Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3232203d3e20323637333838.roa
File: 34352e372e302e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier: oCAplWyJ45R35v06vhwu37DFWbSSdb/3UxtmXVJTIws=
Subject key identifier: F9:D8:2C:69:5B:E0:25:B3:D4:46:07:66:FC:B1:08:EB:9D:F9:63:07
Certificate issuer: /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial: 1FCFB15AA6DF20A8480D0C481B536DAA4DECF92F
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3232203d3e20323637333838.roa
Signing time: Mon 13 Nov 2023 19:11:33 +0000
ROA not before: Mon 13 Nov 2023 19:06:33 +0000
ROA not after: Mon 11 Nov 2024 19:11:33 +0000
asID: 267388
IP address blocks: 45.7.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cf:b1:5a:a6:df:20:a8:48:0d:0c:48:1b:53:6d:aa:4d:ec:f9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33C015248532BCE3959F73092749FDE164934402
Validity
Not Before: Nov 13 19:06:33 2023 GMT
Not After : Nov 11 19:11:33 2024 GMT
Subject: CN=F9D82C695BE025B3D4460766FCB108EB9DF96307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:9d:dc:6e:db:a3:4e:79:bd:79:b0:16:3b:
22:91:3d:ca:15:42:8e:d8:b5:31:58:ff:ff:74:0e:
b8:ed:7d:64:51:fd:e6:18:6c:17:d7:3f:2f:e3:67:
0a:da:1f:0c:c7:26:9f:4c:97:8f:c6:b2:4a:2c:8b:
af:aa:94:97:d1:20:e2:7e:1c:65:f3:ed:23:5f:e7:
27:95:8d:87:dc:4b:bd:38:f1:4c:9a:7b:7c:9a:4e:
ee:7d:19:8c:dc:f6:75:93:5e:1c:3f:72:28:73:27:
3a:67:11:b4:1f:a1:4e:21:69:6d:4d:85:22:ec:83:
7c:5d:61:0c:d7:6e:02:9a:00:6c:f6:a8:43:cd:1e:
f4:a0:f4:a6:28:75:75:29:5a:fe:eb:fb:fd:33:f9:
e4:03:79:72:9a:d4:91:79:b4:18:b5:25:3f:68:98:
fd:21:3f:88:c9:c4:e0:e1:c0:98:4e:84:c0:2c:78:
64:4d:c4:89:21:f0:41:ec:ec:bc:1d:38:16:b8:59:
98:c1:39:36:91:a4:21:b4:f3:95:fa:7a:dc:fa:35:
5e:5d:21:f1:e8:72:b9:91:f0:0e:6f:6f:a6:f2:78:
c3:03:7b:c8:e8:ac:af:40:1d:bd:c1:4e:6b:9b:e0:
69:82:28:1c:08:db:d3:ae:92:6b:7e:10:a4:5a:0a:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:2C:69:5B:E0:25:B3:D4:46:07:66:FC:B1:08:EB:9D:F9:63:07
X509v3 Authority Key Identifier:
keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3232203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.0.0/22
Signature Algorithm: sha256WithRSAEncryption
70:b5:7c:d8:66:9e:fc:fd:71:f0:ba:48:be:80:a7:99:4e:e4:
01:09:de:53:04:6b:da:a5:d2:e3:03:bb:ca:ee:87:a9:b2:fb:
bd:41:a0:0f:81:a5:89:aa:08:b1:c5:9c:8b:ed:65:20:a0:bb:
98:8e:9d:c1:4b:80:5a:58:f3:f6:7e:14:3a:df:b0:cc:26:1d:
ac:51:db:92:e6:f8:f6:ff:80:6d:0f:89:a3:5e:56:24:d8:c6:
e8:9e:22:e3:5c:9a:ad:28:f1:dd:de:7a:66:31:8f:b7:c2:22:
db:8f:05:93:a7:ec:4e:5a:12:ee:17:bb:17:eb:41:3a:5d:ef:
f6:3d:d0:6d:ef:0c:79:d1:aa:82:35:64:98:db:93:4d:41:a3:
28:ef:2d:07:e7:3d:fd:ec:1a:c0:c7:c4:3f:96:61:03:73:ba:
e2:0c:35:4c:c9:48:af:4e:5c:47:6a:39:e7:68:9f:16:46:e2:
d0:4a:64:7a:97:4f:17:e3:81:cd:8c:49:64:d5:95:b4:f5:8a:
3e:b6:57:8c:e6:94:ed:29:44:65:0d:6b:1a:87:4e:3f:cd:f6:
f7:16:b3:e8:e2:05:e9:6c:5c:2c:59:d0:8b:a2:8d:25:ee:4b:
0a:4c:52:11:4c:38:63:6d:18:4f:36:03:bb:3c:d5:01:c2:44:
bd:d0:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org