Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/37322e34342e32302e302f32322d3234203d3e20323636313636.roa
File: 37322e34342e32302e302f32322d3234203d3e20323636313636.roa (raw, json)
Hash identifier: Q3jzY8DmrODu2YMkrOKfboTixmj3JCrKtb881rKdBU8=
Subject key identifier: F4:E7:C6:DF:AD:A9:9A:65:D0:B9:CA:95:D2:1A:D0:9D:D2:5E:19:F2
Certificate issuer: /CN=C45BE1EABA367C0B81A07848E5BDE00DAED3160E
Certificate serial: 13EC21ECE2A9C8AE37E3C0998DA8064591FE96BC
Authority key identifier: C4:5B:E1:EA:BA:36:7C:0B:81:A0:78:48:E5:BD:E0:0D:AE:D3:16:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/37322e34342e32302e302f32322d3234203d3e20323636313636.roa
Signing time: Thu 04 Apr 2024 15:35:46 +0000
ROA not before: Thu 04 Apr 2024 15:30:46 +0000
ROA not after: Thu 03 Apr 2025 15:35:46 +0000
asID: 266166
IP address blocks: 72.44.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ec:21:ec:e2:a9:c8:ae:37:e3:c0:99:8d:a8:06:45:91:fe:96:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C45BE1EABA367C0B81A07848E5BDE00DAED3160E
Validity
Not Before: Apr 4 15:30:46 2024 GMT
Not After : Apr 3 15:35:46 2025 GMT
Subject: CN=F4E7C6DFADA99A65D0B9CA95D21AD09DD25E19F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:21:c5:41:2e:3b:43:8d:ea:ee:37:af:6f:
33:45:a1:b5:c1:ec:91:b4:e5:41:6e:d6:11:49:0a:
d2:c7:1f:5c:d8:41:21:27:61:f0:bb:99:f0:83:3d:
db:50:d8:53:83:36:87:d1:58:dc:10:d8:ac:a3:b1:
ec:31:01:98:95:4c:12:a8:65:64:d9:81:be:8e:aa:
d5:9d:3c:8d:07:66:cd:bc:d9:5d:97:a3:e8:93:2a:
1e:d1:65:07:87:75:fc:09:95:b9:20:27:b9:81:a3:
bf:a9:8f:b9:7a:51:7b:43:d2:89:58:c8:39:ff:45:
e3:79:28:f3:92:3a:88:66:ff:3a:90:f5:c5:50:93:
e6:ba:8d:31:de:b2:f4:53:ff:ac:2f:b6:29:79:f9:
77:aa:cd:aa:bf:19:a6:4f:ba:f5:a1:40:df:58:33:
0b:5e:a4:5c:2b:38:47:c1:f2:c5:83:55:9f:4b:78:
af:c6:61:a7:1e:00:06:b1:b8:a2:84:8d:40:39:32:
ff:87:a0:15:25:62:f7:94:7f:fa:f0:35:57:82:35:
19:5a:f0:48:b3:a4:19:68:74:b0:8c:4e:44:28:be:
4a:06:7d:1f:30:cd:cd:13:86:04:07:d8:bd:f1:56:
8e:29:74:90:11:94:8e:5e:29:8d:0a:97:f2:e5:c7:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:C6:DF:AD:A9:9A:65:D0:B9:CA:95:D2:1A:D0:9D:D2:5E:19:F2
X509v3 Authority Key Identifier:
keyid:C4:5B:E1:EA:BA:36:7C:0B:81:A0:78:48:E5:BD:E0:0D:AE:D3:16:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/37322e34342e32302e302f32322d3234203d3e20323636313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.20.0/22
Signature Algorithm: sha256WithRSAEncryption
04:97:63:25:48:06:be:c8:a3:f8:f1:f9:65:9f:33:84:3a:8e:
87:2f:5e:82:c8:e6:5a:ea:7f:bb:ac:9c:24:26:ac:7d:d7:5e:
69:1e:34:62:1d:50:76:93:5e:bb:fa:82:1c:ab:a7:4d:98:0e:
f9:c2:18:f7:01:14:91:af:4c:c3:91:a3:e8:68:53:dc:00:2c:
12:33:d4:49:ca:d1:30:2f:21:1c:d6:3a:34:0a:79:3c:cd:c2:
99:96:3e:8b:b3:91:65:0e:91:3d:02:92:c1:9c:21:53:3f:4e:
65:37:74:3a:11:ff:07:02:3b:3c:49:dd:f8:61:6f:31:5b:ef:
92:bf:7b:4e:b9:51:4f:4b:ea:48:d5:68:2f:49:e0:c0:35:8f:
27:13:d9:be:0e:c0:d8:65:29:50:16:ab:1d:c2:58:fd:94:02:
2e:82:91:cd:69:ac:b1:cc:98:37:cd:b9:b5:b5:0c:24:ee:94:
bb:84:b4:cf:9e:de:bb:dd:34:72:ab:51:95:ae:07:2e:f0:c5:
86:6b:a5:52:63:0e:87:6f:41:52:fc:2a:48:85:35:2c:ed:a9:
ba:9d:9e:c6:63:83:db:99:4e:0c:25:0e:d8:6b:37:13:c5:24:
dd:fe:24:5d:3b:eb:c3:c8:5d:b6:ec:0a:30:d1:29:a5:39:fa:
69:b3:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org