Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33332e302f32342d3234203d3e20323638303438.roa
File: 34352e3136382e33332e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier: q95Z1q4Egl5vGP+QOuFK1QrfO1XAr6ciPfOXkxT4DtM=
Subject key identifier: BD:47:E7:52:E4:79:4D:10:5B:83:D4:2C:C4:A7:84:21:8C:1E:1E:2A
Certificate issuer: /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial: 7343A39B859FDB93CEDB6B62A2D09594F1B1EBF2
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33332e302f32342d3234203d3e20323638303438.roa
Signing time: Mon 24 Apr 2023 23:55:22 +0000
ROA not before: Mon 24 Apr 2023 23:50:22 +0000
ROA not after: Mon 22 Apr 2024 23:55:22 +0000
asID: 268048
IP address blocks: 45.168.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:43:a3:9b:85:9f:db:93:ce:db:6b:62:a2:d0:95:94:f1:b1:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Validity
Not Before: Apr 24 23:50:22 2023 GMT
Not After : Apr 22 23:55:22 2024 GMT
Subject: CN=BD47E752E4794D105B83D42CC4A784218C1E1E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:ef:4f:3a:6f:ba:d8:d1:8f:84:1b:57:f6:
38:36:05:81:12:01:4c:6b:0b:92:8b:b4:a0:6a:73:
35:61:f9:08:2c:0b:6e:27:e4:50:91:f0:d2:19:23:
55:7a:09:63:f3:b1:e0:e9:d0:e1:be:22:d1:bd:d8:
66:03:7a:79:9f:3d:fc:04:37:3c:14:97:37:bd:54:
b2:86:23:ab:a9:91:fc:5f:6d:46:22:04:6a:ff:31:
11:09:03:7b:ea:82:92:db:f8:3e:73:b7:e9:d8:46:
de:aa:0e:cc:99:dd:11:96:73:dc:8d:22:b3:08:d2:
19:e0:c1:d2:12:99:db:a4:bb:43:76:d5:90:ce:fa:
3a:7a:64:8d:81:91:48:17:40:54:60:5e:9c:b9:06:
ec:30:e0:ee:8d:66:1e:81:62:d8:ff:40:35:b0:b9:
7c:00:9e:0e:11:56:b2:52:06:e5:5a:40:fd:79:eb:
85:da:db:e9:d1:f4:82:a6:4b:97:3c:28:4d:97:dd:
1d:db:dc:2a:8d:f1:2d:3d:22:16:6b:5f:03:74:54:
17:5b:be:62:0c:16:53:35:35:52:84:88:0e:81:28:
7a:46:ca:37:15:c1:b3:5c:ff:25:8c:e2:e1:9e:69:
ae:e8:21:a6:65:b9:47:79:21:1c:d2:a9:ee:c4:d7:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:E7:52:E4:79:4D:10:5B:83:D4:2C:C4:A7:84:21:8C:1E:1E:2A
X509v3 Authority Key Identifier:
keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33332e302f32342d3234203d3e20323638303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:65:35:fc:4e:61:46:69:86:62:98:d9:5d:19:e0:91:33:de:
5c:a3:36:c3:5d:0d:05:6d:52:f9:71:f9:8c:ed:50:d9:9e:d1:
a7:cf:cc:be:13:42:5d:94:75:34:5c:d9:89:d1:62:34:4c:76:
c8:09:fb:3f:f5:08:32:22:37:12:71:b0:c5:b2:e0:99:70:bf:
78:a0:8d:e8:7e:6f:f9:0f:f1:51:3f:9b:fe:9e:93:a2:2e:04:
38:d1:2a:48:3b:2a:ae:cf:e6:df:b6:56:5d:33:12:8a:19:e0:
28:5a:ee:16:dd:04:bf:ac:87:a1:17:d6:2a:e9:ee:aa:43:e1:
6a:ea:2f:ca:28:84:be:c4:27:84:4b:0f:75:00:73:a3:ed:d8:
d0:1a:80:c5:db:74:d5:be:13:4d:63:30:50:4e:e2:68:7d:9f:
0a:a4:7a:86:b9:2a:6e:8d:9d:c5:2f:dc:24:1a:dc:dd:2a:7d:
4e:12:b9:b7:cf:6c:2f:f7:de:32:6c:ab:e4:b0:52:0a:61:0d:
35:25:93:a8:e3:90:f3:27:c7:08:0c:23:9b:9f:93:24:3f:99:
13:a5:e0:30:df:15:4a:bb:53:22:4f:67:0b:4b:c3:7d:c2:f0:
63:48:8c:42:c0:37:73:cf:b5:4c:40:bf:96:25:44:8f:b7:6c:
32:41:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org