Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/34352e372e3134382e302f32322d3233203d3e20323636353836.roa
File: 34352e372e3134382e302f32322d3233203d3e20323636353836.roa (raw, json)
Hash identifier: TOalxyW64GvZaH7IHWwjC7P9GGZJX+QRRx2V8bWeVUs=
Subject key identifier: 13:7F:0D:21:59:C8:B8:BF:63:09:AF:5E:61:4D:8D:E8:28:6E:6E:EB
Certificate issuer: /CN=716443CCAF86DA4998DEDC26DE00D053BB1E74F0
Certificate serial: 28BA7673387B38BB44BCBAB840DB41704D327766
Authority key identifier: 71:64:43:CC:AF:86:DA:49:98:DE:DC:26:DE:00:D0:53:BB:1E:74:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/716443CCAF86DA4998DEDC26DE00D053BB1E74F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/34352e372e3134382e302f32322d3233203d3e20323636353836.roa
Signing time: Thu 04 Apr 2024 16:55:47 +0000
ROA not before: Thu 04 Apr 2024 16:50:47 +0000
ROA not after: Thu 03 Apr 2025 16:55:47 +0000
asID: 266586
IP address blocks: 45.7.148.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ba:76:73:38:7b:38:bb:44:bc:ba:b8:40:db:41:70:4d:32:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716443CCAF86DA4998DEDC26DE00D053BB1E74F0
Validity
Not Before: Apr 4 16:50:47 2024 GMT
Not After : Apr 3 16:55:47 2025 GMT
Subject: CN=137F0D2159C8B8BF6309AF5E614D8DE8286E6EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:2b:69:96:f4:d5:d4:c5:84:70:83:75:84:
7d:8d:a2:12:02:6f:20:e2:eb:8f:fc:0d:e9:c4:3e:
d3:6a:69:d7:07:d6:71:dd:c0:5f:58:ad:0f:d2:40:
4e:10:8d:79:da:4a:47:c1:fa:5d:11:e1:7d:5a:46:
ed:7e:5e:1b:91:be:8d:e4:71:69:7d:a1:7b:8b:54:
12:53:1b:bf:2a:65:4c:53:c4:1d:93:20:6b:39:aa:
ac:ef:d1:e4:2c:b4:d0:09:dd:6b:3c:a3:81:c5:ca:
67:97:26:68:b4:be:36:27:a9:0f:92:07:61:65:42:
b7:b2:42:97:86:be:da:6e:ae:95:00:bc:13:19:38:
55:d9:40:3f:21:cc:29:df:e5:6d:51:32:d7:a0:1c:
ec:49:e8:bc:4e:a2:cf:18:58:1c:0a:d2:f3:75:f0:
34:5d:21:fa:21:14:30:4f:02:31:1c:3c:bf:af:0a:
17:52:aa:f8:46:5a:e0:65:53:00:8f:a4:17:64:0d:
5a:03:0c:01:2c:26:20:77:4b:78:d6:bd:cc:3b:db:
2d:0c:cc:43:33:38:cc:53:50:70:0c:f7:d6:40:a1:
fb:4b:6f:44:54:df:eb:41:69:c6:19:d9:1d:76:e7:
f3:52:e9:f2:09:f1:5d:c8:f3:ab:df:9f:4e:e5:a5:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:0D:21:59:C8:B8:BF:63:09:AF:5E:61:4D:8D:E8:28:6E:6E:EB
X509v3 Authority Key Identifier:
keyid:71:64:43:CC:AF:86:DA:49:98:DE:DC:26:DE:00:D0:53:BB:1E:74:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/716443CCAF86DA4998DEDC26DE00D053BB1E74F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/716443CCAF86DA4998DEDC26DE00D053BB1E74F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/1/34352e372e3134382e302f32322d3233203d3e20323636353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:4b:f5:45:10:51:54:68:0e:73:59:cf:03:21:a4:ce:08:78:
cb:66:e7:03:42:be:2c:6d:b2:0f:a8:97:68:8b:0d:40:d2:78:
b5:88:eb:56:21:a0:3a:18:79:83:04:f7:07:e2:25:20:db:8f:
91:76:2b:74:08:50:fb:19:26:3a:b2:91:9b:45:ce:26:3b:18:
68:99:f6:94:41:45:fe:d5:cc:20:5c:08:78:76:14:b2:c6:7d:
73:45:46:a4:38:b4:be:4a:41:9f:01:e9:fb:85:83:e5:c9:06:
af:d7:07:17:bb:af:6d:1c:35:8c:91:e5:97:c6:71:2b:91:6b:
60:ff:76:c5:c0:e2:9e:2a:ec:6e:32:05:c2:4b:56:0f:08:a8:
10:cd:b1:e9:4e:66:5a:f4:09:8a:3c:9a:ef:db:86:c6:11:39:
32:2d:f3:6c:23:5b:13:34:f2:f2:a4:80:75:ec:0a:30:b1:a1:
10:f2:5b:88:b4:a7:a4:ed:f3:32:c4:78:5e:f2:3c:2f:e1:54:
e8:5d:87:bf:f0:a2:52:eb:bb:6d:e8:29:d1:62:6c:83:5c:0f:
53:f5:23:31:72:7b:34:8a:c0:58:47:bd:83:32:f6:37:c7:b7:
eb:a6:3f:86:09:67:1f:a6:3e:93:55:22:95:4e:20:19:37:3c:
6c:db:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----