Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
File: 34352e37312e36382e302f32322d3234203d3e20323637363031.roa (raw, json)
Hash identifier: Z9yu/SqrucgvIVlqIlSsikDyMTjrPiXBt/KPlleebUY=
Subject key identifier: DE:5D:72:A1:D4:A1:38:9F:41:30:0F:21:7B:DE:84:E0:31:4F:64:11
Certificate issuer: /CN=024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E
Certificate serial: 2667718FE9B5F938D6527FA9BAF1A85DA6EC7416
Authority key identifier: 02:4F:5D:8C:E4:15:CD:2C:28:7E:14:9A:A9:1C:FE:0F:FD:EB:7C:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
Signing time: Thu 04 Apr 2024 12:26:10 +0000
ROA not before: Thu 04 Apr 2024 12:21:10 +0000
ROA not after: Thu 03 Apr 2025 12:26:10 +0000
asID: 267601
IP address blocks: 45.71.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:67:71:8f:e9:b5:f9:38:d6:52:7f:a9:ba:f1:a8:5d:a6:ec:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E
Validity
Not Before: Apr 4 12:21:10 2024 GMT
Not After : Apr 3 12:26:10 2025 GMT
Subject: CN=DE5D72A1D4A1389F41300F217BDE84E0314F6411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:52:30:c9:a5:9c:a2:9a:3c:69:a8:3c:09:
17:f8:89:10:c6:b4:4b:ef:27:28:ef:94:ef:d3:1a:
84:22:30:b8:1b:e9:7a:54:bd:49:4d:bf:6d:87:c7:
81:f4:dc:a6:ce:50:4f:36:ef:7f:92:b3:ea:d4:55:
b2:05:c5:d9:b4:3a:4c:e4:53:a7:ea:dc:a9:3a:81:
2b:17:1d:83:11:83:57:e9:30:d2:7c:ce:1f:aa:ea:
99:83:df:c9:f2:34:d7:a9:b3:25:33:55:6d:f8:44:
29:96:c8:c9:19:ea:75:4a:ca:28:de:67:3b:0b:30:
8a:4c:5f:0b:e7:23:ff:6b:9b:30:23:b6:1a:c5:6e:
9c:9e:71:67:30:ab:9a:00:67:0e:49:55:bd:7f:e3:
2d:ce:fe:aa:50:d1:f2:82:e1:94:60:e4:02:5a:48:
6e:58:b8:c9:82:1c:3b:40:ee:cb:02:41:81:f0:c3:
e5:11:31:d1:ba:55:49:f1:2e:73:63:7f:81:71:bd:
be:06:65:3e:ba:bf:df:bb:dc:b3:92:2f:bb:43:19:
cc:d8:54:16:b5:36:0d:d3:ea:77:aa:50:cc:f9:11:
c1:4e:91:af:5a:62:55:8c:aa:7b:d3:5b:a2:3e:6f:
bf:c3:fa:ff:6d:94:23:c4:28:8a:85:13:fe:b0:91:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:72:A1:D4:A1:38:9F:41:30:0F:21:7B:DE:84:E0:31:4F:64:11
X509v3 Authority Key Identifier:
keyid:02:4F:5D:8C:E4:15:CD:2C:28:7E:14:9A:A9:1C:FE:0F:FD:EB:7C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/024F5D8CE415CD2C287E149AA91CFE0FFDEB7C0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/1/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.68.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:2e:7d:45:ea:3f:be:7b:88:3e:ba:95:a9:29:2b:0c:2f:eb:
b8:bf:aa:ff:c2:c8:f6:d0:d5:dc:f4:a8:f7:01:ac:fe:58:2f:
cd:db:1f:45:ff:fd:7e:ec:54:24:76:2a:2c:13:dd:0e:58:b6:
b5:59:8b:1c:fa:8b:73:0a:5c:11:d1:48:60:1b:bc:ff:4a:dc:
41:6b:b0:b5:cf:4a:e0:a0:f7:14:dc:1f:4a:27:83:62:cc:61:
c1:86:70:b0:1b:a6:d2:4e:06:1c:b9:6c:2f:e0:2f:ef:ee:c7:
bb:4a:7f:86:55:8e:36:d4:6d:5e:ab:bf:b7:41:aa:60:98:73:
d0:e3:0b:ce:72:28:17:dc:a1:92:e8:64:08:09:6f:e3:1f:8d:
74:59:aa:9f:5c:ab:9c:aa:e5:fa:66:ce:f0:b4:18:5a:72:8c:
4a:aa:38:ad:9d:e2:59:97:3d:32:ad:c4:7b:86:88:10:ca:b2:
1f:9f:d7:eb:6f:09:ec:ee:d7:35:3b:65:b0:7a:ea:12:46:c6:
ad:d7:a6:8b:ec:28:07:6e:b7:75:43:37:40:68:88:1e:ab:92:
82:1b:bb:56:fa:b6:63:78:cc:ee:0d:28:4d:89:4b:58:65:1f:
81:68:ff:c4:0f:c9:7a:9d:c4:f5:4e:24:c0:d3:b9:65:46:cc:
d6:20:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 14:12:19 2024 by rpki-client on console-fra.rpki-client.org