Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
File: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier: Z1M1xvxEfRLLceequmSIsW8PADZC/MHibZnv/vcTLYo=
Subject key identifier: EC:A6:64:9C:29:29:3B:7A:B3:B0:EF:41:2F:EE:71:EE:6A:C7:0D:C7
Certificate issuer: /CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Certificate serial: 71A77CE356A86A828201956FDE72ED47ED28F74E
Authority key identifier: BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
Signing time: Tue 09 Apr 2024 16:49:45 +0000
ROA not before: Tue 09 Apr 2024 16:44:45 +0000
ROA not after: Tue 08 Apr 2025 16:49:45 +0000
asID: 268205
IP address blocks: 45.236.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a7:7c:e3:56:a8:6a:82:82:01:95:6f:de:72:ed:47:ed:28:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Validity
Not Before: Apr 9 16:44:45 2024 GMT
Not After : Apr 8 16:49:45 2025 GMT
Subject: CN=ECA6649C29293B7AB3B0EF412FEE71EE6AC70DC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:c4:37:cd:03:f6:79:b6:cb:3d:b9:a9:98:
98:89:9d:22:1a:93:b1:31:bd:31:cc:18:ad:25:26:
82:1e:7a:12:d2:93:0b:8e:c0:a6:21:58:f8:59:9c:
38:11:74:44:f6:1a:6a:ba:ed:d9:cc:41:58:93:2b:
a0:8b:a4:3a:87:2a:26:29:bf:f8:12:42:6d:3a:f9:
9d:c4:d1:a4:f7:3b:8e:ed:50:f0:bc:c9:ef:a4:96:
3a:45:e7:ae:3d:4b:08:d2:d9:f7:f9:ea:b2:95:86:
4e:9d:6d:92:5d:f6:23:2a:a3:d8:17:7b:eb:fc:7e:
fb:13:d5:be:8b:d5:32:1a:d1:82:fd:d9:bf:1f:25:
34:98:ba:01:a8:fa:be:4c:ca:98:d0:51:23:7f:42:
5e:88:f5:4e:5c:75:1e:cd:da:04:63:ae:5f:88:d3:
af:ee:c9:30:b3:5f:63:9e:2a:0f:25:23:f9:5d:a1:
95:a1:cf:e2:0d:4a:0b:68:18:d1:02:dd:46:70:3e:
11:94:22:68:fa:77:d4:e5:5b:df:58:57:9a:02:36:
dd:08:84:2c:0a:22:98:62:53:e4:e4:4c:36:eb:b8:
d1:bc:35:6c:1f:ad:41:20:57:1a:a1:24:c1:4f:94:
98:5b:7a:93:8d:44:f4:d4:92:fd:61:73:4f:b4:69:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:64:9C:29:29:3B:7A:B3:B0:EF:41:2F:EE:71:EE:6A:C7:0D:C7
X509v3 Authority Key Identifier:
keyid:BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32322d3232203d3e20323638323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.48.0/22
Signature Algorithm: sha256WithRSAEncryption
55:ee:53:be:28:bc:ae:9d:62:73:7b:d2:c3:34:b4:07:25:52:
ed:f8:ee:08:db:73:ec:28:05:4f:b4:3e:c6:e2:93:47:25:6c:
93:b9:9b:4c:f3:30:0c:4b:3b:36:b7:80:28:81:1e:f5:94:c5:
93:6f:ae:b5:ae:58:d5:db:48:b7:28:0a:10:df:4a:d5:b4:7e:
0e:94:7f:a2:a5:c4:b4:9e:2e:c4:60:c2:8b:53:56:59:da:95:
81:60:fc:e8:fe:8e:6c:36:bf:b3:4e:7a:52:3f:39:c7:68:13:
e0:80:a3:53:87:9e:91:7c:a6:03:08:91:30:7f:ad:c6:e0:0a:
2e:91:53:8c:cf:92:fb:1f:36:22:f6:75:5a:79:b7:cc:14:6e:
eb:75:43:66:ed:13:be:47:d1:c1:0e:ee:99:d7:a5:11:ca:ed:
37:b5:05:7e:6d:3c:fa:95:d8:39:d8:bf:93:f1:c4:22:b3:97:
d4:84:63:f5:cd:12:4c:8a:2a:d2:53:71:00:6d:37:ec:d6:0a:
21:e9:10:1a:52:b3:2d:3a:d6:25:af:8b:17:0a:e2:9e:57:d9:
6f:44:0c:94:34:ad:93:8e:5d:15:47:65:e4:9e:47:5e:8a:a5:
97:c7:a4:03:5d:a2:ea:6d:41:fa:0a:f5:29:b1:12:7f:6f:a9:
0d:a2:ab:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org