Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
File: 34352e3138392e31362e302f32322d3234203d3e20323639353438.roa (raw, json)
Hash identifier: X2Wlwu1G8/LV1o5tZMUWyVQtFSp8F26Ax3/cZtK+dZU=
Subject key identifier: F9:79:7C:DA:64:32:35:A6:CA:DB:C4:EC:D9:76:FB:5D:8E:AF:D8:21
Certificate issuer: /CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
Certificate serial: 76646A4D93117987D9815FC04500C790B6FABB19
Authority key identifier: 04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
Signing time: Thu 04 Apr 2024 13:32:07 +0000
ROA not before: Thu 04 Apr 2024 13:27:07 +0000
ROA not after: Thu 03 Apr 2025 13:32:07 +0000
asID: 269548
IP address blocks: 45.189.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:64:6a:4d:93:11:79:87:d9:81:5f:c0:45:00:c7:90:b6:fa:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
Validity
Not Before: Apr 4 13:27:07 2024 GMT
Not After : Apr 3 13:32:07 2025 GMT
Subject: CN=F9797CDA643235A6CADBC4ECD976FB5D8EAFD821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:d8:98:d5:1d:7a:47:20:c8:07:a5:29:f0:
5d:7a:fc:18:c7:2a:f5:fe:0f:2f:c5:f8:3a:4a:4a:
c0:ca:ae:2e:17:a4:70:a3:ea:1d:c0:d8:ef:ce:15:
9e:07:01:be:b8:ef:d5:82:8a:b6:a5:f0:15:26:4d:
4d:22:80:fa:2b:48:0c:a4:78:65:40:25:64:ab:29:
96:6c:9d:ed:d9:11:82:3c:0a:60:cc:5c:a3:f2:c6:
45:ea:ca:60:47:24:c2:17:b3:1a:79:f2:cd:54:21:
40:f1:41:54:34:5a:c0:50:d5:79:81:22:7a:ce:ef:
69:48:6b:6d:0f:53:58:56:73:92:c5:93:5a:42:77:
bf:d9:71:fc:25:22:af:16:55:45:b3:d6:97:06:b6:
3d:40:44:62:d3:79:43:44:4e:68:be:46:8b:48:ff:
b0:cf:8b:17:2c:3b:b7:bb:b8:28:ca:64:73:5c:6b:
cf:46:a4:15:81:9f:26:5b:8a:e3:bf:ab:cf:0b:7b:
8c:7c:28:1e:dd:a0:06:87:c7:32:e0:9b:45:df:d7:
ef:70:7f:e4:2b:39:ba:30:6c:f3:ae:1c:7b:4e:1a:
20:c5:d9:0b:7d:46:be:82:28:4a:c5:da:ff:49:34:
13:e8:81:e0:23:2e:35:c8:e1:c5:5c:1e:e6:cb:de:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:7C:DA:64:32:35:A6:CA:DB:C4:EC:D9:76:FB:5D:8E:AF:D8:21
X509v3 Authority Key Identifier:
keyid:04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:11:e8:58:2b:f1:57:a8:68:5f:fc:59:f2:6c:4e:2b:da:d3:
44:8b:ed:4f:26:81:3b:8b:19:ab:38:0a:17:2b:21:fb:8a:35:
24:0e:a6:de:59:28:ae:ce:e7:a8:04:34:71:a9:d1:26:6a:25:
fa:48:8a:51:6d:ce:15:9b:c2:52:bd:ca:26:62:08:9f:42:8f:
0f:20:fc:fd:e6:7b:64:0b:cf:5e:77:46:14:b1:92:3e:b2:8d:
e1:70:75:68:60:fa:89:64:3c:2c:10:9d:c6:83:34:35:a6:9e:
b2:96:e0:0c:b6:a5:6c:b0:71:22:81:42:a8:6c:47:ae:af:9d:
5d:dd:e6:18:54:5f:1a:54:f5:ef:0e:d7:f1:1a:97:7c:b9:81:
75:00:dc:55:1d:8c:25:4c:09:08:fd:8b:4f:9d:58:47:25:86:
1f:8d:65:3c:40:e7:5c:41:95:9b:4c:3b:99:e2:89:21:2b:9d:
1c:c8:37:7c:80:6e:10:38:39:26:73:3f:94:32:8a:f8:35:76:
ad:09:3c:29:7d:c6:ab:b7:c1:9a:af:da:ea:86:6b:af:e5:00:
57:42:2f:d4:6f:a8:b9:e7:db:96:f3:e0:0a:3d:af:81:96:be:
67:e7:0e:fc:9f:89:32:77:a6:79:a3:53:be:bc:4f:d1:4f:d5:
d0:93:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org