Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137322e302f32322d3232203d3e20323636353931.roa
File: 34352e372e3137322e302f32322d3232203d3e20323636353931.roa (raw, json)
Hash identifier: UPQ6NFmu6sCS7guNKb2EcDcxax/JV/7UK3ZAyrIoyRU=
Subject key identifier: B1:DD:8F:D6:9C:E0:8C:57:24:BD:CB:46:79:2F:EB:69:16:0A:47:07
Certificate issuer: /CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Certificate serial: 393A42E133F1BF7B436BF927E8DFA7CD54385AA9
Authority key identifier: DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137322e302f32322d3232203d3e20323636353931.roa
Signing time: Tue 17 Oct 2023 17:41:52 +0000
ROA not before: Tue 17 Oct 2023 17:36:52 +0000
ROA not after: Tue 15 Oct 2024 17:41:52 +0000
asID: 266591
IP address blocks: 45.7.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3a:42:e1:33:f1:bf:7b:43:6b:f9:27:e8:df:a7:cd:54:38:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Validity
Not Before: Oct 17 17:36:52 2023 GMT
Not After : Oct 15 17:41:52 2024 GMT
Subject: CN=B1DD8FD69CE08C5724BDCB46792FEB69160A4707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:79:99:dd:05:18:13:b2:12:58:6a:83:26:
7e:7b:57:4e:61:59:ab:5d:e3:3f:f5:25:70:72:1b:
3d:39:a8:9a:83:9f:49:5d:66:0b:8a:0e:1a:a2:59:
d3:dc:81:a3:98:10:5d:09:a1:32:39:80:66:06:c4:
79:17:6c:b7:22:ea:c2:23:84:dc:e3:10:20:83:3d:
a1:3e:35:65:98:7d:52:2b:16:cc:5f:46:ed:ad:2e:
67:1b:96:f0:35:b7:a2:e4:75:6e:dc:18:14:f2:83:
e8:6b:ef:79:94:9c:f7:aa:22:c9:6f:4e:c8:31:e7:
3a:7e:a4:d4:6b:92:86:5f:2a:69:f0:33:e9:08:9e:
6e:41:e9:8f:ed:3d:58:ce:b0:62:ab:b8:6e:00:db:
ba:41:0e:36:b4:48:f4:7a:02:c8:42:ef:3b:a7:9c:
9f:09:6d:2e:59:4c:f0:fc:28:7a:8a:97:5b:95:3e:
d1:fb:a0:eb:91:0d:90:4e:65:85:4f:ef:b5:01:08:
05:d9:f6:c8:82:6e:07:cc:fe:1d:6f:fe:65:7b:01:
10:30:8f:6e:60:13:ee:71:84:18:35:06:5d:f0:23:
90:e3:d0:aa:88:4b:de:58:85:6f:05:62:8d:c4:e9:
8d:ea:44:ba:f8:48:33:a6:ce:82:2a:3d:54:42:c8:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DD:8F:D6:9C:E0:8C:57:24:BD:CB:46:79:2F:EB:69:16:0A:47:07
X509v3 Authority Key Identifier:
keyid:DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137322e302f32322d3232203d3e20323636353931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:40:c5:6e:b0:0f:65:ff:6a:5a:c2:a2:55:52:76:2a:7c:e1:
39:34:d4:13:05:c3:6f:c4:7d:5d:a4:f9:c8:33:fa:73:1e:b8:
65:85:39:7d:e4:43:32:82:11:4b:25:b7:08:11:44:7a:9a:c7:
e4:8d:50:3c:41:f8:9d:19:65:0e:68:c7:aa:1d:90:7e:a5:d2:
c3:28:19:4c:22:db:57:6c:4f:20:d4:01:67:27:c3:15:68:b3:
7c:4c:f2:30:83:66:95:5b:ae:63:1a:6a:03:0d:d7:7e:db:a1:
60:db:ec:96:74:29:fd:8d:18:df:29:26:b1:a9:db:d3:4d:9d:
be:68:37:0c:38:aa:a0:50:e6:15:70:34:78:f6:5e:17:03:14:
0e:6e:a3:c5:55:af:6d:48:f6:6f:dd:85:d1:96:02:3d:7f:3b:
94:6e:0a:95:08:cf:93:79:41:81:f2:3f:e2:46:e3:3e:e6:c3:
a8:27:ed:26:98:d3:42:d0:f4:69:5f:52:89:09:70:17:bc:dc:
a1:dd:c8:a9:bc:73:d2:8e:17:ce:08:de:c7:55:15:76:ec:fd:
da:78:9f:f8:11:4a:18:a1:f1:28:8b:d9:33:3b:f1:f2:38:e7:
86:9f:68:78:df:1c:f2:14:21:61:4b:66:5c:22:57:8f:b7:93:
af:5b:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org