Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/34352e3233332e32382e302f32322d3234203d3e20323637323930.roa
File: 34352e3233332e32382e302f32322d3234203d3e20323637323930.roa (raw, json)
Hash identifier: 8KBYY2YZYqmAkzvS65VZl4yrBp1tKDanVTmDqLuts+U=
Subject key identifier: 02:67:7F:44:47:4A:59:11:A2:52:78:62:2C:21:9A:17:CA:02:8D:EA
Certificate issuer: /CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Certificate serial: 07F0BB33316D44CE489E43F0C4462ACC0C781ABB
Authority key identifier: 29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/34352e3233332e32382e302f32322d3234203d3e20323637323930.roa
Signing time: Wed 03 Apr 2024 18:31:28 +0000
ROA not before: Wed 03 Apr 2024 18:26:28 +0000
ROA not after: Wed 02 Apr 2025 18:31:28 +0000
asID: 267290
IP address blocks: 45.233.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f0:bb:33:31:6d:44:ce:48:9e:43:f0:c4:46:2a:cc:0c:78:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29D189B9A7639658160A27FD17B6D238AB9BFD4A
Validity
Not Before: Apr 3 18:26:28 2024 GMT
Not After : Apr 2 18:31:28 2025 GMT
Subject: CN=02677F44474A5911A25278622C219A17CA028DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:ec:1e:28:e9:a6:69:85:10:34:be:04:64:
f0:01:16:ef:ec:b7:b9:b0:c2:81:46:25:47:46:2f:
00:c5:e4:c0:05:56:cc:77:fd:8a:78:61:38:ff:59:
bf:1a:aa:b1:ae:8b:3d:09:cf:5f:4e:e0:fb:39:3e:
48:bd:0a:5e:f7:33:78:54:b2:79:df:3a:c3:b6:bf:
3a:32:e8:e4:0c:26:ce:2f:53:bb:4e:7d:b4:32:4b:
95:37:45:bc:e2:4c:a1:2d:22:e9:cd:1e:50:7a:c8:
9e:bd:c5:b2:f5:6b:71:e7:2a:e0:c9:1c:e4:c2:f4:
34:de:1c:48:64:0b:b5:c7:33:89:72:e8:04:3e:e8:
1d:e0:e8:20:0e:ad:6f:a4:75:aa:4f:bc:b7:f0:1a:
8b:6c:7d:dd:19:c6:d6:5b:c3:79:9a:d5:b3:6a:07:
0f:0c:53:a3:61:52:93:32:40:50:94:56:41:d1:79:
26:c3:af:65:9f:c3:19:12:b2:8f:12:de:e0:6c:a8:
84:4a:a9:64:8c:fd:6f:82:fc:0c:ce:63:fb:b4:8f:
a9:4d:a4:33:75:19:ad:a1:15:2f:a5:87:a8:ed:73:
5c:ec:c0:59:c1:e7:c6:66:79:ca:fe:46:f7:30:f4:
c9:3c:2d:bf:a8:de:f3:98:32:95:20:75:97:69:0a:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:7F:44:47:4A:59:11:A2:52:78:62:2C:21:9A:17:CA:02:8D:EA
X509v3 Authority Key Identifier:
keyid:29:D1:89:B9:A7:63:96:58:16:0A:27:FD:17:B6:D2:38:AB:9B:FD:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D189B9A7639658160A27FD17B6D238AB9BFD4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/1/34352e3233332e32382e302f32322d3234203d3e20323637323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:a4:b6:df:6a:3f:27:93:7e:fd:f3:09:3e:06:d5:86:0a:b7:
04:2d:66:3d:02:d1:3e:ec:c1:13:af:08:7f:83:05:b9:08:fa:
71:09:46:68:f5:bc:78:b4:d8:70:c4:98:84:ce:3a:3a:05:98:
af:86:0c:94:e5:d4:a1:37:89:2a:86:65:a9:23:ef:f6:fc:ed:
06:ef:5d:9c:9f:fc:8d:e7:1a:00:31:db:5b:48:d2:eb:25:47:
24:16:a9:2c:cf:f3:b9:b3:50:6a:5d:3f:e6:16:e1:93:84:76:
a9:cd:94:04:5b:97:de:3e:7d:df:9d:a1:de:31:1f:95:64:3a:
0e:df:c6:70:08:e2:7a:98:31:07:7f:02:26:cd:2d:d3:58:ec:
e2:be:26:1e:0a:ac:d2:95:ca:73:91:37:5c:b9:d6:1a:46:29:
04:09:e6:51:57:4d:f1:26:ee:9a:e9:58:16:be:e1:75:a2:50:
0c:4f:81:14:48:a0:24:da:ca:1c:33:80:a8:1d:d9:b8:bd:2c:
8a:89:57:dd:9b:c3:9d:17:9a:7a:5d:54:9a:aa:45:8b:3b:e3:
64:f4:a4:22:f0:b1:d5:2a:8a:cc:8f:89:d1:c2:ae:8f:3c:8a:
c5:28:58:40:cb:16:ea:0f:b5:fd:b0:25:ee:95:5a:93:24:2f:
00:7b:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org