Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
File: 34352e3233362e37322e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier: DPXsmYImN6WX9UAVEHlMvR/KvN269H2lKqTHedYR0Oc=
Subject key identifier: AA:23:B8:50:AB:7F:8F:9A:0A:B8:54:F9:41:22:17:69:21:4E:9D:87
Certificate issuer: /CN=5AC857044932470260E44A2750076A9293F37835
Certificate serial: 6BDF7FA523F23447ED5C51B757FA8113F617CD8F
Authority key identifier: 5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
Signing time: Wed 31 Jan 2024 00:51:01 +0000
ROA not before: Wed 31 Jan 2024 00:46:01 +0000
ROA not after: Wed 29 Jan 2025 00:51:01 +0000
asID: 271478
IP address blocks: 45.236.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:df:7f:a5:23:f2:34:47:ed:5c:51:b7:57:fa:81:13:f6:17:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AC857044932470260E44A2750076A9293F37835
Validity
Not Before: Jan 31 00:46:01 2024 GMT
Not After : Jan 29 00:51:01 2025 GMT
Subject: CN=AA23B850AB7F8F9A0AB854F941221769214E9D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:b9:e9:6a:a4:f0:33:bd:d6:42:ad:85:ce:
24:d0:7c:b2:bf:28:32:d8:40:0b:52:44:d4:83:72:
20:19:3f:2f:72:db:78:50:c5:1a:d2:ec:6d:8d:d3:
8c:aa:d6:d4:d3:24:5d:ee:2a:65:36:04:84:fd:2d:
31:eb:52:61:22:54:b1:b1:9b:d6:82:2f:5b:6e:38:
49:81:26:dd:f0:c1:8f:8f:53:1b:e5:2f:35:08:0e:
4b:a9:dc:24:d3:b2:ba:a5:23:c5:88:56:46:d9:69:
80:74:d9:e8:e0:14:05:50:9f:54:35:b9:f4:e5:f6:
3a:d9:b4:b8:c7:2c:fa:08:96:32:c5:5f:dc:ea:02:
f8:d7:30:29:4a:e2:a3:35:f0:45:7b:16:cb:d8:56:
09:14:64:a3:2a:94:f2:28:3e:50:11:aa:89:1c:70:
df:5c:9b:20:1e:6d:59:1f:95:c3:d1:43:2c:44:73:
ce:9d:c5:46:c9:23:3a:7c:f5:48:55:7f:fc:cd:92:
b8:00:fa:68:b2:f7:e9:cd:04:ee:4b:57:23:90:0a:
be:4c:01:0e:a3:e4:b5:b8:b1:b6:68:bc:5c:73:b0:
a7:22:4e:e8:93:16:dc:f7:e0:0e:9e:2f:ca:02:bb:
ee:d9:b2:f4:fc:64:72:ab:a6:b6:f7:dc:ba:1c:48:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:B8:50:AB:7F:8F:9A:0A:B8:54:F9:41:22:17:69:21:4E:9D:87
X509v3 Authority Key Identifier:
keyid:5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.72.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:a7:6b:fc:4d:25:ef:cf:0f:e7:b6:5a:be:6b:10:df:cf:48:
be:02:57:23:3c:2b:64:0f:8b:43:10:78:20:34:1f:d7:dd:c2:
30:c7:fd:52:83:ef:ca:08:51:51:be:71:50:45:f9:aa:75:da:
a7:0a:70:44:21:eb:f6:6f:82:35:fd:35:01:fc:13:c1:f0:ed:
15:1c:df:58:9c:e8:32:85:7b:e1:1a:2b:b4:24:9e:27:bd:00:
15:16:9e:6e:25:2f:b7:bf:a6:58:54:6b:f9:3a:b7:9f:b1:ff:
38:9f:7b:51:71:bc:6a:ee:21:2c:f6:38:79:d8:50:c3:1c:f0:
27:11:3a:1a:20:4a:85:b3:37:71:f8:11:a5:80:3e:69:99:18:
81:cf:85:79:5b:40:3e:b5:50:87:63:2a:d5:17:0a:82:a8:48:
97:ee:ff:c6:41:7f:e3:12:39:f1:b6:9d:45:28:af:b0:bd:92:
00:77:e1:4d:9b:3e:01:fa:76:75:04:a9:8f:f5:ec:3d:f8:60:
2e:00:6c:2f:55:46:8b:4b:d6:ab:d0:0e:62:08:0b:de:5d:7b:
30:5a:f4:7a:9a:2e:91:e8:03:8b:b7:b0:1d:ce:0a:54:6e:f4:
7a:18:e5:1e:ea:dc:ee:73:64:3f:10:64:a5:93:86:cc:1a:2e:
2d:0b:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org