Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e342e302f32332d3233203d3e20323637313433.roa
File: 34352e3233302e342e302f32332d3233203d3e20323637313433.roa (raw, json)
Hash identifier: WnMBiPKKHLIWs4+QWHNLbTHNKOOO0A7rQ0SuchZd+6s=
Subject key identifier: FD:C3:11:A2:A1:A8:27:2E:37:ED:49:4E:0D:24:36:8F:0E:CD:15:26
Certificate issuer: /CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
Certificate serial: 490A865688AD836926F0DFAF943D921B51521C96
Authority key identifier: CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e342e302f32332d3233203d3e20323637313433.roa
Signing time: Wed 29 Nov 2023 14:23:58 +0000
ROA not before: Wed 29 Nov 2023 14:18:58 +0000
ROA not after: Wed 27 Nov 2024 14:23:58 +0000
asID: 267143
IP address blocks: 45.230.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0a:86:56:88:ad:83:69:26:f0:df:af:94:3d:92:1b:51:52:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF3FA66DE9F4F2A2F2083563338953C0D402A5B5
Validity
Not Before: Nov 29 14:18:58 2023 GMT
Not After : Nov 27 14:23:58 2024 GMT
Subject: CN=FDC311A2A1A8272E37ED494E0D24368F0ECD1526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:ce:05:97:1e:09:fe:15:55:34:9e:b7:5f:
9e:d1:c5:a8:67:a7:72:a3:a1:de:b1:97:b0:97:33:
23:2a:26:5b:38:d0:e0:25:db:8e:45:0b:72:24:5a:
c7:e2:63:1f:2f:f6:2f:02:9c:8f:80:43:4f:b4:2d:
56:d3:ab:43:f9:3d:59:b6:89:03:4b:8f:4e:1a:b4:
44:8a:3a:49:73:17:8e:04:e7:e7:c3:d4:c3:db:0f:
dc:73:3d:21:c9:2e:44:36:95:f6:52:8d:c0:3e:08:
80:ab:2f:ff:60:25:af:33:a8:6e:e2:e2:f4:47:ae:
72:42:29:16:72:86:f0:9d:b1:8e:19:07:f2:22:71:
1b:ac:26:40:b2:d5:45:98:0d:e5:56:30:b4:ad:d0:
0e:dd:80:15:6a:34:5e:7f:3f:c4:90:06:5d:2a:ff:
ec:09:52:5e:f7:10:ad:ab:ad:ee:9f:53:6d:54:cd:
f2:3b:6e:3e:2b:74:1b:a0:ed:f8:f5:8a:6b:6c:c0:
28:97:e5:e0:f6:e9:72:db:05:fc:13:49:64:1a:d7:
a0:8a:7d:5d:af:d2:57:63:4f:ca:91:65:5b:69:96:
7b:31:6b:dc:75:d5:24:0c:28:bc:93:db:9e:1b:4e:
df:ee:a8:39:7b:b3:b3:68:79:b2:75:d4:88:17:18:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:11:A2:A1:A8:27:2E:37:ED:49:4E:0D:24:36:8F:0E:CD:15:26
X509v3 Authority Key Identifier:
keyid:CF:3F:A6:6D:E9:F4:F2:A2:F2:08:35:63:33:89:53:C0:D4:02:A5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF3FA66DE9F4F2A2F2083563338953C0D402A5B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vEndU8BjdpCkq6aSMWEZQgsnCqWBgo5fmDqvoyxeJVv/0/34352e3233302e342e302f32332d3233203d3e20323637313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.4.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:40:70:13:f7:e5:05:be:d4:cb:7a:9b:e8:62:b6:ff:96:4f:
33:d4:4e:a7:f7:60:b1:4e:7a:99:90:4e:ba:17:1f:d8:93:88:
1c:2b:49:53:f1:41:ac:c8:a0:6a:d7:93:b1:96:3f:73:3e:23:
87:72:03:65:c3:84:0f:2b:7d:ee:34:f2:13:fc:90:e8:ff:17:
1b:1c:ef:74:69:2d:f4:43:2d:77:8c:35:49:15:69:d8:c9:53:
6d:09:ba:d1:31:84:81:d8:0a:4c:9d:08:8d:1a:e9:f0:dc:cc:
b0:3b:0a:ea:08:f8:0f:25:b7:0a:3d:5c:41:92:1c:b0:cb:19:
16:0b:ef:2f:36:b0:fc:f5:17:dc:8f:50:9c:c8:af:87:c6:dc:
54:b9:9b:2b:55:09:2d:1a:a1:3e:63:23:d0:e5:16:0b:d9:34:
d8:57:7a:f9:a4:8d:a7:27:97:e1:6b:3d:34:f8:80:38:95:c5:
89:69:ce:a0:9e:fe:4a:93:fd:c9:7f:48:de:a3:06:bb:5c:2a:
b9:26:7f:64:32:b5:98:99:c4:a9:60:2e:e4:55:2c:76:e2:9a:
75:27:97:d9:f4:7c:96:c0:6d:87:b6:aa:65:aa:38:49:fe:0f:
c7:9d:0d:b2:1c:ff:ce:3b:99:6b:e8:ac:f8:71:0e:fc:61:9f:
36:0e:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org