Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31322e302f32322d3232203d3e20323638333436.roa
File: 34352e3233392e31322e302f32322d3232203d3e20323638333436.roa (raw, json)
Hash identifier: zlBpe5r8AqfCJzrjkvy7FKf8XrMuJs36e97NqyAVKQo=
Subject key identifier: 82:1A:5E:DE:F4:D1:29:5B:91:4E:24:54:EE:CA:D5:E2:F0:55:06:48
Certificate issuer: /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial: 3039BD67D5CC28CA1EAC40ACD23C1C73AB686CBC
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31322e302f32322d3232203d3e20323638333436.roa
Signing time: Mon 22 May 2023 19:23:59 +0000
ROA not before: Mon 22 May 2023 19:18:59 +0000
ROA not after: Mon 20 May 2024 19:23:59 +0000
asID: 268346
IP address blocks: 45.239.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:39:bd:67:d5:cc:28:ca:1e:ac:40:ac:d2:3c:1c:73:ab:68:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Validity
Not Before: May 22 19:18:59 2023 GMT
Not After : May 20 19:23:59 2024 GMT
Subject: CN=821A5EDEF4D1295B914E2454EECAD5E2F0550648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:85:da:ec:eb:88:05:85:d6:b5:23:16:d5:
62:d4:bb:ce:f0:4a:a5:a1:91:93:0b:1b:ef:56:d3:
43:63:00:8b:9e:fa:c4:a6:e5:cc:e2:12:ac:4c:0d:
58:4f:a4:34:9a:db:fb:02:16:b5:20:4c:3c:69:6e:
22:f9:20:a5:26:21:11:62:d5:e5:11:03:e1:d8:32:
7d:46:ea:79:29:be:02:94:fe:e7:98:b5:2b:b5:e9:
81:90:97:51:ca:6d:16:38:34:f2:4d:64:07:a5:68:
38:d4:3a:65:8b:30:06:6a:0a:7a:50:3a:37:f9:83:
5f:85:83:67:8c:34:12:8e:11:5d:4d:78:d2:8b:b0:
52:64:df:3c:84:ff:92:e2:91:5a:43:ec:83:25:3e:
84:58:64:4e:18:1d:e9:bd:8a:57:d7:e6:91:7f:f4:
0a:4b:69:03:da:07:88:3c:ce:7a:c3:70:64:9b:d1:
90:a6:d5:ab:20:d0:0c:ef:fd:65:0c:9a:ea:3f:a4:
70:82:cd:60:c2:7e:22:e9:41:9d:f1:bb:21:52:b0:
41:a5:05:9d:56:68:eb:2a:8e:87:bd:a5:14:05:18:
dd:96:ad:26:a8:1c:4c:3f:f2:c0:08:06:6b:8d:2a:
07:25:e5:18:a7:d4:f1:33:ae:59:85:3f:89:bd:f8:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:5E:DE:F4:D1:29:5B:91:4E:24:54:EE:CA:D5:E2:F0:55:06:48
X509v3 Authority Key Identifier:
keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31322e302f32322d3232203d3e20323638333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.12.0/22
Signature Algorithm: sha256WithRSAEncryption
33:1f:51:5c:ff:a2:f1:a1:0f:c2:d6:c5:4e:d1:fd:4f:0a:62:
e3:fd:73:f5:2e:3e:e7:a8:c4:d7:c4:76:44:ef:a9:aa:00:6f:
01:71:94:93:2d:b8:48:5c:60:c2:9c:b3:8c:ee:3f:6c:e2:ab:
51:b4:a8:b9:45:78:4e:c0:39:db:08:99:ac:ea:25:e4:26:1b:
5a:dc:57:7b:f4:bc:9b:66:d8:4c:2a:32:62:7c:4c:21:eb:e8:
b4:3f:84:3e:1b:bf:bd:df:42:50:fd:75:cc:9b:5c:b7:7b:16:
07:a4:81:e4:95:64:ca:0b:df:c4:5e:8d:15:37:03:a3:39:7e:
1e:85:3b:2b:b0:60:c1:02:e0:7a:e2:7b:d5:76:a6:21:dd:2e:
0c:0d:df:8f:cd:9e:f0:7f:09:d1:20:f3:a8:62:21:8c:b0:3c:
d6:9a:f4:ac:68:ae:9c:44:05:16:56:c6:34:7d:31:4f:1b:e1:
92:17:88:72:ec:5b:0f:19:42:3a:c5:a0:3c:ca:8f:49:ea:cc:
cc:10:c7:ec:0c:58:60:88:58:b7:df:84:ed:7f:da:ad:de:fa:
e8:de:dc:03:67:9c:6f:b2:82:ff:82:d7:fe:57:d7:e6:3d:c2:
7a:00:0b:2d:2a:87:57:5f:76:d2:27:49:fd:96:4d:3f:fe:3c:
e0:9f:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org