Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3234203d3e203631363133.roa
File: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (raw, json)
Hash identifier: Rr2c3Zi5ExIeUp+RXDCNn3HjL/L/2vmtj+gtDp+wvi0=
Subject key identifier: AF:2F:DE:71:C7:B9:9F:8F:64:7D:2E:7D:AE:A7:C4:16:35:A0:15:E8
Certificate issuer: /CN=AAEBF65D30344968C1E10E9E446DB92398D67D27
Certificate serial: 2CE703FBDAD8BF400DEBE31C37B5413B128EACD8
Authority key identifier: AA:EB:F6:5D:30:34:49:68:C1:E1:0E:9E:44:6D:B9:23:98:D6:7D:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAEBF65D30344968C1E10E9E446DB92398D67D27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3234203d3e203631363133.roa
Signing time: Tue 21 May 2024 16:53:55 +0000
ROA not before: Tue 21 May 2024 16:48:55 +0000
ROA not after: Tue 20 May 2025 16:53:55 +0000
asID: 61613
IP address blocks: 45.171.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:03:fb:da:d8:bf:40:0d:eb:e3:1c:37:b5:41:3b:12:8e:ac:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAEBF65D30344968C1E10E9E446DB92398D67D27
Validity
Not Before: May 21 16:48:55 2024 GMT
Not After : May 20 16:53:55 2025 GMT
Subject: CN=AF2FDE71C7B99F8F647D2E7DAEA7C41635A015E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:40:a0:e7:1c:e8:a6:dd:cc:e0:0b:e8:b7:
5f:d4:47:de:c3:3b:d6:77:6c:0c:68:93:d9:e5:72:
1c:18:0f:1f:b1:0a:ca:56:bb:f7:63:4c:39:bd:72:
bb:fe:42:28:c8:2b:7f:f9:28:52:49:02:31:c7:f4:
49:a6:28:e0:3d:7a:42:02:52:5b:e1:47:d1:31:47:
51:b0:dc:c0:72:2a:17:5e:53:79:f1:08:d1:62:fd:
bf:65:eb:42:4c:ce:bd:86:33:03:2e:52:2e:e4:ca:
d7:4e:9b:df:b6:bf:18:61:a2:30:e9:18:c0:ad:ce:
cf:34:ae:f4:8c:d9:7c:2a:81:e1:c2:4c:73:be:4d:
3a:1d:b5:76:21:2a:5f:5c:7e:39:a9:48:fc:c4:8e:
45:59:42:70:a2:6d:2e:77:89:33:d5:1c:32:3b:3e:
10:2d:c0:b7:96:96:bc:94:d4:be:82:c3:92:76:b3:
65:a3:b8:d8:32:eb:80:f2:80:38:9a:87:b2:32:a7:
80:70:a1:f0:92:6a:c7:6c:eb:c1:32:66:83:3b:fe:
a8:3b:61:53:bd:83:aa:0a:53:c2:20:52:1d:34:ca:
db:77:2f:61:7c:38:33:ed:97:15:08:90:29:70:71:
f0:6e:cb:8d:cc:e9:e4:3b:5b:c8:4a:1f:53:f5:3e:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:DE:71:C7:B9:9F:8F:64:7D:2E:7D:AE:A7:C4:16:35:A0:15:E8
X509v3 Authority Key Identifier:
keyid:AA:EB:F6:5D:30:34:49:68:C1:E1:0E:9E:44:6D:B9:23:98:D6:7D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/AAEBF65D30344968C1E10E9E446DB92398D67D27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAEBF65D30344968C1E10E9E446DB92398D67D27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3234203d3e203631363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.60.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c1:8f:41:38:24:8a:1a:ee:2f:22:a1:47:1b:bc:89:b5:92:
ee:77:f4:e0:af:f5:0e:e4:88:9c:10:ce:41:0f:d6:9d:ed:fe:
71:9f:ac:e9:ae:c2:3e:43:25:a7:fd:07:48:9b:2d:46:e7:a5:
3c:1c:cc:36:5f:74:86:90:c1:47:85:bc:2c:43:fa:62:2f:4f:
f5:d2:f0:49:c6:eb:d6:d6:66:18:da:c9:0d:47:6d:3e:36:32:
a2:af:ae:7c:ea:fd:95:5f:bf:d6:3e:7e:4b:27:57:3b:98:17:
c0:22:d6:9b:a9:a0:df:32:19:e0:ad:7a:ac:45:a4:82:7e:84:
54:a1:87:ac:4e:1d:c3:a7:a1:69:0c:95:78:02:60:ab:df:5b:
8b:cb:6b:bf:15:0c:e3:43:ac:0a:47:2b:89:b9:df:96:9e:d2:
cd:79:ca:37:01:96:d5:80:70:56:56:60:c8:f4:ba:3c:d3:1b:
7c:e1:c8:93:9e:fd:fb:66:ff:0a:1b:ac:4d:e2:3b:4c:60:3d:
b2:72:09:14:ae:82:ad:70:c0:5b:e9:99:ec:b6:9d:71:47:81:
7c:42:e4:4a:bc:ca:63:14:85:ca:07:f3:62:bc:ed:c2:1a:a7:
be:31:fb:92:77:09:61:55:e2:12:3a:9a:51:23:04:5e:42:e6:
ed:65:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org