Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3232203d3e20323637363033.roa
File: 34352e37312e39362e302f32322d3232203d3e20323637363033.roa (raw, json)
Hash identifier: CwRUYJX+Q5WmKpD+Qg74s5T/RIjNNLb8mDQjDjCkLaI=
Subject key identifier: D4:88:EB:B4:16:B3:A5:66:0D:3B:F8:4F:6C:A1:3F:70:29:FF:8D:05
Certificate issuer: /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial: 0DD1CE1D7099140F3F2051D60364C353F7EA9BA0
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3232203d3e20323637363033.roa
Signing time: Wed 20 Sep 2023 18:03:32 +0000
ROA not before: Wed 20 Sep 2023 17:58:32 +0000
ROA not after: Wed 18 Sep 2024 18:03:32 +0000
asID: 267603
IP address blocks: 45.71.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d1:ce:1d:70:99:14:0f:3f:20:51:d6:03:64:c3:53:f7:ea:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Validity
Not Before: Sep 20 17:58:32 2023 GMT
Not After : Sep 18 18:03:32 2024 GMT
Subject: CN=D488EBB416B3A5660D3BF84F6CA13F7029FF8D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:ef:df:c4:e9:42:70:cd:d9:4b:75:1c:4f:
f6:d2:e2:7b:8c:ff:66:ef:a7:dc:09:ac:d5:59:0b:
71:6e:74:c1:55:08:be:ec:45:5e:54:ec:00:82:9f:
f5:ba:df:10:01:a0:78:57:51:1a:42:e6:b4:a2:d1:
4e:17:f0:16:91:5a:d3:55:69:c9:4a:85:a6:dd:b7:
aa:70:28:fa:1b:fb:dd:8a:5b:8d:3d:e9:05:2b:20:
cf:67:94:37:6b:94:82:8f:a6:fb:a1:6d:82:ac:6b:
eb:e4:a4:91:a7:81:28:2e:bf:ae:b6:ca:ea:ad:8e:
d4:e1:fd:ab:0f:29:f9:a3:22:12:b1:97:4e:66:14:
65:fb:32:3a:4e:f5:02:97:e0:a1:c2:17:8d:b8:8f:
e0:23:97:d0:27:1a:1b:f4:b2:a3:71:12:29:4d:af:
d8:1b:81:00:5c:9b:07:66:8d:6b:46:de:9a:e1:f3:
17:f6:20:90:d1:75:b5:59:f0:af:ba:95:f7:ed:9c:
73:18:7f:08:36:5f:48:34:c3:0e:99:26:4c:2a:df:
95:2c:df:61:6f:30:58:16:7a:6a:92:79:4d:a1:ea:
cf:4a:b1:30:c6:c0:a0:2e:0d:af:3b:dd:43:28:2f:
df:f5:3c:7d:79:70:ab:73:32:42:57:3f:db:ed:cf:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:EB:B4:16:B3:A5:66:0D:3B:F8:4F:6C:A1:3F:70:29:FF:8D:05
X509v3 Authority Key Identifier:
keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3232203d3e20323637363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.96.0/22
Signature Algorithm: sha256WithRSAEncryption
60:47:b6:bc:c0:9f:03:a8:05:5f:23:ac:05:7c:11:94:a4:ca:
a8:97:ec:f3:6c:f2:a3:c9:26:ef:a2:23:78:80:9e:c7:92:b2:
5c:4e:f9:57:50:eb:ea:87:a2:a6:3a:31:fa:f2:68:bb:4f:40:
43:59:0f:9f:f5:7b:75:c6:f8:d5:b8:f9:ba:70:31:c2:da:14:
0a:e4:58:ff:6d:05:79:0f:2d:38:8c:27:d5:fe:15:0b:6b:a4:
53:01:9a:59:6d:24:b0:6e:b2:3a:08:f7:58:c6:a8:a7:ab:8e:
ae:ea:e9:18:d3:43:52:6a:e5:14:ee:1b:e6:24:d5:ed:3c:d6:
9b:f1:be:c3:4a:5c:fd:18:c4:d0:94:dc:a8:4d:3a:c8:c8:2d:
91:67:6f:c4:32:7d:c3:23:7f:27:0b:51:82:5e:39:c7:e1:59:
74:0f:f0:1b:b4:06:5f:a0:69:7d:95:be:6d:0a:29:5c:f9:87:
a3:59:66:9c:c5:de:18:b7:58:3d:5f:4d:5a:bd:50:d5:64:c6:
e6:57:dc:6d:10:19:17:18:b2:d4:63:ef:e0:c8:ba:ae:9a:99:
c9:c2:c2:71:bd:83:03:bd:fd:9f:1c:b3:a4:c0:1b:d4:ae:25:
fe:ea:74:f4:ee:44:41:0c:de:f4:f6:3e:8c:92:c0:b5:56:fc:
f3:0e:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org