Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3234203d3e20323637363033.roa
File: 34352e37312e39362e302f32322d3234203d3e20323637363033.roa (raw, json)
Hash identifier: gcDcP+SD8BbLS0XEwCezjo15CWMEr0h2r7gNy9ePCn4=
Subject key identifier: 4E:2C:98:5F:E3:D4:B8:B7:00:88:EF:53:D2:DC:B5:D6:42:9A:F7:1F
Certificate issuer: /CN=14170DD6CE1FF21F242C4902CD91B2917B639648
Certificate serial: 6A4DD7DF8CF7A9350C1D2EB678E9A221F640D1E9
Authority key identifier: 14:17:0D:D6:CE:1F:F2:1F:24:2C:49:02:CD:91:B2:91:7B:63:96:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14170DD6CE1FF21F242C4902CD91B2917B639648.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3234203d3e20323637363033.roa
Signing time: Thu 18 Jan 2024 18:15:37 +0000
ROA not before: Thu 18 Jan 2024 18:10:37 +0000
ROA not after: Thu 16 Jan 2025 18:15:37 +0000
asID: 267603
IP address blocks: 45.71.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4d:d7:df:8c:f7:a9:35:0c:1d:2e:b6:78:e9:a2:21:f6:40:d1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14170DD6CE1FF21F242C4902CD91B2917B639648
Validity
Not Before: Jan 18 18:10:37 2024 GMT
Not After : Jan 16 18:15:37 2025 GMT
Subject: CN=4E2C985FE3D4B8B70088EF53D2DCB5D6429AF71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:a6:02:fe:3a:71:96:4b:2a:b0:6a:e4:36:
28:53:fe:93:df:78:ea:36:ba:7c:aa:fa:cb:06:03:
9e:0f:70:7b:70:25:af:85:78:c4:27:90:8a:89:c1:
f1:14:36:54:55:91:cc:2c:1f:c6:8e:af:6d:bb:9e:
46:b2:30:30:e4:88:cd:bf:1f:44:74:39:72:05:42:
cd:27:17:2a:5d:aa:52:60:f7:d8:75:fa:ef:ce:a3:
05:83:a1:06:d1:52:0e:a7:07:0a:18:0a:cb:94:7a:
bf:33:27:af:b9:f0:04:85:98:e7:24:bf:14:78:e7:
fe:b5:91:99:3a:3b:d8:8b:66:da:8c:19:52:dd:ff:
31:12:64:2f:3f:69:57:ec:76:cf:1e:ed:22:01:7f:
5a:75:1f:89:5e:23:70:a4:40:1c:72:4d:f6:75:39:
f6:a0:91:0d:95:e0:d9:7c:e7:f7:13:d9:16:a7:39:
7a:78:8e:aa:dd:cc:1a:24:cd:01:a1:2a:a6:53:8d:
e8:32:4b:17:1c:ae:09:71:6d:b4:34:9a:31:37:8a:
f7:f6:d8:fb:a2:4c:03:ed:11:ce:b9:55:66:56:9b:
d3:8b:bd:f2:d0:82:bc:c9:5a:92:53:4d:75:2b:ff:
5f:1b:da:e3:14:e5:58:36:8b:dd:55:64:f9:ce:3f:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:98:5F:E3:D4:B8:B7:00:88:EF:53:D2:DC:B5:D6:42:9A:F7:1F
X509v3 Authority Key Identifier:
keyid:14:17:0D:D6:CE:1F:F2:1F:24:2C:49:02:CD:91:B2:91:7B:63:96:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/14170DD6CE1FF21F242C4902CD91B2917B639648.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14170DD6CE1FF21F242C4902CD91B2917B639648.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3234203d3e20323637363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.96.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5e:f0:03:7a:83:3a:5d:5e:10:44:c1:ab:ef:86:02:28:c0:
5c:66:07:c3:41:82:03:b8:b6:73:6a:87:21:69:d8:44:54:58:
b1:d7:d6:13:1f:9f:ac:d9:de:b0:95:2e:2d:f0:f6:88:8a:b2:
46:db:90:62:5a:14:4e:b9:3b:8b:94:31:dc:8c:8b:2c:a8:fc:
2a:71:11:ae:3e:91:7d:d8:ad:97:98:36:b6:c6:0c:c4:4d:af:
f9:b4:98:93:bf:f3:33:0c:5d:b8:f2:52:30:1d:04:ea:3c:7a:
ec:db:5c:40:90:fa:39:49:15:58:10:7b:68:e6:fa:ee:d8:12:
4a:cc:78:0b:3d:bc:e7:56:f0:2d:cd:76:15:07:50:8a:d1:67:
02:26:bc:51:f5:c9:c3:85:6e:ac:53:49:4e:6f:57:2f:10:56:
a6:71:2b:9e:4e:cf:7a:95:aa:11:4b:c5:9a:e8:e6:11:13:19:
5a:a7:8d:ef:aa:34:8b:36:cb:bd:83:c4:2b:0b:17:fa:dc:31:
7c:67:17:a2:b8:af:53:3b:bb:21:c1:1e:a9:b9:ae:2f:0c:21:
dd:c0:29:59:35:03:86:87:29:af:eb:43:2e:ba:4b:36:b9:22:
71:e9:55:65:2e:ea:72:d7:2a:28:d0:64:a3:1f:71:25:32:c7:
7a:54:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org