Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
File: 34352e352e3232302e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier: 1LbetINLlbaKg4SYJ1zx7vFZYtnTp0XtgwmE6UbbnUU=
Subject key identifier: D4:72:E0:21:DD:F2:12:E6:4E:CB:10:8B:83:2F:68:8F:74:5B:B5:54
Certificate issuer: /CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
Certificate serial: 46C2F9272499561C2BD4E332F6FA8F7283212C62
Authority key identifier: 47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
Signing time: Tue 16 May 2023 14:59:25 +0000
ROA not before: Tue 16 May 2023 14:54:25 +0000
ROA not after: Tue 14 May 2024 14:59:25 +0000
asID: 263569
IP address blocks: 45.5.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c2:f9:27:24:99:56:1c:2b:d4:e3:32:f6:fa:8f:72:83:21:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
Validity
Not Before: May 16 14:54:25 2023 GMT
Not After : May 14 14:59:25 2024 GMT
Subject: CN=D472E021DDF212E64ECB108B832F688F745BB554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:d6:e1:73:6c:18:3d:e0:91:77:5d:78:4a:
af:17:3e:0e:b1:a4:43:90:5d:1c:db:ce:b6:28:9e:
bc:51:02:1f:50:39:76:79:08:53:d0:df:b4:05:6f:
fb:4c:c4:47:d9:c0:8b:30:77:47:b4:37:25:35:b1:
60:6f:16:7e:15:26:de:5b:b7:b2:8b:c4:0e:44:88:
76:e0:38:b9:d2:18:06:01:66:14:57:09:f2:a0:bc:
d3:64:01:de:cf:00:7d:cc:ee:60:77:87:20:0f:cf:
71:14:bd:23:d6:b0:8a:28:e8:25:e5:d2:46:4d:07:
19:d1:73:39:bb:df:9f:51:d7:57:8d:95:4a:ce:0d:
0e:26:e1:c2:6a:e5:51:59:c5:4d:bd:bc:6d:b8:45:
e1:79:c2:2f:e4:ac:b3:7e:ba:92:ac:d6:30:65:ff:
54:31:3a:48:f2:be:14:e5:8b:0e:e5:84:fc:d1:57:
94:31:63:4b:a1:33:d9:54:14:67:e1:16:18:86:e5:
05:da:1f:0c:b7:e3:d2:25:47:ec:35:1b:50:1e:4b:
f4:64:6a:eb:0e:69:dd:12:8a:8e:72:d3:c4:e0:b6:
35:c2:0b:8d:05:df:1f:cf:e9:5f:fb:db:a4:48:5c:
15:89:98:ed:42:e2:85:b3:c3:d7:44:82:05:1e:3f:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:E0:21:DD:F2:12:E6:4E:CB:10:8B:83:2F:68:8F:74:5B:B5:54
X509v3 Authority Key Identifier:
keyid:47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/47598FC43095FBBAC65DD11244210ED67DD9A40E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/34352e352e3232302e302f32322d3234203d3e20323633353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.220.0/22
Signature Algorithm: sha256WithRSAEncryption
22:d2:e7:5b:23:91:a7:8f:2a:22:9d:e6:83:f5:16:6a:ed:3b:
e9:d6:41:a3:0b:78:54:c4:4a:31:6f:58:bf:f4:f3:90:0c:b2:
ad:95:7f:8d:71:aa:f2:84:48:1d:95:45:04:3d:0e:f1:72:44:
45:88:56:d7:c1:45:fe:16:3a:29:3c:17:d7:fa:36:54:dc:aa:
4a:8c:c2:f0:0d:aa:85:5a:4a:e6:3a:2f:60:4a:7c:17:2d:cf:
72:1f:fc:d2:15:86:4b:d2:e6:27:c5:55:71:34:91:64:2a:ba:
e0:ac:ab:c9:f4:f5:6d:72:ae:f5:2e:78:df:5e:ac:e7:69:d0:
0e:7f:56:05:81:00:5a:54:79:db:1e:62:95:e3:db:07:75:dd:
ad:36:9c:5e:d2:aa:37:65:ac:f9:54:83:02:43:26:c8:6d:99:
b5:45:b7:a3:94:d3:d0:01:4c:c4:0b:40:c5:bf:c5:13:b3:bd:
fd:3b:f8:42:db:3c:e3:34:8f:b7:59:c3:c7:97:23:c8:f0:0f:
44:42:bf:fa:7d:58:0e:2b:b0:83:ed:0f:dd:04:7b:74:4f:2d:
d3:cf:37:9a:f5:75:4d:60:c2:ef:a5:e6:34:a0:2f:47:80:57:
30:cb:a7:07:ff:6b:d5:4f:17:a2:f1:25:f2:3f:43:19:fa:a6:
db:41:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org