Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31312e302f32342d3234203d3e20323639353633.roa
File: 34352e3138392e31312e302f32342d3234203d3e20323639353633.roa (raw, json)
Hash identifier: JHkBndvLNTi7INot7cBGX5mGtFBM7AChqAjpcRd7O3k=
Subject key identifier: 26:4A:C3:E0:EB:52:86:55:5F:BD:CF:91:5E:B0:90:B3:7B:5D:D2:AA
Certificate issuer: /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial: 3AF608DC90B5ACBCCB7623BA6B31B51E0FDB33C0
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31312e302f32342d3234203d3e20323639353633.roa
Signing time: Tue 02 Jan 2024 16:29:45 +0000
ROA not before: Tue 02 Jan 2024 16:24:45 +0000
ROA not after: Tue 31 Dec 2024 16:29:45 +0000
asID: 269563
IP address blocks: 45.189.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f6:08:dc:90:b5:ac:bc:cb:76:23:ba:6b:31:b5:1e:0f:db:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Validity
Not Before: Jan 2 16:24:45 2024 GMT
Not After : Dec 31 16:29:45 2024 GMT
Subject: CN=264AC3E0EB5286555FBDCF915EB090B37B5DD2AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:84:70:19:64:07:4a:42:e3:0a:6e:d8:09:
33:4b:45:28:b2:0d:fc:ba:61:c9:5e:55:f7:94:85:
c3:eb:55:8d:e8:2f:dc:c9:c9:22:8b:1a:a2:8b:e8:
b1:dd:5c:1a:44:95:82:88:ff:0d:1b:9b:68:05:5c:
e1:b5:ed:33:72:a1:73:85:8a:61:2f:f0:fd:8f:45:
f5:74:1a:29:ac:ac:39:87:dd:84:ef:2a:65:8b:79:
66:7f:c7:d7:56:0f:93:c7:b7:91:38:86:bb:60:16:
cf:11:4f:98:98:e8:f4:45:c3:a1:90:6d:92:7d:f6:
10:53:88:98:10:47:03:53:c2:cd:b6:d7:9b:46:d7:
60:b2:aa:cc:fd:b1:77:ab:4c:58:e3:11:63:6b:52:
c0:2c:43:0b:84:e5:c7:75:e1:c0:72:0c:df:76:29:
07:a3:d6:48:2e:7e:c0:2a:a4:39:b8:f8:8d:00:1a:
8f:9d:9b:eb:29:2b:bc:c3:cc:4a:aa:38:4c:87:bb:
e0:df:56:49:30:bc:e2:a1:a1:5c:14:2d:20:20:7e:
37:87:09:05:e3:7f:a2:24:a1:af:8c:8e:ce:ef:6f:
81:94:d4:8e:e3:c2:4b:7c:c5:90:f1:d2:f7:f9:6f:
54:7f:6d:ec:82:a9:48:86:79:22:7d:3c:f1:c1:27:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:C3:E0:EB:52:86:55:5F:BD:CF:91:5E:B0:90:B3:7B:5D:D2:AA
X509v3 Authority Key Identifier:
keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31312e302f32342d3234203d3e20323639353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.11.0/24
Signature Algorithm: sha256WithRSAEncryption
40:21:a5:b9:ba:c8:be:da:b3:a9:d5:0c:cb:78:63:51:63:70:
43:98:be:4b:dd:e5:b5:31:fc:42:7c:fa:92:06:1a:23:bd:bb:
38:51:2d:27:b7:63:cd:d0:1c:25:91:3c:a8:1d:ff:53:91:48:
5c:d1:5c:3c:0a:5d:30:0a:24:61:7c:3c:41:9f:e1:c2:72:71:
b9:15:7f:7e:cd:d5:99:82:9c:90:11:de:ac:03:7e:c4:44:4d:
1a:e0:01:2d:19:90:71:24:14:93:25:0c:7e:2e:ab:94:52:6f:
e5:2b:37:23:84:ca:16:dc:30:fe:01:70:96:7e:40:e0:84:11:
35:49:e0:cc:a8:bc:d7:61:2f:71:7a:16:ff:35:b8:83:b3:63:
a7:d1:92:8d:3b:66:5c:3a:6b:b7:3c:16:6a:83:2a:1c:20:27:
e9:df:fe:62:41:d8:82:8b:44:9a:ed:66:07:69:4a:d6:b7:ac:
65:3e:4a:3a:13:df:f2:d6:d9:c6:26:77:5e:08:fd:15:4a:99:
2b:b5:11:24:4c:4c:2f:e7:0a:b5:67:e7:fb:9b:5d:63:63:ed:
ac:57:48:8b:31:75:52:fc:b8:96:3c:6e:9b:10:0a:10:4c:a0:
74:f6:07:03:9b:4c:9b:c1:be:ce:aa:3b:28:32:c2:59:a8:fd:
e4:dc:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org