Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS28340.roa
File: AS28340.roa (raw, json)
Hash identifier: 9X2SLnrKZaNVZFw9DEIPrit55vJRAcxgzAo4tiAn3k4=
Subject key identifier: B7:8B:8C:60:9C:F1:44:C0:2A:0E:8A:E3:E6:A8:EB:42:1D:50:A7:6D
Certificate issuer: /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial: 2DF229ED4B0C76963295716EA2D4E87D7AA0FF1E
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS28340.roa
Signing time: Thu 06 Oct 2022 17:47:46 +0000
ROA not before: Thu 06 Oct 2022 17:42:46 +0000
ROA not after: Thu 05 Oct 2023 17:47:46 +0000
asID: 28340
IP address blocks: 186.193.96.0/20 maxlen: 20
186.193.96.0/21 maxlen: 21
186.193.104.0/21 maxlen: 21
189.45.16.0/20 maxlen: 20
189.45.16.0/21 maxlen: 21
189.45.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f2:29:ed:4b:0c:76:96:32:95:71:6e:a2:d4:e8:7d:7a:a0:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Validity
Not Before: Oct 6 17:42:46 2022 GMT
Not After : Oct 5 17:47:46 2023 GMT
Subject: CN=B78B8C609CF144C02A0E8AE3E6A8EB421D50A76D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:0d:2d:0d:3b:b3:bf:9d:fa:77:d0:4a:fc:
2c:d6:d6:a6:19:db:72:16:2b:f1:20:bb:e9:00:5e:
bb:42:d9:57:30:68:2f:a8:0d:0f:74:9e:6e:37:29:
ae:87:2e:33:b3:77:ad:99:b5:61:22:1e:e9:e5:ca:
74:61:53:b9:a7:90:eb:8a:20:08:1f:a5:bd:b4:68:
f8:ae:0f:d5:75:fc:6a:05:23:2f:74:3d:4f:aa:cb:
50:ce:3d:dd:bd:d2:48:0e:63:1c:de:4a:1c:cc:4d:
ac:6c:44:9c:16:37:69:0c:cb:90:fe:a4:c2:af:3b:
d6:82:ed:58:e5:7f:e7:7e:f1:4a:6f:62:38:e2:25:
3e:0e:15:f0:56:aa:ef:4b:32:f5:03:a1:1e:14:86:
f6:74:3b:c5:17:78:b3:33:02:fe:fa:6a:4e:60:b1:
b9:43:44:95:c6:c0:8d:53:5e:f8:1d:e1:29:e8:3a:
7e:96:17:ed:90:d8:ab:8b:a3:b3:30:3b:cf:68:69:
7e:05:87:a9:6f:d9:2d:c6:e0:ee:ac:cd:47:90:aa:
f6:ca:ec:1f:e7:87:07:29:ce:c3:30:3d:5c:cf:8e:
4a:fd:bd:f3:a5:21:78:d8:f8:da:c2:2c:a1:59:ad:
b1:d1:b6:0a:f9:58:10:00:70:b6:76:21:b4:8e:11:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:8C:60:9C:F1:44:C0:2A:0E:8A:E3:E6:A8:EB:42:1D:50:A7:6D
X509v3 Authority Key Identifier:
keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS28340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.193.96.0/20
189.45.16.0/20
Signature Algorithm: sha256WithRSAEncryption
12:92:68:cd:67:f9:8a:51:04:61:63:0f:01:c9:33:1e:60:6c:
d0:c9:bb:6a:44:fe:1f:e1:67:09:b4:a2:4b:25:d2:d9:66:88:
d6:0e:08:cd:08:22:99:f2:7d:9d:3e:05:dd:cf:b8:36:61:aa:
03:17:eb:2c:02:5c:1e:4a:5e:b7:7b:f5:9b:40:f8:06:b8:e4:
1e:bc:94:7b:00:2c:c7:fe:9b:85:22:a7:b4:a4:e7:20:14:52:
16:d0:60:b1:e5:24:ca:f9:24:81:2c:55:bf:48:ad:10:84:9c:
5e:a3:3e:b0:13:bb:be:5c:22:2a:9f:1d:e5:f8:e1:10:23:f1:
a5:fb:4f:a8:62:94:23:b4:bb:37:59:a0:84:cb:12:b7:e2:70:
c3:64:e6:7b:1a:19:5f:b9:70:4e:08:a7:a1:f3:51:70:1f:91:
cd:42:8f:4f:64:70:cd:f7:c7:da:d6:8c:e2:a6:17:82:44:d8:
64:d4:2e:d1:18:db:2e:47:50:2d:43:e5:31:b6:f3:68:3a:27:
52:7d:eb:56:a9:e5:5a:2c:b3:4f:61:c2:2a:88:59:6c:d8:fa:
62:ff:3d:cc:d6:7a:cb:e9:d2:0f:4b:e9:67:ca:ba:0f:3d:b4:
a6:92:05:1a:df:88:ea:57:5c:c9:fb:43:fe:a2:54:85:83:1b:
5d:e0:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org