Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
File: 34352e372e312e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier: dwA1KpLM91bmJ+Isysn6zBXhdBOIsiHAC3J6MtrdaU4=
Subject key identifier: BF:CD:D1:24:D2:16:DF:11:8C:AF:9D:08:F9:20:BE:76:8E:D2:97:01
Certificate issuer: /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial: 5525B262E4665BE1883CF1723CFF220BD4E76EA5
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
Signing time: Mon 13 Nov 2023 19:11:38 +0000
ROA not before: Mon 13 Nov 2023 19:06:38 +0000
ROA not after: Mon 11 Nov 2024 19:11:38 +0000
asID: 267388
IP address blocks: 45.7.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:25:b2:62:e4:66:5b:e1:88:3c:f1:72:3c:ff:22:0b:d4:e7:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33C015248532BCE3959F73092749FDE164934402
Validity
Not Before: Nov 13 19:06:38 2023 GMT
Not After : Nov 11 19:11:38 2024 GMT
Subject: CN=BFCDD124D216DF118CAF9D08F920BE768ED29701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:65:4f:b9:a8:73:b4:4b:27:ea:cb:f2:5a:
4b:01:f1:bb:d6:ce:d8:00:49:62:c2:36:4a:7e:29:
db:d9:42:0a:aa:d1:f5:05:3a:0e:ff:2f:44:43:98:
44:52:ed:57:ee:ec:57:64:1c:d7:e5:48:93:9b:90:
94:80:61:45:69:2f:bf:c0:f4:74:0c:cc:fd:02:97:
cb:9b:dc:a4:a5:9c:f7:48:fe:6c:86:7c:1f:89:83:
85:f5:49:c7:7d:aa:28:1a:92:df:89:3d:91:f4:11:
d6:99:29:e4:c4:c2:b0:61:23:a9:18:4e:0a:c9:23:
ac:13:e8:8f:c3:9f:68:50:5d:61:f6:c6:77:86:89:
71:41:e7:ca:2b:ac:47:1c:af:e1:8c:05:04:a7:4d:
52:b7:e9:eb:52:4c:2e:2f:4c:c9:a6:84:c3:5e:ba:
19:7c:f3:b8:93:56:57:e9:c1:03:4d:bf:c8:5b:4f:
0e:9b:d5:cf:9f:a3:21:84:e3:b7:ed:cc:9b:16:16:
49:91:62:97:0d:be:07:6d:dd:3f:6e:1a:8c:b5:80:
43:92:83:6b:a8:55:c0:d6:d1:e7:b7:22:91:90:90:
b7:c7:fb:ce:34:af:b3:30:d9:87:0e:39:0e:24:5f:
8b:b2:b5:9e:e3:75:e7:a8:4d:df:8b:7d:44:37:a4:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:D1:24:D2:16:DF:11:8C:AF:9D:08:F9:20:BE:76:8E:D2:97:01
X509v3 Authority Key Identifier:
keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:06:f0:15:3c:95:ef:0c:83:21:3f:27:e5:29:c2:98:ec:a4:
c3:7e:1a:02:3b:b4:75:a4:f9:eb:48:6d:fe:46:53:bd:77:32:
21:68:cc:45:51:5e:56:c3:7d:16:65:96:86:fa:00:c0:c2:37:
44:6e:f4:9c:64:39:37:c9:62:a3:03:88:76:89:ec:b6:8f:71:
8d:92:4d:af:a1:4d:aa:d1:c9:31:7e:88:f4:0c:fa:9f:bc:87:
e3:3b:65:1c:e4:a8:09:2f:9c:a6:e1:7c:af:57:41:81:14:c2:
69:2a:7e:4a:af:c9:f7:63:c5:98:d7:14:75:d1:64:71:17:8e:
33:9e:b1:08:f9:41:f6:4f:54:ff:78:17:dd:ff:84:62:29:be:
fb:20:25:a2:02:36:a0:28:01:47:02:e4:98:cf:1f:5f:27:3b:
39:f0:0d:99:8e:e3:9f:c3:a4:16:c3:6e:c5:bc:ca:c5:d6:8a:
76:db:3a:d9:cc:34:71:8e:97:39:8f:69:de:14:59:90:87:75:
c9:bf:c3:9d:e9:b9:05:2b:76:c1:49:9a:83:ad:c9:eb:e3:7f:
e5:8d:d6:3f:a4:ca:34:fe:28:b0:61:e4:f1:13:33:ed:3d:7a:
d7:3c:7d:e4:26:d5:41:42:28:f4:cf:0f:30:0e:fb:45:2e:b8:
31:11:eb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org