Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/AS267041.roa
File: AS267041.roa (raw, json)
Hash identifier: IBCRfxCEkWPHpYhhv8n5ISd34ZMa/LT7KpGcaGt7U7U=
Subject key identifier: 98:FB:80:96:E7:EB:A1:40:BB:02:48:56:01:34:6A:0D:65:66:39:8C
Certificate issuer: /CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
Certificate serial: 4C694D3661B3DCD6F6675DA582D04A62BF219D8C
Authority key identifier: 43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/AS267041.roa
Signing time: Mon 08 Apr 2024 15:13:42 +0000
ROA not before: Mon 08 Apr 2024 15:08:42 +0000
ROA not after: Mon 07 Apr 2025 15:13:42 +0000
asID: 267041
IP address blocks: 45.228.48.0/22 maxlen: 22
45.228.48.0/24 maxlen: 24
45.228.49.0/24 maxlen: 24
45.228.50.0/24 maxlen: 24
45.228.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:69:4d:36:61:b3:dc:d6:f6:67:5d:a5:82:d0:4a:62:bf:21:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF
Validity
Not Before: Apr 8 15:08:42 2024 GMT
Not After : Apr 7 15:13:42 2025 GMT
Subject: CN=98FB8096E7EBA140BB02485601346A0D6566398C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:16:fb:ec:28:f8:dc:d8:ab:bb:03:bc:49:
f7:1b:ec:98:64:cd:2c:18:dd:6c:71:f8:18:ad:e4:
26:80:e5:a3:14:6d:86:18:05:83:df:7a:fa:4f:98:
a8:7c:5b:14:6a:7d:07:d6:5e:cd:d8:4c:1b:de:1d:
eb:22:a3:46:f5:bc:fe:14:ec:5b:fa:bc:04:fc:ff:
6e:48:8e:52:8f:8e:b9:95:f6:3c:ef:50:83:6c:f5:
c2:06:b4:10:21:ca:4b:5c:b3:d9:06:45:51:b8:6d:
af:5b:a6:05:5f:b2:5a:7e:ec:80:92:d1:5d:a5:f2:
48:19:c1:0f:f6:da:66:77:98:0a:96:a9:1f:16:19:
d1:d0:cf:0c:78:63:b3:8d:e4:90:74:a6:d4:47:8a:
34:aa:09:0b:e2:5e:3f:46:7d:53:13:c5:85:96:2e:
7b:7b:e8:57:4a:7e:89:84:42:ef:41:04:c3:3c:c0:
c0:c8:84:25:d5:a1:01:5e:f1:70:91:a2:69:a3:5b:
df:9c:be:a0:a9:33:1d:4e:95:39:77:29:a0:05:2f:
3e:46:50:5c:3f:6c:80:47:38:f3:9a:26:ef:84:c6:
4f:22:66:8a:44:45:b2:6b:c1:9c:2f:a5:eb:61:f7:
a2:b4:01:95:e5:ce:5d:50:fd:f5:0b:0a:c9:85:a5:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:80:96:E7:EB:A1:40:BB:02:48:56:01:34:6A:0D:65:66:39:8C
X509v3 Authority Key Identifier:
keyid:43:55:8B:0E:62:F3:AB:F2:4D:E8:8B:7F:8C:4B:D4:7D:CE:78:4B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43558B0E62F3ABF24DE88B7F8C4BD47DCE784BAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/1/AS267041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:26:c4:0d:f0:9c:97:86:c0:8d:00:e4:ea:e0:23:f2:c5:32:
2c:c9:8a:e8:27:07:4e:a9:d1:f5:34:29:17:d4:61:45:95:e2:
da:fb:32:c4:80:d6:69:f8:51:3d:7e:4b:b6:22:18:59:7c:3f:
0d:4b:79:36:a6:5d:3d:76:e2:04:76:74:ef:65:0d:e4:3c:7b:
5c:23:ec:14:10:f2:35:da:2b:de:ea:72:39:d8:5a:24:cd:2a:
31:b4:f2:2f:33:98:69:17:0f:bb:94:52:86:55:39:1e:a5:d4:
45:48:00:97:f8:5a:fe:e2:89:2e:6b:0d:d8:33:04:a3:c7:b0:
1a:bd:a8:dc:6b:4b:49:6a:87:1f:2e:d3:41:a4:55:ba:05:71:
84:5c:f5:9b:3a:b8:a5:41:d9:58:77:dc:7b:5e:0d:96:3a:d9:
97:ea:ff:0b:ff:81:6d:2b:55:72:3e:d9:f9:70:e1:08:0a:e2:
80:ae:a1:64:99:e2:11:96:3b:c2:78:8e:5c:af:9b:80:d4:48:
ea:b2:e0:8f:ed:74:cf:97:f7:89:0c:53:b3:23:88:9e:4f:bb:
dc:92:0e:d1:24:ec:d1:fe:71:de:1f:9d:98:2b:e8:c4:bb:fc:
c2:3a:cc:fa:fd:5f:bf:34:d2:f9:2b:cb:c3:1a:b5:82:f7:02:
01:24:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org