Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231392e302f32342d3234203d3e20323636363139.roa
File: 34352e372e3231392e302f32342d3234203d3e20323636363139.roa (raw, json)
Hash identifier: JdaImlgflJbgsxKui2j0+13UI5UpGbUFb7yaZ4psnto=
Subject key identifier: 4E:BB:D9:E6:C7:E7:78:EB:29:29:E7:14:86:FA:89:4F:A1:B5:76:B3
Certificate issuer: /CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Certificate serial: 37A1B339843544B987F000543CCBE6535045E4CF
Authority key identifier: 7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231392e302f32342d3234203d3e20323636363139.roa
Signing time: Mon 30 Oct 2023 18:28:38 +0000
ROA not before: Mon 30 Oct 2023 18:23:38 +0000
ROA not after: Mon 28 Oct 2024 18:28:38 +0000
asID: 266619
IP address blocks: 45.7.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a1:b3:39:84:35:44:b9:87:f0:00:54:3c:cb:e6:53:50:45:e4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Validity
Not Before: Oct 30 18:23:38 2023 GMT
Not After : Oct 28 18:28:38 2024 GMT
Subject: CN=4EBBD9E6C7E778EB2929E71486FA894FA1B576B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:5a:b7:52:44:5b:b5:4f:97:c9:e5:94:d3:
3e:40:95:9c:a3:b7:ad:27:17:14:cd:ac:49:4a:c5:
cf:88:f0:2f:56:e2:dd:bc:c2:48:c0:01:09:f6:10:
87:11:b4:9a:ee:bf:2b:e1:93:22:6e:70:61:63:32:
f0:6a:d8:ae:4c:c7:7b:16:45:19:52:36:20:85:3f:
b3:32:04:d4:7b:39:ef:4f:1d:96:7b:f0:5e:27:46:
b0:88:cf:d2:24:db:a6:f1:30:9e:43:e1:6c:d4:b5:
61:0b:92:c6:58:41:38:3f:d5:a9:9b:fb:ce:ba:6b:
ba:1f:52:3a:a5:fe:f0:d6:cb:c8:06:a8:69:f8:8c:
84:db:9c:a6:f3:56:f0:68:a9:66:0d:f6:f8:8a:4e:
c4:e5:b8:e5:c9:ed:62:82:cb:7b:37:88:f3:c0:05:
32:0d:5a:b4:c4:db:9d:d6:af:13:25:28:d7:64:6a:
1e:10:78:f3:45:a9:3a:19:f9:73:05:e9:95:e5:1a:
00:9b:ce:86:09:2b:3e:44:4a:9e:cd:da:76:65:9a:
e2:13:52:97:91:8d:75:46:ab:29:cb:2d:13:25:85:
22:88:d4:44:a3:93:86:ec:a2:27:e0:57:fb:ab:91:
ea:ac:fe:ad:d6:43:f9:56:12:e0:95:18:ff:9b:c8:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:D9:E6:C7:E7:78:EB:29:29:E7:14:86:FA:89:4F:A1:B5:76:B3
X509v3 Authority Key Identifier:
keyid:7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231392e302f32342d3234203d3e20323636363139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.219.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0a:5b:24:47:1f:97:91:7d:7b:3d:5c:d1:e2:bf:be:b7:80:
1c:02:fc:f6:6c:65:7b:26:90:bb:8d:4d:36:70:02:b5:6a:64:
08:f8:6e:74:2c:cf:eb:11:07:8b:bd:17:76:65:38:43:cd:12:
fe:f3:96:c0:12:80:94:42:15:20:0d:dd:34:60:2c:e7:c7:67:
13:17:ee:b9:b4:64:35:f7:dd:0a:20:da:44:1c:fa:69:37:04:
ea:d6:b6:c2:fa:19:37:d0:5e:2e:33:71:f0:fe:fb:5f:83:dc:
ae:c6:ca:39:08:f3:27:00:1d:bb:39:ea:fe:aa:fb:cd:ce:a6:
28:a3:f7:d5:55:c1:a4:eb:2a:2e:6b:0b:c5:e3:1b:75:0e:73:
21:9c:10:42:99:b6:5b:66:22:02:9e:bf:67:d1:d1:b6:98:1c:
10:87:f6:64:ff:05:d5:69:06:19:f9:37:ab:0f:27:66:2d:b3:
cb:1b:99:20:98:7f:31:38:c7:1d:e4:f3:00:f0:66:03:31:91:
99:dc:7a:e1:85:d6:a9:85:77:ce:54:3a:e1:fa:17:63:93:8a:
36:35:ef:ca:d3:ab:0f:f5:f7:06:0b:64:e3:47:bd:e6:c0:16:
16:28:d3:19:f2:0e:c3:d0:20:c2:54:4e:c0:15:84:9b:05:ed:
c9:26:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org