Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa
File: 34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa (raw, json)
Hash identifier: HvbcRotdwdMHAgmNSZGYQ3czPCfI75cO1+NSIag9SL0=
Subject key identifier: F6:16:AD:80:03:44:42:11:F3:A1:E5:F2:54:D8:87:0B:74:B7:23:A9
Certificate issuer: /CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
Certificate serial: 62795229D4809648BCAE228BB796D6AF9B3D1A81
Authority key identifier: F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa
Signing time: Wed 25 Oct 2023 21:28:55 +0000
ROA not before: Wed 25 Oct 2023 21:23:55 +0000
ROA not after: Wed 23 Oct 2024 21:28:55 +0000
asID: 268333
IP address blocks: 45.237.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:79:52:29:d4:80:96:48:bc:ae:22:8b:b7:96:d6:af:9b:3d:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8F3AFA8F2547E8F53F83D47223BB2283026004A
Validity
Not Before: Oct 25 21:23:55 2023 GMT
Not After : Oct 23 21:28:55 2024 GMT
Subject: CN=F616AD8003444211F3A1E5F254D8870B74B723A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:b8:3e:ef:44:99:2f:c7:3b:8f:ae:ba:bf:
61:2c:cb:d5:b4:1a:e5:19:f8:b5:d4:37:c6:ca:fa:
48:9c:1d:6e:56:8e:76:5d:a1:a6:bb:0d:c9:36:28:
c4:e4:43:cc:05:11:56:2b:27:af:d4:1b:39:ce:fd:
43:7c:ab:cd:4f:0d:b8:fe:e0:b0:5e:c3:e8:be:a3:
4e:9e:93:27:8f:92:72:d9:d0:75:a1:60:b9:4d:bf:
a1:e3:88:a4:c4:e5:a3:7d:97:6d:0d:68:d3:d8:94:
b3:86:f5:37:4c:45:5b:5f:f7:b9:f1:f3:2f:a1:8f:
49:e1:22:bb:5b:ff:de:e5:a6:27:1d:c3:af:9c:5e:
19:be:4c:7c:4c:57:2f:df:c9:0d:48:d0:26:47:dd:
57:0b:0f:44:7f:72:45:85:cd:66:37:4c:05:98:cb:
ca:52:ba:16:f6:13:68:b3:00:35:dd:9a:df:2e:fd:
dc:6b:4b:69:fc:d5:72:c9:5d:44:35:48:de:26:34:
10:77:3d:ef:8a:79:fe:dc:a6:e5:32:7f:75:7a:91:
0c:60:90:bf:70:d7:7a:ef:b4:69:0b:55:df:f0:e8:
94:09:50:08:9d:05:9c:4c:78:e2:bd:8f:18:89:f2:
c4:0e:c4:f4:85:a5:1b:bb:f8:ca:5a:45:08:f2:b5:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:AD:80:03:44:42:11:F3:A1:E5:F2:54:D8:87:0B:74:B7:23:A9
X509v3 Authority Key Identifier:
keyid:F8:F3:AF:A8:F2:54:7E:8F:53:F8:3D:47:22:3B:B2:28:30:26:00:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8F3AFA8F2547E8F53F83D47223BB2283026004A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/0/34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:f2:e2:a2:72:cc:ab:e9:c1:9a:33:4e:37:e9:af:30:1e:66:
f5:0d:7f:7b:8a:d7:8c:f1:4a:86:f2:e1:26:7a:cf:2c:0e:0b:
fe:88:db:de:72:a2:75:5d:de:95:a5:d3:6c:bd:6e:7c:b5:62:
36:aa:9b:8e:3e:ca:f2:e2:1e:24:06:f5:b3:d8:52:f3:88:b4:
81:55:9b:ce:02:6a:e9:9d:75:98:a1:83:da:01:7f:fa:66:f8:
1a:03:48:b6:34:a1:94:6d:08:20:d6:be:8c:36:b9:8d:d7:ea:
58:4e:7d:bc:91:49:a5:f7:43:1b:5b:ce:7c:c5:6d:3a:fc:b9:
32:30:6c:cd:3f:b9:2f:63:7b:0e:cc:3e:e7:cc:ca:66:4c:5f:
f1:56:20:8d:08:37:65:52:c6:0e:17:6b:1a:9c:1d:d7:77:a4:
94:df:eb:33:b9:69:76:4b:c5:a3:fd:bf:c1:55:f4:39:65:b6:
26:c8:a8:00:f1:49:3c:19:27:59:c1:2e:73:68:a1:c4:bf:cf:
57:0a:57:9c:20:2d:21:c5:86:1d:62:ee:c0:b4:21:30:55:67:
5d:4d:2f:ae:fb:96:fb:5e:8d:2d:42:76:f3:0c:11:1a:c9:ef:
83:1f:fc:e3:01:af:ea:91:b5:7c:d3:a4:e3:1c:a2:94:fb:1e:
b8:12:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org