Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
File: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (raw, json)
Hash identifier: wC+/n5Cc4LQv6oAd956Qg/kLO7o0/lHNAEohLnWEpqc=
Subject key identifier: 9E:C5:A0:0D:4E:AD:50:59:45:A7:D5:BE:D9:AD:80:7E:7E:16:DE:E6
Certificate issuer: /CN=896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3
Certificate serial: 23CAE5FF016FF239D133228F9F2C1EA29B88F918
Authority key identifier: 89:64:25:AF:5A:D2:BE:AA:DA:B7:20:A8:46:C4:F2:B7:C7:1C:3B:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
Signing time: Thu 29 Feb 2024 19:45:06 +0000
ROA not before: Thu 29 Feb 2024 19:40:06 +0000
ROA not after: Thu 27 Feb 2025 19:45:06 +0000
asID: 266070
IP address blocks: 45.4.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ca:e5:ff:01:6f:f2:39:d1:33:22:8f:9f:2c:1e:a2:9b:88:f9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3
Validity
Not Before: Feb 29 19:40:06 2024 GMT
Not After : Feb 27 19:45:06 2025 GMT
Subject: CN=9EC5A00D4EAD505945A7D5BED9AD807E7E16DEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:2e:9d:7f:14:1e:17:86:82:fc:a5:bd:94:
51:83:70:6c:e0:83:ad:77:dc:87:f3:60:80:32:85:
e6:82:80:8a:7b:d1:0c:fb:ec:32:d9:58:77:7c:6b:
8e:fb:6c:f7:a2:23:da:e7:52:74:19:c8:a2:2f:4b:
a7:a4:84:45:68:d4:bd:3a:59:08:fd:36:71:a5:cf:
f0:06:5d:74:2b:23:db:1d:0c:73:d7:17:9c:cc:57:
0f:77:6d:6d:e6:19:26:a9:e3:b6:2b:46:0b:74:4d:
6f:34:42:9c:83:a9:11:89:37:38:29:c4:60:aa:ef:
e1:a3:7e:25:0c:df:47:12:e4:46:96:a7:5b:71:88:
f6:ad:06:94:93:cc:f2:34:4d:29:e0:91:9b:24:04:
0b:86:69:1f:fa:e1:00:37:48:c4:de:21:b8:8d:c5:
12:b1:50:fa:61:c0:a0:48:d7:7c:77:fa:0b:93:c2:
9c:dd:02:c4:af:80:83:85:f4:20:c6:31:af:cc:7b:
17:52:de:d4:27:2e:cd:13:5c:e6:50:46:65:07:7b:
18:61:76:8f:e6:76:8c:29:f4:bc:84:35:0c:56:d0:
48:86:86:ce:24:d5:e0:ff:b0:05:1b:90:c8:23:c7:
30:4b:0f:32:5e:8c:e7:a3:b8:43:a5:d6:cb:82:00:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:A0:0D:4E:AD:50:59:45:A7:D5:BE:D9:AD:80:7E:7E:16:DE:E6
X509v3 Authority Key Identifier:
keyid:89:64:25:AF:5A:D2:BE:AA:DA:B7:20:A8:46:C4:F2:B7:C7:1C:3B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.112.0/22
Signature Algorithm: sha256WithRSAEncryption
87:2d:05:0c:67:68:d9:44:d8:57:e7:de:6a:8b:6f:e0:ab:67:
e2:e9:70:3d:d9:93:9b:71:70:ec:4d:2a:6d:e1:45:df:aa:f3:
b2:2e:ba:67:61:03:8d:fa:08:51:cb:4a:89:01:16:c6:57:2e:
db:da:db:8c:95:2f:74:d5:8c:e3:3c:bb:f8:5d:d0:78:fa:00:
52:c0:30:9a:38:29:15:9e:7f:e7:61:d4:74:3e:ae:ae:da:a9:
3c:d7:2d:38:48:27:d4:2c:e7:c1:fd:8f:32:cd:0c:ec:2d:3a:
e0:73:86:54:00:1c:da:a8:7f:db:14:dc:9b:35:53:20:bc:35:
f9:3a:99:7d:ec:e3:9d:92:9d:4e:9e:ac:25:32:fe:6a:80:5e:
e9:93:10:3a:6f:2c:da:79:5b:b0:57:c4:13:17:2e:13:81:19:
4c:4d:7f:5f:fb:34:33:c9:01:a6:72:a2:92:c2:b0:ef:c0:6c:
3f:b7:7a:8d:e3:e4:04:d2:e3:59:8f:cb:14:6e:33:78:e0:90:
8b:8b:ac:be:87:93:bc:ad:24:a1:e7:3a:95:61:d7:13:0d:8e:
a0:8c:9a:17:f3:d7:33:9b:50:d5:23:32:79:36:f8:31:76:8a:
cf:8a:96:1f:78:30:62:8e:a1:dc:10:cf:cc:d7:0a:a2:ca:0c:
8a:14:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org