Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
File: 34352e342e3134382e302f32322d3332203d3e20323636303733.roa (raw, json)
Hash identifier: 4j14h1PmmJqZA6mEbnB9BceR+PUhuUxvIlNvKNAatQs=
Subject key identifier: DC:68:B6:E3:58:AC:C8:44:E8:4F:B6:A3:5F:6A:91:FE:4F:B2:AC:DF
Certificate issuer: /CN=D1BCC595BDD75810B73D1FC485087BFB71859BFC
Certificate serial: 7C2B9187C500AD891C90AAE1D61AFD1E3E3B2E61
Authority key identifier: D1:BC:C5:95:BD:D7:58:10:B7:3D:1F:C4:85:08:7B:FB:71:85:9B:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
Signing time: Tue 26 Mar 2024 20:40:50 +0000
ROA not before: Tue 26 Mar 2024 20:35:50 +0000
ROA not after: Tue 25 Mar 2025 20:40:50 +0000
asID: 266073
IP address blocks: 45.4.148.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2b:91:87:c5:00:ad:89:1c:90:aa:e1:d6:1a:fd:1e:3e:3b:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1BCC595BDD75810B73D1FC485087BFB71859BFC
Validity
Not Before: Mar 26 20:35:50 2024 GMT
Not After : Mar 25 20:40:50 2025 GMT
Subject: CN=DC68B6E358ACC844E84FB6A35F6A91FE4FB2ACDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:9f:bd:a3:89:0d:3a:45:13:ee:c7:e7:0f:
05:44:cb:47:24:a3:32:f8:14:3b:46:3d:33:26:b7:
61:ac:70:2a:47:37:12:37:c3:03:77:32:18:45:f9:
29:53:c9:03:99:89:b2:3b:0e:db:53:73:18:77:3a:
7f:a4:72:6a:10:ff:dd:95:14:b8:21:34:75:fb:7a:
09:41:f6:db:f0:41:34:ad:54:ea:3c:73:77:98:3a:
e8:56:7f:da:ee:59:f7:f7:56:ce:13:7a:4a:62:b2:
60:25:ec:9d:76:e6:a1:cc:7c:73:d2:78:f7:e1:f4:
17:32:29:02:b3:05:d4:af:e5:83:06:1a:d3:5e:17:
28:10:0a:92:1a:d6:23:08:10:3f:9c:b2:4a:49:32:
5f:97:0e:7d:6d:47:98:20:52:7e:60:a9:c5:f8:c5:
6c:ff:81:5b:ef:ba:18:1e:d6:f7:00:06:86:a4:f3:
04:bf:e4:43:0f:35:0c:e7:ed:9f:ed:22:47:7e:25:
70:b6:0d:01:66:aa:56:60:39:95:30:22:11:3c:91:
6c:e7:4e:4d:f6:54:48:ac:ff:8e:10:1e:38:a6:72:
b0:74:f6:8a:17:62:c5:c5:14:bd:eb:b4:56:06:56:
04:1e:a5:ea:7c:12:5d:4f:67:4f:da:01:8a:48:e8:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:B6:E3:58:AC:C8:44:E8:4F:B6:A3:5F:6A:91:FE:4F:B2:AC:DF
X509v3 Authority Key Identifier:
keyid:D1:BC:C5:95:BD:D7:58:10:B7:3D:1F:C4:85:08:7B:FB:71:85:9B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1BCC595BDD75810B73D1FC485087BFB71859BFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/0/34352e342e3134382e302f32322d3332203d3e20323636303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:49:66:50:f7:1f:2a:c3:6b:a1:bd:ae:86:84:39:ae:f9:82:
b0:b0:b0:58:87:f4:35:7b:ce:f0:64:53:67:bd:42:8e:10:f1:
84:a1:59:ea:e2:97:9a:cc:84:fe:cc:b5:bb:39:70:85:55:22:
d1:e8:1d:f9:e8:3b:b6:ed:e2:58:0a:58:4c:ab:5e:3e:56:f4:
68:0e:ed:72:07:7e:0c:9a:0d:d1:59:54:c4:5c:71:0d:40:cc:
74:56:09:80:18:7a:9f:ce:32:c6:0b:97:86:77:ba:6a:8d:ff:
8b:5b:1e:3d:30:08:0d:25:60:bb:13:b7:32:d3:b7:3a:16:b1:
f0:28:16:3c:dd:dc:b4:55:8e:43:18:d0:f5:17:78:2f:3b:d3:
21:31:53:62:95:21:5d:1b:c6:fe:13:f3:ba:19:3d:dc:f8:3d:
ae:1d:5f:e7:53:d2:e7:13:a7:2e:57:3c:70:5d:42:17:3c:f8:
b3:88:09:02:e5:55:a6:dd:9e:b7:b1:83:77:af:3a:69:02:f9:
75:af:c1:42:0d:87:f5:92:ac:51:50:89:81:ea:32:ec:4d:2b:
ca:94:4a:f2:73:0d:b3:60:31:73:19:3e:fe:eb:7e:e0:65:6f:
60:b4:a8:a6:7b:5d:7a:b5:18:df:3a:d1:fe:20:b5:35:77:9d:
68:92:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org