Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e342e302f32322d3232203d3e20323637313433.roa
File: 34352e3233302e342e302f32322d3232203d3e20323637313433.roa (raw, json)
Hash identifier: yYvl2yl7OxPgs0hMN+2EgYnGjPC4eYNE95nknf6gagU=
Subject key identifier: 12:21:8E:4D:13:75:ED:5D:DB:12:C6:92:68:C9:DC:ED:61:E2:8D:16
Certificate issuer: /CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
Certificate serial: 66B9A736E8B2E04FD1DE082723FB6EC0EEBA2136
Authority key identifier: CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e342e302f32322d3232203d3e20323637313433.roa
Signing time: Wed 01 Nov 2023 00:53:12 +0000
ROA not before: Wed 01 Nov 2023 00:48:12 +0000
ROA not after: Wed 30 Oct 2024 00:53:12 +0000
asID: 267143
IP address blocks: 45.230.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b9:a7:36:e8:b2:e0:4f:d1:de:08:27:23:fb:6e:c0:ee:ba:21:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
Validity
Not Before: Nov 1 00:48:12 2023 GMT
Not After : Oct 30 00:53:12 2024 GMT
Subject: CN=12218E4D1375ED5DDB12C69268C9DCED61E28D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:10:d6:a1:05:c7:a9:e0:ef:3d:de:49:f1:
3d:cc:33:92:83:51:89:a8:f8:d7:de:9c:d5:e0:a8:
e6:0e:7d:be:24:5c:98:17:b3:ae:5b:dc:6e:84:d4:
d3:5f:78:ff:3c:25:3d:19:ec:4d:44:5a:ee:ad:c7:
2f:14:6d:42:91:90:7c:02:d3:45:89:63:20:42:06:
3d:01:1d:a2:be:c9:aa:32:d1:31:69:99:05:f4:b0:
46:af:28:26:eb:74:a9:16:35:3a:4c:51:4c:ed:06:
4d:19:a3:ad:3a:a8:94:81:6f:ce:30:6f:5a:9e:e4:
e0:ee:82:f9:4a:d0:3e:00:e5:86:b5:a7:9f:ad:d3:
95:57:0c:ba:1c:0f:46:54:5d:43:b0:57:b3:c9:f3:
7f:37:30:db:ae:d2:02:8c:f2:12:35:92:81:d6:b8:
1b:b1:de:23:50:df:09:db:da:b8:f8:42:07:34:c6:
76:a1:20:e4:1a:7d:2c:82:27:33:4e:d0:fb:53:ab:
88:4b:d8:61:80:5f:7c:90:0e:4c:c2:18:75:12:94:
e8:1f:36:b2:1e:d0:4f:14:99:c0:5b:5d:74:81:ff:
71:95:54:3f:fd:bd:a2:fe:88:3d:f4:eb:fc:cd:1a:
27:71:6b:1b:56:25:97:1b:28:a9:5f:ad:d1:ee:aa:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:8E:4D:13:75:ED:5D:DB:12:C6:92:68:C9:DC:ED:61:E2:8D:16
X509v3 Authority Key Identifier:
keyid:CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e342e302f32322d3232203d3e20323637313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.4.0/22
Signature Algorithm: sha256WithRSAEncryption
77:a7:1a:56:c1:55:8d:83:de:d1:19:1e:98:ff:74:a9:a1:ba:
84:c8:2f:86:66:d2:99:11:ca:04:5e:76:5f:2f:f0:d1:54:39:
f9:43:f8:7f:c0:78:1d:20:cc:b5:fd:9d:e5:49:0f:e5:4d:6a:
36:7e:1e:c6:69:b9:22:eb:af:44:3e:9f:fd:83:87:ab:a3:c4:
c4:a4:cf:cc:fc:38:0f:d9:56:c0:cb:f3:3a:e7:b3:e2:07:b5:
da:b1:6f:17:12:c9:46:70:a9:6b:2f:58:1a:a0:13:9c:a6:64:
c8:3c:f9:53:03:ff:0d:c4:f6:84:dd:89:9c:b1:0e:bd:11:3b:
95:5d:e2:c4:cf:ac:3e:1e:21:d9:a0:54:30:e3:2f:38:d0:77:
1a:b5:66:c0:f7:15:97:41:db:05:c5:dc:83:9a:c5:bb:cb:35:
2d:96:b0:ac:40:44:87:48:77:79:ad:c0:de:03:b5:ff:46:8f:
72:2d:1a:e1:c5:a3:3f:34:6c:36:3b:16:92:8e:74:b0:e7:ac:
a4:ee:58:8f:a6:28:42:c8:70:f4:25:69:60:9d:a4:2a:8c:ca:
44:18:dd:9e:54:c2:2e:f6:f8:56:a8:29:09:75:e6:99:c6:e8:
a1:50:09:24:1f:76:af:87:ac:0a:c3:06:09:21:b2:35:3f:65:
35:f3:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org