Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35322e302f32322d3332203d3e20323638373038.roa
File: 34352e3137312e35322e302f32322d3332203d3e20323638373038.roa (raw, json)
Hash identifier: fK/tj5bE2NfWR97kUvF2NfKTT+VMCnELcTNkTsFNXS0=
Subject key identifier: C1:A8:1F:D7:08:08:8B:88:EC:D6:E6:C3:6E:C1:5A:34:F2:12:47:A9
Certificate issuer: /CN=A3BC58A7AD93BFD909F8B39F9334F55633AEF21A
Certificate serial: 1AEEDC17B348A60D4BA1CB6E96B3C70AB138D419
Authority key identifier: A3:BC:58:A7:AD:93:BF:D9:09:F8:B3:9F:93:34:F5:56:33:AE:F2:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3BC58A7AD93BFD909F8B39F9334F55633AEF21A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35322e302f32322d3332203d3e20323638373038.roa
Signing time: Tue 21 Nov 2023 12:48:32 +0000
ROA not before: Tue 21 Nov 2023 12:43:32 +0000
ROA not after: Tue 19 Nov 2024 12:48:32 +0000
asID: 268708
IP address blocks: 45.171.52.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ee:dc:17:b3:48:a6:0d:4b:a1:cb:6e:96:b3:c7:0a:b1:38:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3BC58A7AD93BFD909F8B39F9334F55633AEF21A
Validity
Not Before: Nov 21 12:43:32 2023 GMT
Not After : Nov 19 12:48:32 2024 GMT
Subject: CN=C1A81FD708088B88ECD6E6C36EC15A34F21247A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:0b:a7:77:9d:44:91:90:74:11:8a:71:20:
d2:e0:1b:58:ce:68:45:12:1b:ca:28:a0:2e:4b:8c:
10:80:28:a2:d8:ff:de:bb:8a:bf:23:f2:2f:87:a4:
79:1b:b4:df:3d:0b:59:c5:47:3f:08:2e:6a:bd:5b:
ea:10:ce:2b:ba:58:9b:16:8a:67:e6:3f:ce:89:b9:
54:ac:21:1a:7d:6d:8b:f9:67:bb:65:33:a4:e1:a7:
0b:c4:0f:03:e4:df:69:25:83:35:00:5a:cd:c5:a5:
13:76:cf:4e:60:ff:f2:16:d3:e0:85:8f:c6:79:e2:
20:0a:03:1c:10:13:da:72:b0:0e:54:aa:86:01:3f:
a3:be:66:29:62:43:fc:90:d2:a3:a3:7b:a0:38:ed:
81:04:26:74:53:a6:bd:b0:9d:6b:67:42:16:31:a6:
6b:5f:4d:31:48:73:89:a2:38:72:48:0c:fb:cf:d3:
1e:44:ea:3e:a4:49:48:58:9e:cf:80:2e:d4:c8:6f:
78:5b:ce:fd:d8:e2:45:5b:3e:f7:97:9d:cc:4e:09:
98:77:2a:e5:01:e7:1f:76:95:b3:e4:99:42:d3:0a:
70:92:8b:63:d8:5f:66:9b:e2:c1:ce:69:aa:84:f7:
6e:90:04:ec:2f:e5:05:17:1a:cf:d7:2e:44:4d:bc:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:1F:D7:08:08:8B:88:EC:D6:E6:C3:6E:C1:5A:34:F2:12:47:A9
X509v3 Authority Key Identifier:
keyid:A3:BC:58:A7:AD:93:BF:D9:09:F8:B3:9F:93:34:F5:56:33:AE:F2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/A3BC58A7AD93BFD909F8B39F9334F55633AEF21A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3BC58A7AD93BFD909F8B39F9334F55633AEF21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35322e302f32322d3332203d3e20323638373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.52.0/22
Signature Algorithm: sha256WithRSAEncryption
26:65:d5:b3:55:02:c6:20:db:6c:f1:f8:a2:d5:e0:b5:bf:83:
b4:b6:d3:ae:af:27:f9:40:44:ff:01:02:48:62:e7:68:3e:f5:
08:7e:93:37:47:22:38:68:e6:49:b8:b3:5e:69:87:79:c3:d6:
e2:ac:70:12:f3:79:38:b1:bd:64:a5:44:fe:60:b8:33:db:60:
fd:07:c5:ed:dc:c6:f0:99:a6:b8:4f:90:f5:c0:f4:0c:f9:99:
05:24:f6:d3:3e:69:2a:74:9f:00:fe:d4:d4:de:5e:eb:af:73:
e5:db:95:88:85:1d:ab:c9:8c:33:4b:93:5c:47:fc:f0:15:11:
96:75:bc:cc:d4:73:82:1b:7f:9c:3a:39:68:58:a6:1a:80:a2:
e0:76:62:30:90:fc:69:25:f8:e0:a5:71:57:d2:3f:10:8f:56:
df:35:9d:5b:09:be:cb:67:b6:7c:7f:67:87:57:21:e9:c4:ef:
0f:78:43:02:50:86:4f:47:c9:4f:b6:c9:53:f9:c5:31:39:bd:
ac:37:8a:13:1b:42:59:0e:02:55:c7:af:9c:b3:95:1f:04:db:
1e:60:22:18:e0:50:c9:09:aa:ee:a8:c8:74:57:46:c3:30:d5:
56:61:aa:6b:45:e0:4e:a2:34:f3:5c:83:35:86:5c:b9:30:21:
50:4d:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org