Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/34352e3137352e38302e302f32322d3232203d3e203533303830.roa
File: 34352e3137352e38302e302f32322d3232203d3e203533303830.roa (raw, json)
Hash identifier: rtqzyKYlHuKqTod9gzcNbkoMWfuDA2SQhiVYtkFdOHk=
Subject key identifier: D8:C5:B5:6E:8A:9C:3E:5B:EE:E7:88:E6:1F:12:F5:C7:70:26:F0:82
Certificate issuer: /CN=3894D8226D8DE38887812D39103AE1FA7F305173
Certificate serial: 7D096C0F071E9A498CC39B59E9B15CC45C5A8B58
Authority key identifier: 38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/34352e3137352e38302e302f32322d3232203d3e203533303830.roa
Signing time: Wed 11 Jan 2023 12:20:05 +0000
ROA not before: Wed 11 Jan 2023 12:15:05 +0000
ROA not after: Wed 10 Jan 2024 12:20:05 +0000
asID: 53080
IP address blocks: 45.175.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:09:6c:0f:07:1e:9a:49:8c:c3:9b:59:e9:b1:5c:c4:5c:5a:8b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3894D8226D8DE38887812D39103AE1FA7F305173
Validity
Not Before: Jan 11 12:15:05 2023 GMT
Not After : Jan 10 12:20:05 2024 GMT
Subject: CN=D8C5B56E8A9C3E5BEEE788E61F12F5C77026F082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:23:a2:fb:ad:0b:5b:61:22:24:28:73:06:
33:6a:c7:00:be:24:fe:95:e8:20:c1:a5:65:33:e1:
cc:96:25:81:af:a9:a1:da:04:6c:4b:11:26:fa:a7:
29:2f:94:5e:02:30:ad:df:b3:be:f5:54:2b:cd:68:
bf:93:ee:51:2c:de:dc:8a:d8:6e:f2:40:a0:ee:a7:
7d:14:53:5b:8d:1d:1e:3f:8b:96:19:f3:4f:96:a9:
39:92:e5:ad:ec:43:b3:a0:6e:1f:5a:12:dd:d4:0b:
6a:b2:5c:62:ca:b9:39:fb:82:8d:cf:3b:d6:fc:d1:
93:3d:f7:2e:4c:1c:b3:09:52:03:14:3b:46:07:80:
48:3c:67:e9:79:e8:7d:b5:a3:49:5b:d7:bb:3b:54:
9b:b7:d4:cf:3a:3b:3f:0c:04:fa:ea:ae:d8:28:a3:
85:f1:b8:5c:6b:ea:a7:b3:74:49:cc:9f:a9:50:8c:
9a:d7:78:f8:cf:9d:b8:c4:55:c7:36:46:40:c1:df:
13:d4:e6:e8:68:ff:e8:ef:5c:4f:12:a9:6d:3f:63:
d9:86:16:2d:6f:c6:da:3f:84:27:ac:45:b6:48:ed:
97:85:d1:91:b2:45:7a:14:ec:0d:42:32:0b:bf:7d:
79:44:ad:e8:f7:5b:26:c7:53:63:b9:23:df:90:43:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:B5:6E:8A:9C:3E:5B:EE:E7:88:E6:1F:12:F5:C7:70:26:F0:82
X509v3 Authority Key Identifier:
keyid:38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/34352e3137352e38302e302f32322d3232203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.80.0/22
Signature Algorithm: sha256WithRSAEncryption
73:84:ac:19:2d:b9:45:c4:12:e6:e7:a2:e4:dd:08:04:bf:c5:
ae:82:cd:40:bf:18:84:3f:c2:cd:1c:6e:97:e9:d5:e9:cc:f6:
f7:b0:1c:0b:e2:97:f2:f8:1a:1e:97:bf:8f:1a:30:a4:d5:85:
53:f2:6c:a8:fd:a6:0f:90:71:53:f5:91:07:34:53:2c:78:22:
66:ea:16:36:07:45:7a:7c:9f:29:c5:bb:46:67:85:4f:0e:e4:
ae:f9:9f:24:a6:f7:9b:71:f3:c5:02:ac:ca:e3:4b:c9:2f:95:
3a:ab:03:47:24:83:bf:e8:80:cd:0b:ef:b1:19:03:d6:9b:1e:
ad:75:14:75:5f:f9:55:3f:b9:2d:66:cb:ef:28:ec:f0:37:97:
a5:a2:41:19:b9:fa:69:4f:2e:22:e3:ae:8a:ff:99:00:49:bf:
04:1c:97:e4:6f:66:fd:53:e1:2a:c6:14:76:46:c0:a2:06:99:
dc:9b:36:06:bf:be:ce:a1:c2:f1:cf:46:8f:e7:c7:18:8a:cf:
ab:6f:10:0e:14:bd:29:bd:72:c1:c1:e1:e6:09:d2:f6:3b:f5:
7d:64:df:94:95:55:76:0b:bd:a0:4f:e1:8d:82:ed:3b:9f:e9:
e4:f7:1f:ae:8c:ea:8d:0e:b1:95:38:ba:dc:f6:b9:50:20:67:
19:86:21:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org