Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
File: 34352e3233392e302e302f32322d3234203d3e20323638333438.roa (raw, json)
Hash identifier: 83fdiTLInIBqUT62ArkK2IXJqqaQpUXANR4vUQCAgZE=
Subject key identifier: 24:95:0D:C2:9F:CE:4B:EB:84:02:A4:8E:1F:79:E4:B2:35:03:0E:6B
Certificate issuer: /CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
Certificate serial: 38A71CA4A924275673F44D236442B3E1E9C73900
Authority key identifier: C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
Signing time: Thu 14 Dec 2023 18:11:59 +0000
ROA not before: Thu 14 Dec 2023 18:06:59 +0000
ROA not after: Thu 12 Dec 2024 18:11:59 +0000
asID: 268348
IP address blocks: 45.239.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a7:1c:a4:a9:24:27:56:73:f4:4d:23:64:42:b3:e1:e9:c7:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
Validity
Not Before: Dec 14 18:06:59 2023 GMT
Not After : Dec 12 18:11:59 2024 GMT
Subject: CN=24950DC29FCE4BEB8402A48E1F79E4B235030E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:1e:cb:b7:d9:b2:e6:ae:ec:3e:e6:e4:05:
d8:6a:41:4f:e8:c0:81:ec:f9:0f:ab:d4:2a:c0:fa:
5e:95:70:b9:7a:66:e7:81:82:af:a6:67:33:b4:c1:
d7:58:84:80:eb:bf:85:f7:86:5a:e1:05:18:d1:6e:
e5:47:76:02:5f:aa:56:44:c8:f6:ab:50:18:6b:7e:
52:07:00:ed:49:b3:ae:ab:69:6c:18:40:cb:5c:10:
61:60:de:16:be:c8:81:ff:32:b8:ad:05:b0:32:dc:
d5:98:78:54:61:19:bd:cb:32:16:ae:e8:d2:d9:83:
71:a4:c5:5a:d2:5c:5b:a4:7c:6d:1b:4a:7d:2c:e0:
73:41:d5:00:fd:92:b6:2b:7a:12:85:ec:8a:64:e6:
ea:23:b0:1f:62:1b:1b:9c:d0:72:e2:a9:3c:d5:5a:
49:bd:1c:cd:5d:f0:c3:07:d1:07:83:46:67:23:66:
7a:27:9c:c4:3e:95:99:c1:96:7b:64:24:63:f8:1e:
ad:7f:c8:6e:86:43:fe:5e:f3:bd:08:6a:ae:3f:4d:
40:ef:6e:97:99:0b:cd:4f:b3:a6:06:c8:3d:56:6a:
62:78:ef:ef:58:9d:2a:b9:fe:e6:84:d7:f4:b1:31:
36:9f:54:99:d9:a4:0c:fb:ff:50:6a:ff:c9:29:f5:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:0D:C2:9F:CE:4B:EB:84:02:A4:8E:1F:79:E4:B2:35:03:0E:6B
X509v3 Authority Key Identifier:
keyid:C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e20323638333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d9:04:ac:4d:ed:90:6c:3d:87:10:41:11:28:d3:96:59:1e:
9e:78:59:5d:85:d8:82:08:64:8c:92:e2:3e:8e:9b:1b:b1:c7:
d7:cd:b9:cc:94:7a:67:c2:c7:ad:44:d7:02:35:27:b5:a6:46:
c2:9e:3b:84:ea:fb:09:70:c2:1c:fa:4d:3a:b9:2f:ae:5c:71:
04:ae:37:31:f8:61:56:38:1a:a8:3c:ed:72:92:52:92:61:85:
3f:0d:f2:e5:e9:02:46:66:df:31:d2:fb:1e:6d:22:a3:f3:80:
9f:44:e1:0c:1e:de:5b:47:54:dd:70:e0:29:45:a2:ff:f5:7f:
69:07:eb:28:45:72:b0:fd:92:af:d6:cc:6b:6a:49:74:4e:1d:
35:9c:2b:d3:94:ed:c5:be:ba:d0:0a:52:be:f6:bf:18:87:e3:
47:83:7b:87:ea:d6:1f:02:61:ba:14:77:47:66:fb:65:8b:8f:
82:70:07:63:82:57:51:d5:22:b5:1f:b4:bb:0d:6b:6a:3c:c7:
f2:9e:f6:9c:8a:52:33:33:c7:a1:b5:48:b9:4a:1e:fb:7b:a5:
fe:80:17:2a:3f:c1:04:1c:f8:02:0d:fd:53:d9:67:75:aa:52:
1a:c7:55:37:bc:63:46:97:70:0f:06:af:04:5b:5c:da:3d:28:
f4:76:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org