Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa
File: 34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa (raw, json)
Hash identifier: HYECFl2yqHEwd9tr+GYsuvTZP7wGl30MjCRC+wHpA9I=
Subject key identifier: 32:E5:DA:97:8D:53:2B:1A:8F:C7:3B:EA:39:83:AC:39:11:A1:A1:9B
Certificate issuer: /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial: 33BBA620D5264ED1FA0A9EB9F6A7E8B4FAFE6730
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa
Signing time: Thu 21 Sep 2023 11:27:21 +0000
ROA not before: Thu 21 Sep 2023 11:22:21 +0000
ROA not after: Thu 19 Sep 2024 11:27:21 +0000
asID: 268364
IP address blocks: 45.238.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:bb:a6:20:d5:26:4e:d1:fa:0a:9e:b9:f6:a7:e8:b4:fa:fe:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Validity
Not Before: Sep 21 11:22:21 2023 GMT
Not After : Sep 19 11:27:21 2024 GMT
Subject: CN=32E5DA978D532B1A8FC73BEA3983AC3911A1A19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:dc:e3:be:d7:61:41:d4:f1:80:7a:55:12:
56:49:e8:8d:82:98:b7:bd:96:00:d6:be:2a:81:8e:
85:1d:9c:1e:a0:62:55:03:12:91:6b:a6:7b:c9:e8:
6b:26:42:5d:20:9b:3e:3f:01:5c:ad:93:fa:ed:81:
a8:a5:1e:c0:8a:a5:1d:61:60:ab:f6:a4:c1:b2:76:
01:03:35:1b:c7:f9:d3:b4:55:1d:e5:45:51:01:63:
74:2a:7c:bb:33:04:da:d6:41:dd:29:8a:96:83:20:
e9:7e:b1:f4:f5:7d:c6:43:59:58:a3:ba:5d:1a:2f:
8d:0a:dd:06:b5:a9:e6:7c:65:09:71:50:3d:f4:1f:
95:b2:fc:9c:a7:1e:0f:68:cf:65:6d:ee:65:2f:59:
44:74:b6:ac:1e:e9:4b:3b:de:82:49:3f:e8:da:0c:
3a:c1:d4:e7:fe:c1:19:d5:84:52:a3:39:d1:57:76:
45:ab:5c:81:fd:d4:7f:e1:c2:3a:a8:9a:b1:47:40:
de:dd:19:1c:13:9f:ac:3e:fd:f2:39:b2:fb:e0:c4:
2c:67:b0:e1:17:4d:4d:8a:fd:87:34:26:35:5b:f0:
6f:0f:a6:95:46:2e:7c:e1:97:eb:49:50:55:c2:19:
96:2f:02:7e:a9:7a:fb:d7:87:44:f9:d2:0b:27:e9:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E5:DA:97:8D:53:2B:1A:8F:C7:3B:EA:39:83:AC:39:11:A1:A1:9B
X509v3 Authority Key Identifier:
keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.240.0/23
Signature Algorithm: sha256WithRSAEncryption
28:ca:37:da:6a:96:ce:cc:49:43:32:5b:c2:f9:cc:ca:a8:43:
5f:f5:cf:ed:e9:2b:7d:75:cf:17:90:bf:1e:13:97:10:35:5a:
b0:b7:92:da:04:e7:bb:c3:b2:df:b8:45:aa:ff:ed:8e:b4:ed:
79:a9:38:51:d9:10:77:9b:e9:b8:6b:61:72:ce:d9:b5:a6:69:
05:96:96:51:a0:93:9d:cf:c9:67:47:c6:56:42:a4:5f:6a:7c:
65:60:40:1d:88:83:e2:d2:ab:d8:45:92:17:6b:46:e2:71:e0:
fd:94:d4:1e:cc:fd:6a:8f:d4:d3:5b:ce:ae:44:af:d5:d6:73:
8f:69:65:1c:56:f2:02:83:b5:36:65:1f:4f:51:2e:89:b6:27:
0c:7f:bb:a0:b3:74:4d:1d:ae:75:39:9a:ca:82:32:ae:59:32:
6e:7a:f9:67:7e:ec:37:ca:1e:5f:dc:7e:2b:a6:2c:1c:5d:89:
c9:9f:21:6b:44:47:d8:21:cc:9d:28:e9:d3:67:4a:d3:90:b6:
9d:d6:24:dc:b7:29:11:5d:6a:58:74:c0:be:47:12:a1:70:99:
c2:60:fe:8b:e2:ed:e3:c4:a5:f1:f8:79:1c:3c:c9:b4:24:cd:
51:54:9f:96:29:c3:67:9a:93:70:01:b2:1c:2a:15:5f:8b:e1:
01:0c:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org