Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32342d3234203d3e20323636303636.roa
File: 34352e342e3132342e302f32342d3234203d3e20323636303636.roa (raw, json)
Hash identifier: lh7TDKYqhbWvhizFDPCtmp3mcqr+NmVJNVzHBw74SLk=
Subject key identifier: 67:FD:0F:72:C8:3A:0B:99:CE:83:B3:30:56:D2:C0:AD:CF:AF:5A:7A
Certificate issuer: /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial: 20C0B80C94361A9D635EBCBD96C94BA61FC44F69
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32342d3234203d3e20323636303636.roa
Signing time: Sat 18 Nov 2023 00:19:09 +0000
ROA not before: Sat 18 Nov 2023 00:14:09 +0000
ROA not after: Sat 16 Nov 2024 00:19:09 +0000
asID: 266066
IP address blocks: 45.4.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c0:b8:0c:94:36:1a:9d:63:5e:bc:bd:96:c9:4b:a6:1f:c4:4f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Validity
Not Before: Nov 18 00:14:09 2023 GMT
Not After : Nov 16 00:19:09 2024 GMT
Subject: CN=67FD0F72C83A0B99CE83B33056D2C0ADCFAF5A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:6a:45:fa:91:5e:f0:af:3a:d0:4a:d6:10:
9f:df:a4:13:b3:6c:67:5d:2e:32:8c:89:b4:fe:23:
68:00:0e:66:e1:e3:8d:f7:3b:dc:20:34:94:15:31:
b2:64:5a:2c:9f:66:a9:58:83:6c:db:93:d0:67:a8:
13:6e:7f:62:72:a4:6f:2d:e6:76:b5:02:84:84:dd:
a3:52:32:a7:13:f5:5c:1c:37:aa:17:e6:80:51:01:
38:ea:64:8b:ec:1b:64:6c:23:df:1d:66:dd:67:0b:
6c:6a:a5:eb:2e:7e:a8:c7:52:f2:af:3b:b2:57:80:
91:5d:55:58:df:07:ff:77:13:00:3c:b5:90:03:5d:
46:f4:53:21:3b:ee:a7:b4:fb:bb:52:e8:87:3f:f3:
7e:d8:0e:60:53:61:97:f9:ae:e3:aa:ae:da:30:67:
a8:54:55:8d:46:d2:33:0a:a1:2d:e3:5f:46:b1:54:
bc:25:cd:75:fc:e7:a4:aa:c7:9f:4b:a7:e9:c6:64:
12:62:6b:75:14:39:0d:0c:31:36:ca:7b:ed:ab:b3:
df:a3:3b:f2:d1:b5:8b:ab:0a:ba:63:c2:ce:92:0b:
3b:ef:91:e4:ef:2d:65:99:40:bc:a2:c2:b7:25:07:
2e:4e:99:99:af:69:2e:85:b1:d5:61:3a:95:64:26:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FD:0F:72:C8:3A:0B:99:CE:83:B3:30:56:D2:C0:AD:CF:AF:5A:7A
X509v3 Authority Key Identifier:
keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32342d3234203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ae:23:ff:26:64:1b:b0:88:5f:86:78:fa:77:7c:5c:7f:26:
42:66:46:31:68:81:b7:fc:df:53:db:88:e0:fa:58:bc:d3:81:
c7:bc:d0:1e:2d:08:a7:4f:f5:18:0c:51:10:21:00:60:e0:1c:
a2:c7:df:91:ea:c6:3f:50:6b:80:f5:9d:d7:53:1d:06:42:f6:
5c:4a:4b:23:cb:fd:f7:9e:f5:06:f0:47:f6:6d:fc:91:f2:22:
0d:fc:20:3c:7b:17:a8:d8:50:40:8a:0d:a7:cb:c6:b7:f2:36:
38:05:55:57:7c:47:f5:b2:b8:5e:85:ee:fe:78:fd:cc:f6:7a:
5b:5e:1b:c6:ef:c3:73:a7:d4:ca:58:49:8c:98:aa:0e:63:2a:
c4:42:4b:3c:5d:40:90:27:b2:9d:70:cb:23:e4:b0:f3:6c:c2:
a8:dc:d8:27:20:b7:c0:ea:91:7d:4b:eb:53:eb:5a:e4:80:80:
9f:68:6b:ff:cf:02:2a:f6:2e:68:56:db:b5:7c:6c:45:0f:fc:
59:7b:b2:af:a8:84:87:99:ff:23:bb:02:59:b6:69:6a:8c:72:
63:e3:48:32:ea:ca:12:f1:a8:42:7e:c1:f2:58:5a:c2:0e:d1:
57:37:3a:4d:72:7d:0b:cf:f3:74:6b:5e:ec:8a:5f:c9:a1:47:
7d:58:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org