Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3233203d3e20323636303836.roa
File: 34352e342e3230382e302f32322d3233203d3e20323636303836.roa (raw, json)
Hash identifier: 0pqhB1Hko0pFeNZL9OHZCm/d0TIJ3WXWvTzPOCGRh0Q=
Subject key identifier: C8:8F:BC:B7:C3:DF:DB:82:FC:FE:1B:F9:F8:44:C0:43:6A:DA:A6:57
Certificate issuer: /CN=E7CEC0517A77D3840BD53B1A9DB0837429E25EA8
Certificate serial: 15F16CDBD6912B0BFB42B7F581A7332CDC79DB99
Authority key identifier: E7:CE:C0:51:7A:77:D3:84:0B:D5:3B:1A:9D:B0:83:74:29:E2:5E:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7CEC0517A77D3840BD53B1A9DB0837429E25EA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3233203d3e20323636303836.roa
Signing time: Mon 01 Apr 2024 15:40:22 +0000
ROA not before: Mon 01 Apr 2024 15:35:22 +0000
ROA not after: Mon 31 Mar 2025 15:40:22 +0000
asID: 266086
IP address blocks: 45.4.208.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f1:6c:db:d6:91:2b:0b:fb:42:b7:f5:81:a7:33:2c:dc:79:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7CEC0517A77D3840BD53B1A9DB0837429E25EA8
Validity
Not Before: Apr 1 15:35:22 2024 GMT
Not After : Mar 31 15:40:22 2025 GMT
Subject: CN=C88FBCB7C3DFDB82FCFE1BF9F844C0436ADAA657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:e7:ad:01:0b:d4:40:da:59:f7:03:17:8f:
6e:68:4d:4f:80:b2:88:4c:d7:bf:ca:6c:a6:f3:29:
7d:5f:19:b1:34:f3:ee:ed:d4:87:3b:d1:73:0e:b0:
89:c6:2e:6b:62:db:9d:a6:6d:10:b9:26:d9:e9:1d:
9f:bd:15:45:1d:9d:0b:6b:36:63:aa:6c:ba:f3:b0:
08:86:74:11:20:59:bc:75:6d:cd:e7:f9:e1:f3:cc:
48:07:20:04:a0:2a:ad:d7:bf:97:21:9f:f6:ab:46:
06:e1:55:14:3b:db:7f:62:0f:e0:4b:93:fd:44:c2:
a9:e3:38:e6:35:6a:b1:d7:63:39:cd:34:c8:b1:56:
0c:07:cf:1b:e0:ad:ac:d7:3c:0f:23:f0:f0:0b:15:
6f:b8:7c:6d:df:06:21:7b:48:f7:83:4b:ee:cc:70:
4e:73:7e:a1:d5:6d:ba:97:68:2b:10:d0:4e:88:9b:
0e:9b:aa:18:e5:fd:84:95:82:38:96:15:01:c1:91:
5a:d8:5b:c5:38:be:a8:0d:a5:21:79:92:12:3b:d1:
23:c4:a7:d8:86:aa:0c:e0:32:46:44:b4:8f:07:4d:
28:a1:59:ec:79:3c:ae:c6:ea:d2:6e:fb:cd:fc:e9:
1b:f2:b3:35:f0:38:06:31:e9:05:a1:c4:f8:73:f6:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:BC:B7:C3:DF:DB:82:FC:FE:1B:F9:F8:44:C0:43:6A:DA:A6:57
X509v3 Authority Key Identifier:
keyid:E7:CE:C0:51:7A:77:D3:84:0B:D5:3B:1A:9D:B0:83:74:29:E2:5E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E7CEC0517A77D3840BD53B1A9DB0837429E25EA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7CEC0517A77D3840BD53B1A9DB0837429E25EA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32322d3233203d3e20323636303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.208.0/22
Signature Algorithm: sha256WithRSAEncryption
00:53:9a:5b:18:8a:24:b8:09:b6:eb:b6:be:2c:af:01:d0:95:
bf:6d:bc:fa:71:14:51:af:50:09:79:a2:80:07:53:19:3c:60:
69:74:0c:64:de:3c:d2:f0:80:78:6b:b8:c2:9d:38:3c:1d:60:
e3:71:04:0c:56:9a:e7:ed:d2:9c:77:a3:b2:3e:55:bf:5d:3a:
09:ea:a8:d9:fa:8e:23:45:d4:5a:0a:36:b6:83:2a:67:a6:14:
8c:df:5f:31:10:8f:31:37:46:fb:8b:85:25:76:7d:64:e4:71:
02:07:48:90:19:5a:6c:ad:cb:0e:88:89:e5:3a:29:4c:98:65:
78:da:2c:99:d6:83:02:33:49:18:de:64:0a:7b:7a:72:99:0f:
8b:8b:4c:5e:25:51:90:a5:08:a2:da:54:1c:99:91:fd:6e:35:
0a:f3:33:7e:ab:81:89:e9:f2:47:4b:d5:5d:66:85:cb:6a:f9:
c7:cc:0f:3b:ad:b8:6d:c0:cc:5a:5b:2c:82:49:77:18:5e:94:
3d:af:cd:84:16:03:63:c9:07:cc:8e:eb:98:89:c9:c2:67:16:
12:06:2a:79:fa:0f:0f:9a:30:f4:90:dd:0e:26:34:e1:f1:aa:
14:9f:b8:4b:f9:e5:18:e2:e0:ed:21:cf:90:a4:eb:de:c4:b7:
93:44:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org