Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3232342e37362e302f32322d3234203d3e203238353830.roa
File: 34352e3232342e37362e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier: J+ZfdL5Jw6cX5p4g2xP4pMtqh46j2+zKjIygmlAKqqs=
Subject key identifier: EC:F3:CE:82:12:AB:4D:99:0F:ED:54:57:65:BC:C7:B8:3F:55:C1:81
Certificate issuer: /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial: 453DDCA0BD78F7C476E7DC13262D192173DC0B48
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3232342e37362e302f32322d3234203d3e203238353830.roa
Signing time: Thu 19 Oct 2023 19:15:00 +0000
ROA not before: Thu 19 Oct 2023 19:10:00 +0000
ROA not after: Thu 17 Oct 2024 19:15:00 +0000
asID: 28580
IP address blocks: 45.224.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3d:dc:a0:bd:78:f7:c4:76:e7:dc:13:26:2d:19:21:73:dc:0b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Validity
Not Before: Oct 19 19:10:00 2023 GMT
Not After : Oct 17 19:15:00 2024 GMT
Subject: CN=ECF3CE8212AB4D990FED545765BCC7B83F55C181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:0b:df:b5:48:bd:de:98:ca:5c:e2:6c:3e:
79:0c:18:7f:69:d8:c6:2a:9e:5a:bd:56:c2:02:67:
43:c1:f0:4e:9c:03:bc:0d:69:7b:7b:39:40:04:8e:
79:d8:3d:bc:28:3c:a3:a3:18:db:b8:e8:52:46:4e:
d9:64:49:93:1a:12:47:30:a9:9c:48:2d:91:e8:e5:
c5:9f:f6:fb:74:dc:db:5a:1b:da:34:4a:30:38:d4:
4a:33:cd:f4:80:c8:9c:c3:9f:ea:be:d0:53:f2:88:
e6:75:51:16:30:f3:ad:ce:a2:3c:6d:34:56:53:25:
99:32:52:9b:55:fb:c2:38:82:e8:e0:60:7e:9a:fd:
7a:07:d9:6d:4c:e0:cf:2e:60:b3:f0:8d:5e:32:df:
32:33:c9:f8:d7:f1:2e:04:38:e6:c0:d9:d6:c3:84:
5e:98:33:63:35:45:c2:08:0f:5a:aa:20:07:d7:05:
df:11:41:ba:e7:cf:b7:43:2f:6d:d1:aa:6b:57:98:
11:4a:a5:ba:00:c8:53:56:29:92:8f:eb:da:16:c4:
eb:82:8e:6d:ef:ad:69:30:c4:e3:5c:1d:ac:6a:34:
ff:3a:4a:ed:f8:2e:68:6d:c2:c1:08:63:a8:9e:34:
e1:ba:06:67:04:ca:08:a3:cf:01:d9:0d:70:7a:97:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:CE:82:12:AB:4D:99:0F:ED:54:57:65:BC:C7:B8:3F:55:C1:81
X509v3 Authority Key Identifier:
keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3232342e37362e302f32322d3234203d3e203238353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
82:bc:57:96:f7:60:90:d1:ab:e3:d8:d1:04:a1:58:4a:a1:46:
50:87:a1:a8:f5:7a:c0:6e:8e:42:98:c3:24:6b:d0:4b:3a:77:
10:00:61:5d:63:03:46:d7:2e:bf:58:57:c1:3e:57:49:e4:16:
6a:8f:bd:b1:8a:17:9c:c7:62:7d:17:8e:11:98:f9:80:8b:88:
6f:27:23:08:4e:a1:ec:58:36:2e:a0:19:ef:71:40:29:ce:69:
55:24:75:35:43:e0:2f:42:b8:d2:93:67:1c:88:89:6a:03:c6:
b7:ee:03:58:05:04:51:16:d9:83:04:e2:1a:97:c0:44:07:2b:
e3:9a:ca:8c:50:f4:f5:a0:47:0c:0f:89:c1:9d:aa:25:6c:29:
cd:c9:05:66:54:af:24:17:a4:43:73:54:91:7d:64:1b:6f:d2:
80:83:7a:36:60:63:ff:72:3f:a3:97:23:8f:d6:c3:5d:52:50:
9c:f0:97:0b:16:54:5b:2f:79:0c:a3:88:52:e9:00:6b:e6:81:
e0:eb:c4:0b:8f:4c:b9:0f:97:e1:c4:72:dd:6f:21:f1:0e:b6:
c5:a3:d5:08:86:fc:04:32:6f:f5:a5:5c:aa:ac:68:37:5c:4d:
35:dd:18:44:74:fc:03:0d:6e:1c:8a:4a:e5:f6:d6:bb:e3:f3:
f9:81:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org