Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/34352e37302e37322e302f32322d3332203d3e20323637353533.roa
File: 34352e37302e37322e302f32322d3332203d3e20323637353533.roa (raw, json)
Hash identifier: KxGHx5+1dqoAJsPKdt3Yy9j9SYB7tX5H4pRxBlEKJAk=
Subject key identifier: 89:EE:D5:35:4D:3E:C6:E9:2D:10:F8:A3:98:0E:0C:12:79:3B:3F:1F
Certificate issuer: /CN=1CCCFB90143ACEF66D6620662A48C6120E79EF98
Certificate serial: 2C1F358ABA70FACC70DAAD38FC63F1EE2F51A263
Authority key identifier: 1C:CC:FB:90:14:3A:CE:F6:6D:66:20:66:2A:48:C6:12:0E:79:EF:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/34352e37302e37322e302f32322d3332203d3e20323637353533.roa
Signing time: Wed 03 Apr 2024 19:55:50 +0000
ROA not before: Wed 03 Apr 2024 19:50:50 +0000
ROA not after: Wed 02 Apr 2025 19:55:50 +0000
asID: 267553
IP address blocks: 45.70.72.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1f:35:8a:ba:70:fa:cc:70:da:ad:38:fc:63:f1:ee:2f:51:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CCCFB90143ACEF66D6620662A48C6120E79EF98
Validity
Not Before: Apr 3 19:50:50 2024 GMT
Not After : Apr 2 19:55:50 2025 GMT
Subject: CN=89EED5354D3EC6E92D10F8A3980E0C12793B3F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:cf:2d:b6:6e:7e:0a:99:01:48:8a:b8:2e:
88:77:21:0b:5b:91:bb:be:75:0a:4c:b8:ef:ce:e6:
10:d4:8e:68:e1:9a:24:7e:30:c8:b8:33:09:43:f4:
4f:49:48:a0:a0:00:4d:0d:a4:e1:d0:1b:8d:96:e4:
fd:cf:03:5f:c0:f0:77:ce:45:6f:b4:fa:1e:0f:02:
58:0b:1c:7e:89:4b:ba:14:f9:f3:f7:ab:d3:25:51:
49:b8:e2:01:b3:17:98:4e:56:c8:2c:6e:6e:41:dd:
98:41:d2:99:e3:5b:50:57:88:f4:0a:04:43:08:6e:
16:74:92:0e:c9:34:c4:be:24:2b:1f:c2:72:e9:cc:
fa:35:76:1f:59:65:b3:49:a2:ae:7a:01:58:ac:17:
fc:12:f6:85:4b:5d:eb:0e:c8:67:3e:a3:35:0b:66:
df:c9:b1:89:dd:10:ea:bf:ae:47:2b:b6:c1:a3:59:
19:29:48:59:d9:d1:05:f3:cf:a2:12:2a:5d:41:40:
1d:e1:8a:ac:d9:16:b4:f6:70:c5:91:5f:fe:a3:2a:
5b:01:dc:5b:9e:5d:12:07:9a:8b:ca:91:be:c0:43:
26:0b:3d:d5:5c:2e:19:14:8f:5f:f2:aa:e5:fb:36:
51:4b:e9:d1:eb:68:7d:81:4d:66:9a:05:d0:2f:1a:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:D5:35:4D:3E:C6:E9:2D:10:F8:A3:98:0E:0C:12:79:3B:3F:1F
X509v3 Authority Key Identifier:
keyid:1C:CC:FB:90:14:3A:CE:F6:6D:66:20:66:2A:48:C6:12:0E:79:EF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CCCFB90143ACEF66D6620662A48C6120E79EF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/1/34352e37302e37322e302f32322d3332203d3e20323637353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c2:74:8a:26:bb:f3:a2:42:18:b0:e8:12:e8:54:3e:f1:2d:
f9:3f:62:19:db:a7:0b:d4:af:c9:17:74:e2:67:a2:98:b4:8d:
8f:ec:a5:8b:98:a1:98:f9:82:98:a9:40:a5:69:c9:3f:9b:c8:
75:87:89:58:29:1d:21:a7:9b:b7:d1:7e:5d:61:20:27:99:8a:
7a:bc:7d:fe:f9:50:7e:de:72:b5:0a:61:f1:9a:a1:17:52:3b:
dc:bc:00:23:ca:f1:4c:b3:a1:8c:5b:96:62:77:ab:52:a3:94:
a0:15:46:6c:6a:98:6a:e8:03:1e:91:44:39:9c:bd:02:45:78:
4b:46:73:5c:58:dd:a6:8f:2f:eb:d2:75:bc:2b:bd:83:0c:c2:
f5:44:1e:33:79:fe:8b:f3:96:a8:eb:10:fd:53:6a:20:12:73:
60:06:f9:bb:55:f0:6a:a6:7d:8e:fc:10:06:0b:7c:6d:5a:7e:
46:11:44:50:77:20:1f:99:90:ba:fe:0f:4a:a6:3d:ff:9c:9b:
bc:53:09:96:92:a2:3a:41:32:50:d5:6d:da:e8:13:63:3b:cd:
c8:63:6d:0f:0c:13:f3:e1:6c:3e:73:52:c4:d1:cc:67:48:4e:
4f:7a:62:4e:1d:b5:bf:da:76:bf:11:3a:79:8b:1a:a9:f0:36:
f3:6e:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org