Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/34352e3139302e36382e302f32322d3234203d3e20323639363430.roa
File: 34352e3139302e36382e302f32322d3234203d3e20323639363430.roa (raw, json)
Hash identifier: 861QlvrFX3foDjig2H/xcr0QyZv30KxLEaqdnM/ylcg=
Subject key identifier: 85:6E:83:B3:05:25:6D:83:9E:5A:ED:54:F7:FB:82:F2:65:24:43:BA
Certificate issuer: /CN=028AECB7B2EB02A3D78A64A521872D461244B9AE
Certificate serial: 621E9ACF984D096E82790A8A17C2C09BA0DC1D22
Authority key identifier: 02:8A:EC:B7:B2:EB:02:A3:D7:8A:64:A5:21:87:2D:46:12:44:B9:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/34352e3139302e36382e302f32322d3234203d3e20323639363430.roa
Signing time: Thu 04 Apr 2024 04:20:29 +0000
ROA not before: Thu 04 Apr 2024 04:15:29 +0000
ROA not after: Thu 03 Apr 2025 04:20:29 +0000
asID: 269640
IP address blocks: 45.190.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1e:9a:cf:98:4d:09:6e:82:79:0a:8a:17:c2:c0:9b:a0:dc:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028AECB7B2EB02A3D78A64A521872D461244B9AE
Validity
Not Before: Apr 4 04:15:29 2024 GMT
Not After : Apr 3 04:20:29 2025 GMT
Subject: CN=856E83B305256D839E5AED54F7FB82F2652443BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:a0:bd:82:31:bc:8c:db:9d:c3:28:5e:97:
4b:d8:90:9e:99:4c:c2:7a:27:fe:cc:fe:40:8b:05:
66:bf:f6:d7:fa:d1:43:36:10:31:9b:76:10:80:7b:
93:9b:c5:0e:32:2b:58:8b:67:46:61:5f:9f:37:b7:
f6:f3:2c:48:81:e6:35:49:ce:fa:20:c7:fc:52:52:
7a:5a:eb:c3:22:78:c5:81:12:4b:ef:36:c6:5e:64:
6c:d2:27:50:3c:7f:80:21:e8:18:19:76:88:d1:60:
ba:71:63:6f:cf:d6:6f:7b:57:00:84:dc:73:df:b0:
be:a4:90:db:4f:02:e9:9f:99:9e:42:d1:56:17:56:
47:26:6e:78:a7:0a:f9:eb:f9:a3:28:b6:a4:43:f3:
9b:4e:9e:39:de:08:64:a3:ba:2c:8b:ad:71:ea:f7:
89:52:e2:44:c6:3d:52:1a:1e:16:79:e1:ae:1e:21:
a7:9a:d8:1e:6d:78:e6:b4:c3:71:c0:33:dc:cc:77:
d1:d0:d6:f1:96:06:be:77:7e:6c:70:97:0b:e4:a2:
a6:24:66:fd:d1:97:cd:84:cb:24:62:e0:b2:b1:4c:
9f:f7:f6:29:9c:52:6f:27:d0:4f:4b:8c:96:42:d2:
a6:c3:f3:b6:9c:d9:38:10:c6:bb:56:12:85:3e:b0:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:83:B3:05:25:6D:83:9E:5A:ED:54:F7:FB:82:F2:65:24:43:BA
X509v3 Authority Key Identifier:
keyid:02:8A:EC:B7:B2:EB:02:A3:D7:8A:64:A5:21:87:2D:46:12:44:B9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028AECB7B2EB02A3D78A64A521872D461244B9AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/1/34352e3139302e36382e302f32322d3234203d3e20323639363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:79:f7:e0:a6:7f:cc:51:f5:69:cb:0c:1d:b8:5a:ef:49:10:
77:60:6b:ef:60:9d:41:9a:ed:df:a5:58:20:0a:c8:e0:de:b5:
d4:39:aa:fc:85:72:0d:c1:7c:cc:a6:e5:2f:39:70:64:ca:01:
8e:d3:d8:16:1b:d6:d3:bb:bb:e3:d9:54:bd:3d:b7:8b:82:bc:
e5:c8:f3:87:80:b1:d4:22:74:b0:7e:f3:01:44:2e:82:c2:2b:
27:41:4f:f9:f3:e5:45:2a:06:74:2a:2e:22:5e:74:71:f9:ad:
06:d4:f4:87:53:37:67:e7:f4:11:92:cb:3f:bd:f6:3f:70:65:
7e:68:cd:1a:c6:61:6c:85:20:37:80:d8:c8:96:35:c3:cf:cf:
58:c4:63:85:9a:29:19:e2:20:cb:80:c0:dd:30:5c:5b:1d:50:
19:2b:aa:2d:af:f8:58:25:a4:3e:9d:e3:ec:11:06:2c:a5:62:
35:85:45:f2:c8:ae:36:2e:09:19:af:9a:49:df:3d:9d:78:60:
39:af:6a:87:2f:d8:c0:1e:26:53:0a:57:9c:63:83:00:16:2d:
df:50:30:5f:f3:3a:fb:01:5d:5f:3e:e3:93:b1:c6:d3:55:99:
11:4c:3c:9c:fc:4d:c9:59:ee:a7:b3:15:67:d7:98:fe:95:b5:
55:1e:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org