:91:82:b6:7c:6b:a8:01:bf:d9:
bf:ef:10:45:b5:ab:27:13:7c:32:34:d8:86:a7:e5:94:d8:c2:
6a:df:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org