Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3233203d3e20323638303838.roa
File: 34352e3136382e3130302e302f32322d3233203d3e20323638303838.roa (raw, json)
Hash identifier: bKyW7Lh8pyNarvmrvQS/+weZCuiHMSf0cXv4SUP0MPc=
Subject key identifier: 25:7E:DE:46:1C:C8:6E:7C:21:0A:D7:AB:C0:FE:8D:6F:2F:3B:C4:16
Certificate issuer: /CN=7AAF8825929B0D01AC2A8DCD9894CE0F933377B9
Certificate serial: 59F815D63DF32DE7E9C3B62A366B74700BCDCE42
Authority key identifier: 7A:AF:88:25:92:9B:0D:01:AC:2A:8D:CD:98:94:CE:0F:93:33:77:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3233203d3e20323638303838.roa
Signing time: Mon 24 Apr 2023 10:51:38 +0000
ROA not before: Mon 24 Apr 2023 10:46:38 +0000
ROA not after: Mon 22 Apr 2024 10:51:38 +0000
asID: 268088
IP address blocks: 45.168.100.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f8:15:d6:3d:f3:2d:e7:e9:c3:b6:2a:36:6b:74:70:0b:cd:ce:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AAF8825929B0D01AC2A8DCD9894CE0F933377B9
Validity
Not Before: Apr 24 10:46:38 2023 GMT
Not After : Apr 22 10:51:38 2024 GMT
Subject: CN=257EDE461CC86E7C210AD7ABC0FE8D6F2F3BC416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:16:99:38:13:82:12:cd:dc:c7:49:b7:3c:
64:54:a2:18:ca:b1:7c:5a:7d:da:cb:f6:b0:fa:2b:
b9:ba:fe:41:2b:4b:cb:6f:cc:7f:78:8f:8c:8e:34:
35:37:da:be:3e:86:a4:16:cf:1e:69:92:79:b7:33:
6f:bd:d8:57:a4:91:ba:20:40:70:fc:52:0f:cc:4e:
74:86:80:38:11:44:2a:1f:87:37:89:57:be:18:f6:
92:27:db:29:9d:2a:ca:44:9d:9c:19:b5:fe:6e:c9:
e4:3b:76:02:71:a5:cd:db:57:ee:20:e9:12:62:13:
de:d5:84:17:df:ff:56:df:cb:e5:e0:1a:6e:8d:06:
d1:19:33:f5:a2:95:1f:46:42:97:a6:8f:b7:d7:3c:
d5:50:00:90:de:ac:54:48:8c:fc:0c:f8:23:f6:43:
97:1f:5c:fb:26:6c:83:bb:93:71:34:53:50:2e:ce:
e8:e1:56:9b:b5:ec:fa:09:53:81:87:3c:26:ca:f4:
be:59:57:49:ad:80:85:4b:ae:b9:0d:32:93:ba:96:
15:67:e4:f7:8a:6d:c1:ca:9a:30:4b:8e:57:6f:7b:
6f:81:c5:9c:91:3c:0d:d5:fa:0c:38:59:ff:c0:5e:
78:48:17:5d:1b:95:c6:36:ca:4d:c9:fb:97:f0:b4:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7E:DE:46:1C:C8:6E:7C:21:0A:D7:AB:C0:FE:8D:6F:2F:3B:C4:16
X509v3 Authority Key Identifier:
keyid:7A:AF:88:25:92:9B:0D:01:AC:2A:8D:CD:98:94:CE:0F:93:33:77:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3233203d3e20323638303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:5e:96:be:21:d3:ab:ed:c8:ac:4c:97:b0:bf:08:3f:a2:0b:
e6:da:f6:f7:75:e3:6c:2b:1e:68:cc:0a:53:8a:2c:19:03:7f:
42:e8:70:8a:94:1c:38:68:10:b3:28:6c:a5:dd:2b:7f:0d:77:
39:25:75:f0:0c:90:c4:2e:70:ec:dc:6a:84:e7:e1:e9:02:c5:
aa:46:43:a9:63:56:08:e3:39:70:bc:1b:a7:b5:f7:fe:dc:c8:
d6:25:e3:19:b0:8e:91:d1:5c:89:82:d1:a3:7b:ff:cb:cf:55:
96:b9:8c:99:bc:41:94:4a:fb:3f:5d:90:aa:ed:8e:a7:1e:4f:
c0:b9:82:71:2b:b2:bd:78:c7:79:e0:f0:23:a7:6b:39:2e:dc:
8f:f9:5b:d5:0b:61:12:1b:bd:2e:1a:ea:16:3f:ea:1d:1a:68:
f5:a2:0e:61:a4:8c:67:55:84:f8:fc:2b:27:0b:19:65:7a:e9:
7d:f2:6e:67:59:b8:3b:00:c0:05:eb:cb:c5:d9:21:78:99:aa:
61:36:88:b2:f6:88:49:ec:3b:22:5c:12:70:38:9c:36:f5:a9:
c5:3c:99:d6:fb:d8:f0:9b:6d:d5:6f:a0:06:a6:9b:15:ce:87:
c3:e9:b7:f0:a3:de:29:cb:1e:8b:d5:20:a5:d0:76:c8:a6:57:
b4:80:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org