Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File: 34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: h2DdWjXVUoK9rjkfo06boyuWMYKp0NE806U+zL/ACgI=
Subject key identifier: 76:FB:C5:30:44:D2:7B:C5:CA:16:52:87:48:B9:00:D2:42:B3:F3:23
Certificate issuer: /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial: 4547F1DE4CE544235CFD25722068BB38348F039F
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time: Sun 10 Dec 2023 14:29:47 +0000
ROA not before: Sun 10 Dec 2023 14:24:47 +0000
ROA not after: Sun 08 Dec 2024 14:29:47 +0000
asID: 53062
IP address blocks: 45.7.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:47:f1:de:4c:e5:44:23:5c:fd:25:72:20:68:bb:38:34:8f:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Validity
Not Before: Dec 10 14:24:47 2023 GMT
Not After : Dec 8 14:29:47 2024 GMT
Subject: CN=76FBC53044D27BC5CA16528748B900D242B3F323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:99:9d:4e:10:b0:aa:c3:62:cb:df:83:ef:
56:07:35:75:c3:c9:0d:c6:e2:87:16:41:46:64:87:
c0:3d:91:3a:d5:c5:44:63:d1:2e:c7:b7:1b:ef:ff:
84:0a:5d:55:d1:49:9a:bf:1f:3c:a1:dc:bb:12:f2:
d6:99:17:d9:aa:8b:37:96:2e:dc:06:21:63:16:78:
47:a6:e5:a1:2c:be:90:38:93:86:99:37:e1:37:45:
e7:a3:86:5b:18:a9:da:00:ba:a2:4a:c9:c5:e4:82:
29:69:a7:58:82:2f:f5:e2:ae:0e:f1:9c:b7:a5:41:
47:91:54:3c:40:9d:16:d6:4d:72:c0:a9:81:c6:b9:
f4:cd:96:e8:f9:b8:e5:4d:82:5e:5e:db:b0:62:81:
da:c4:ce:f9:d3:dc:b0:f4:c3:5e:56:1f:7b:cc:ad:
06:49:0d:0d:14:3b:c8:16:ac:7f:9c:72:78:8c:f0:
6e:b8:ab:7f:11:d1:40:f8:59:7e:24:ab:13:84:66:
09:18:ce:08:49:66:9f:57:34:fe:a0:5d:e4:da:9b:
7c:62:65:1b:cc:fc:de:b2:ce:2b:25:bc:67:3d:83:
f5:50:a5:f4:ed:7a:95:52:92:fb:cd:41:05:c4:c1:
ec:c1:62:0c:7a:a9:81:fc:a1:08:9f:1d:81:61:b4:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:C5:30:44:D2:7B:C5:CA:16:52:87:48:B9:00:D2:42:B3:F3:23
X509v3 Authority Key Identifier:
keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/34352e372e3132382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:e6:16:da:c0:ae:fe:85:7a:6b:43:00:c4:c8:eb:23:41:04:
4d:06:73:64:fa:2c:7b:7b:6d:0f:16:9f:84:99:47:a7:23:20:
be:1d:1a:6e:b8:a8:a0:b2:4a:ce:a9:f9:8f:2b:e6:c9:82:71:
3b:10:49:6b:f7:b6:5c:dc:92:ef:be:7d:c8:1d:b2:76:a4:9a:
6a:f0:fe:ae:a5:e6:35:10:3a:cc:01:ec:45:c3:a7:cb:5b:b6:
04:b9:15:65:7a:7a:a0:9a:d3:97:ee:43:75:a0:07:f1:d9:28:
ad:a6:a7:b1:6f:e7:4a:56:38:2c:48:49:24:b8:98:ad:d6:42:
cc:b0:c5:e7:48:23:b1:2c:64:bf:8e:20:c0:aa:8b:5b:0f:87:
2e:80:3e:2e:17:12:11:9e:62:54:51:e8:c7:af:a5:8c:c9:60:
33:6a:03:e8:73:4a:0b:64:9f:86:36:ce:2a:a6:3c:6f:ea:d3:
10:84:48:94:f0:69:4a:b7:e2:c8:78:aa:fd:7d:99:be:4f:b2:
e4:06:15:65:5e:31:fe:1d:7e:f1:ac:1a:1e:05:ae:81:03:96:
e7:08:29:c9:57:61:3b:00:59:22:68:5f:fe:c8:d6:fc:b8:62:
a0:0f:ff:27:27:65:1d:cd:49:68:ea:9e:c8:ff:6e:d3:6d:96:
00:5d:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org