Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33322e302f32342d3234203d3e203533313831.roa
File: 34352e3136382e33322e302f32342d3234203d3e203533313831.roa (raw, json)
Hash identifier: WN6+1bBRlDaep+QnmoOyT5F7T1Fo+UCB1wHrcsWfers=
Subject key identifier: BA:34:94:AA:45:8F:0B:14:C8:8E:A3:C2:5A:47:39:07:8D:20:63:17
Certificate issuer: /CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Certificate serial: 3954074D0E4F93CF91FE37043F3A75ABA85CC397
Authority key identifier: 30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33322e302f32342d3234203d3e203533313831.roa
Signing time: Thu 02 Nov 2023 20:00:15 +0000
ROA not before: Thu 02 Nov 2023 19:55:15 +0000
ROA not after: Thu 31 Oct 2024 20:00:15 +0000
asID: 53181
IP address blocks: 45.168.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:54:07:4d:0e:4f:93:cf:91:fe:37:04:3f:3a:75:ab:a8:5c:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3058D72DCDB85A7DB947F5E98A1FBC6C475AA757
Validity
Not Before: Nov 2 19:55:15 2023 GMT
Not After : Oct 31 20:00:15 2024 GMT
Subject: CN=BA3494AA458F0B14C88EA3C25A4739078D206317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:4b:5d:f3:96:71:50:6d:f7:5e:a7:0b:af:
bd:b1:cc:d7:0f:e9:0d:e1:75:7b:8f:00:2c:7d:f7:
03:b1:27:7f:24:87:cc:ce:87:4c:bb:20:b3:3f:46:
f8:32:60:0e:00:fe:88:47:a7:13:b0:12:00:b8:d1:
b7:bf:97:d8:60:9a:e5:1a:a7:33:ad:b9:b4:11:1b:
63:14:5f:42:37:c8:47:2f:03:d9:9e:5d:09:c5:dd:
2d:51:e8:86:d4:ab:bd:06:ba:dc:1b:40:ea:be:08:
d1:76:32:1a:3e:96:ca:46:4c:b0:e0:33:a4:14:db:
d4:f0:99:df:cf:19:3f:1e:50:57:9b:40:3e:a8:ab:
e5:a0:e7:aa:aa:dd:c9:ff:0b:f4:59:11:a7:b1:11:
ce:94:c5:32:00:67:82:96:08:11:ac:fe:83:e9:14:
0f:fe:d5:fd:12:74:60:8a:73:3f:ae:7d:eb:75:19:
dd:8a:47:6b:9d:89:e6:70:f4:c3:a8:64:39:46:f1:
4d:2b:17:3c:3c:f0:36:24:12:09:21:12:f0:35:a0:
48:f2:fa:5d:0f:bd:96:76:60:ff:fb:2e:db:d9:6d:
36:6d:9e:ca:e5:82:d5:f3:4d:c1:3c:53:f3:0b:f0:
af:5e:84:b2:aa:7c:73:46:c7:f3:5c:35:6a:71:03:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:94:AA:45:8F:0B:14:C8:8E:A3:C2:5A:47:39:07:8D:20:63:17
X509v3 Authority Key Identifier:
keyid:30:58:D7:2D:CD:B8:5A:7D:B9:47:F5:E9:8A:1F:BC:6C:47:5A:A7:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3058D72DCDB85A7DB947F5E98A1FBC6C475AA757.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/1/34352e3136382e33322e302f32342d3234203d3e203533313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.32.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:b1:15:71:9f:86:f7:82:16:ca:99:bd:be:1f:6d:b8:b1:09:
6f:0e:d9:dd:8c:77:77:84:ea:6b:aa:a8:e3:fa:9a:0e:73:8f:
10:c9:a3:18:ad:b1:92:47:8b:0c:9d:e5:72:51:f3:2f:88:39:
e4:53:ba:d1:9c:e6:9b:69:8a:23:c1:91:1e:9c:fa:cb:2c:05:
43:5a:37:b9:68:f7:13:75:67:1f:ba:af:e3:a1:b2:7e:92:d3:
0c:e4:df:d8:0f:c2:43:b0:04:9e:c5:ad:30:14:d0:93:cb:36:
b9:17:3a:a0:c4:99:ad:3f:7a:7f:90:e9:36:49:bc:21:bd:84:
48:9d:9c:c8:12:1c:a0:bd:73:f4:c0:79:8d:2c:47:ec:ef:c0:
1a:4e:ff:f6:22:c5:3c:46:8e:fb:37:35:d8:37:fd:bf:ba:26:
ad:9e:22:4a:40:da:97:91:0d:0d:72:70:f4:a2:d5:7f:06:32:
cd:b9:5e:86:6b:8b:8f:40:e4:76:45:78:70:47:af:7e:13:14:
83:4b:34:74:24:ab:90:77:4a:89:cc:8c:fe:ac:13:98:be:04:
f4:c0:74:51:be:01:68:6a:39:af:41:2f:e2:b5:a7:8e:9e:1f:
4c:22:c8:a1:e1:0f:99:27:54:e0:15:96:27:be:65:94:f3:78:
dd:db:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org