Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133322e302f32322d3234203d3e203238323130.roa
File: 34352e3233322e3133322e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier: IuHf3JfYN0nscdvfkER74Ap5ps6Nh+yJgIENdPtLCYI=
Subject key identifier: 28:5D:80:80:AD:76:45:82:A7:19:28:3C:FA:E8:E0:BB:57:88:FE:C7
Certificate issuer: /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial: 5F5C36334A66D15B1CA46303235E3A8F13612D2C
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133322e302f32322d3234203d3e203238323130.roa
Signing time: Sat 04 Mar 2023 16:07:15 +0000
ROA not before: Sat 04 Mar 2023 16:02:15 +0000
ROA not after: Sat 02 Mar 2024 16:07:15 +0000
asID: 28210
IP address blocks: 45.232.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5c:36:33:4a:66:d1:5b:1c:a4:63:03:23:5e:3a:8f:13:61:2d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Validity
Not Before: Mar 4 16:02:15 2023 GMT
Not After : Mar 2 16:07:15 2024 GMT
Subject: CN=285D8080AD764582A719283CFAE8E0BB5788FEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:7d:27:db:89:cd:3f:5a:db:ac:6c:53:4e:
92:98:3d:ec:57:6e:52:99:5b:33:1c:fe:86:7a:76:
bd:77:b6:6f:d7:d7:58:57:bf:77:74:17:61:4e:37:
63:bb:c6:7a:cf:e3:de:5c:97:57:10:32:fa:67:5c:
af:d3:97:61:f0:75:45:47:e9:63:43:0c:2a:dc:ec:
cd:25:f6:b1:17:8b:96:82:89:36:f2:c8:96:d6:f4:
98:16:04:dc:b2:72:a1:a0:e7:8a:10:49:18:d2:a5:
72:0e:b1:88:7a:15:d2:cb:0a:26:96:71:2f:82:9a:
e4:11:46:6e:0f:12:de:a3:28:ba:52:47:32:d5:d7:
c0:eb:59:17:0d:c8:ac:bc:e5:18:d9:bd:2f:ae:5d:
ca:36:fa:6f:b2:b5:86:11:77:e1:bd:e6:da:ca:a5:
1e:3f:19:07:60:54:e0:2d:b6:74:35:9f:2d:39:c9:
74:95:33:76:e6:0d:1e:db:43:17:a6:16:fe:e2:aa:
20:37:ad:97:32:6d:a2:61:a6:57:8e:2c:55:36:b4:
6d:4a:f5:6b:0e:a4:94:50:7c:20:fa:13:d2:2f:28:
78:51:e1:53:ea:8c:99:c1:07:bb:28:a9:ec:e4:7a:
e9:ad:4f:e1:b1:39:be:d9:b1:50:aa:1f:de:14:c3:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:80:80:AD:76:45:82:A7:19:28:3C:FA:E8:E0:BB:57:88:FE:C7
X509v3 Authority Key Identifier:
keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133322e302f32322d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:63:f5:e0:c1:30:59:5f:f9:b8:da:03:13:da:d3:53:22:3e:
32:24:36:fa:16:a7:30:c8:bd:f7:27:ca:2b:08:74:b0:11:b5:
d4:ac:cf:a1:69:24:da:d2:32:60:4e:29:78:c0:17:ab:b2:a4:
d7:5f:d6:e7:ff:f1:64:a7:29:16:3e:68:e1:d0:83:8d:b9:b2:
dc:79:f3:74:e9:2d:87:7c:d8:b6:f7:e9:90:67:35:87:6d:73:
70:1f:4a:1f:3e:91:48:70:f0:86:cf:ec:2a:76:8f:91:ab:57:
1a:22:8d:20:ae:df:c3:a4:fc:bc:00:d0:6a:9f:89:fa:9c:68:
61:1d:26:53:d9:67:59:46:7d:a8:62:38:87:22:0a:53:1a:52:
cb:44:9c:1d:5a:7a:4a:2c:d6:d1:1f:fe:62:e7:9c:d5:5c:6c:
81:83:cc:77:2c:83:8c:16:af:50:d4:06:70:f3:1f:0d:8d:65:
8e:20:87:d6:74:72:5a:8e:77:4e:71:85:a0:40:a5:cb:b7:f3:
e8:2d:d6:8b:33:17:50:1e:97:73:0d:48:06:b8:86:86:8e:fb:
a2:e2:18:b2:2f:36:0d:ba:7a:6d:59:2f:69:80:fb:0e:ee:60:
13:34:26:f5:06:82:58:f9:ad:58:3d:0f:54:e4:38:2c:3c:a7:
6f:26:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org