Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3332203d3e20323638333238.roa
File: 34352e3233382e37322e302f32322d3332203d3e20323638333238.roa (raw, json)
Hash identifier: +fXnpMeIIEEFO2ldht3b4aeoq+3mezGG99yKgY9d9sU=
Subject key identifier: 68:56:7E:B7:0A:D2:5D:FF:36:8F:7F:5A:19:D0:A8:EB:AA:E1:A1:69
Certificate issuer: /CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Certificate serial: 3230227E8FA714278741A6529A592E62D4A02D97
Authority key identifier: B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3332203d3e20323638333238.roa
Signing time: Thu 11 Apr 2024 17:32:10 +0000
ROA not before: Thu 11 Apr 2024 17:27:10 +0000
ROA not after: Thu 10 Apr 2025 17:32:10 +0000
asID: 268328
IP address blocks: 45.238.72.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:30:22:7e:8f:a7:14:27:87:41:a6:52:9a:59:2e:62:d4:a0:2d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Validity
Not Before: Apr 11 17:27:10 2024 GMT
Not After : Apr 10 17:32:10 2025 GMT
Subject: CN=68567EB70AD25DFF368F7F5A19D0A8EBAAE1A169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:36:d6:31:5b:92:03:ed:06:f7:2a:c9:4a:
a6:5b:4e:11:64:7e:fd:c5:50:50:fc:8c:b8:a0:08:
8d:f6:ce:b8:9c:7e:a9:d1:96:80:c8:65:4b:d5:f1:
25:02:39:2a:05:36:59:a9:7f:01:38:31:b8:ef:d9:
1c:16:be:68:04:32:62:60:ed:34:a0:5b:11:ae:52:
a8:aa:45:90:fa:ef:18:dc:24:fa:c0:e4:13:02:6b:
75:5c:61:db:f9:33:fa:5c:9c:0a:1e:59:41:2c:89:
fd:11:24:86:f8:7b:ec:15:33:6c:c1:90:43:c7:67:
46:da:d2:3e:e3:85:71:8b:fe:98:1c:a2:88:80:52:
d2:3d:4b:af:86:1c:94:04:f7:b0:c9:f7:1c:59:a8:
ae:bf:52:cf:87:12:7b:f0:12:4f:ee:9a:83:97:45:
fb:54:15:d7:2b:cb:0b:95:ae:e0:eb:c4:91:37:bf:
f9:d8:2b:7c:f7:08:55:11:09:54:46:84:d3:86:be:
8a:11:7a:e6:21:2b:bb:b6:c4:72:5c:80:01:f7:9a:
02:8a:38:30:0e:b2:3d:8f:e9:d7:ec:0f:a0:d1:6d:
d4:eb:50:72:9a:e0:f6:ef:1c:6e:bc:8e:bd:94:6c:
13:7e:86:32:c9:29:b5:45:d9:67:26:13:5c:d1:6b:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:7E:B7:0A:D2:5D:FF:36:8F:7F:5A:19:D0:A8:EB:AA:E1:A1:69
X509v3 Authority Key Identifier:
keyid:B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/34352e3233382e37322e302f32322d3332203d3e20323638333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.72.0/22
Signature Algorithm: sha256WithRSAEncryption
41:e0:ec:20:a6:57:ab:6d:67:96:22:46:2d:23:c2:e1:67:14:
a6:b2:1c:cc:90:07:10:05:57:97:db:ef:84:af:29:e3:86:5e:
41:44:c7:89:ed:33:f0:23:d8:0e:a3:9e:73:80:24:d9:aa:dd:
f5:4b:f2:8b:f5:56:c0:d7:61:74:8d:19:08:9c:73:05:e0:dc:
78:a3:1f:15:bb:1e:be:a8:0d:d1:9f:96:54:6a:1a:b9:12:87:
e1:63:f4:fe:51:c2:2f:1c:0d:a0:bd:ea:d6:d4:6e:a4:12:a4:
e9:8c:51:3d:f8:11:7f:5d:33:2b:b0:a6:05:20:bd:80:f0:0e:
8d:dc:f4:cf:a4:22:69:69:77:e3:62:8e:0c:06:ea:6b:ef:cd:
72:d5:2f:ac:30:eb:54:e5:60:92:58:d8:b2:7d:fb:e6:f0:0e:
0a:53:67:fa:40:c4:90:b8:a2:37:53:5b:3b:6f:7e:7e:ec:cd:
0c:5d:6f:3a:73:50:40:d7:e5:27:95:46:3f:16:7e:ea:f3:b2:
7f:08:46:2d:95:e5:3c:05:1a:2d:0f:65:83:c5:bb:14:4a:60:
24:9d:68:48:51:36:52:84:9e:54:73:0c:49:fc:84:57:65:76:
c1:c4:e0:82:7f:4e:60:93:2a:84:15:3a:c4:cc:93:85:e6:01:
eb:75:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org