Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e392e302f32342d3234203d3e20323639363938.roa
File: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier: LPmtoxFyGJ6DZ10jSzHMAiE6MSur8aTd1AmCCDahRNY=
Subject key identifier: ED:EB:77:CC:60:11:64:B9:F5:09:15:1C:A9:D0:12:E3:9A:5F:03:2A
Certificate issuer: /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial: 4CD1CD6F673E1C60863EA56DE07F58B029057536
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e392e302f32342d3234203d3e20323639363938.roa
Signing time: Tue 23 Jan 2024 14:19:17 +0000
ROA not before: Tue 23 Jan 2024 14:14:17 +0000
ROA not after: Tue 21 Jan 2025 14:19:17 +0000
asID: 269698
IP address blocks: 45.191.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d1:cd:6f:67:3e:1c:60:86:3e:a5:6d:e0:7f:58:b0:29:05:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Validity
Not Before: Jan 23 14:14:17 2024 GMT
Not After : Jan 21 14:19:17 2025 GMT
Subject: CN=EDEB77CC601164B9F509151CA9D012E39A5F032A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:63:a6:c0:e9:94:6b:a6:e1:b5:d7:ca:94:
09:ce:73:77:c1:11:78:4a:48:0e:cc:b3:58:ab:dc:
32:7e:ea:8a:2b:cf:98:4e:38:02:47:2c:6c:f2:72:
09:e1:a3:c8:5d:14:9f:61:94:b7:ff:f2:42:fc:36:
90:9f:57:d4:96:6c:f1:c7:6d:74:05:a5:e2:23:6d:
0e:58:af:7c:17:84:ce:99:8a:8a:71:f2:ac:dd:1e:
94:59:ee:f7:47:39:1e:50:0f:c1:ac:68:7b:6f:8a:
2b:14:4d:e3:c8:8b:c8:8d:db:df:71:24:ef:b8:83:
f2:7b:25:2d:c6:5c:48:8d:43:70:1d:24:95:a8:2b:
f5:45:33:4a:3c:9b:9e:ef:02:ab:4c:80:84:5d:f8:
4a:fa:41:95:51:d9:80:35:37:cb:99:0a:69:dc:e6:
76:7f:87:8a:a0:3f:31:a1:b5:69:8b:4a:ae:43:33:
62:d7:47:9d:5b:f1:59:e8:09:b5:9f:d1:35:3b:d6:
6a:ca:69:a0:55:d9:4b:3d:85:09:e4:f7:30:b0:51:
3b:92:9c:f5:00:ec:13:b8:ba:fe:08:6b:e7:31:d6:
ab:83:44:3e:81:ba:d0:71:12:31:a1:1e:d6:4d:da:
31:d1:da:be:fc:b0:51:bc:1b:18:5a:60:53:e0:72:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EB:77:CC:60:11:64:B9:F5:09:15:1C:A9:D0:12:E3:9A:5F:03:2A
X509v3 Authority Key Identifier:
keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e392e302f32342d3234203d3e20323639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:9f:ed:5d:50:61:6a:0e:7a:27:1f:55:c0:b0:32:59:8d:7a:
2f:e8:f3:17:ca:7a:ad:bd:0d:ce:24:13:a5:d4:2d:bb:82:04:
2c:c3:41:67:84:c6:22:c5:50:5f:29:e2:14:db:ec:c0:b0:0d:
67:b0:8c:99:ad:7a:8b:04:02:26:d5:6f:c9:be:6b:f6:2c:86:
b9:62:00:95:47:69:09:72:36:c5:bc:31:9d:1f:f0:f2:cf:24:
6b:d5:1c:79:e4:78:ec:2e:84:49:f7:97:c9:9c:a4:f8:a0:75:
6f:8d:b8:60:f7:c3:35:34:e3:71:15:5e:b0:d1:2a:fe:1c:28:
87:b3:35:4e:2c:09:f2:76:39:2a:ed:04:f6:49:c9:0f:88:6f:
9c:80:e0:dd:77:37:e2:d9:ad:c5:24:44:a0:0e:fc:06:8c:f1:
62:da:eb:93:1b:3d:1e:9d:30:01:55:26:69:d2:bf:b1:fc:d1:
43:db:8f:ed:46:83:c2:f7:40:4d:73:d2:28:26:fa:61:8c:96:
fa:4a:01:db:dc:ab:bc:5d:ae:66:c6:02:41:43:4d:0b:83:0e:
98:7e:6a:65:1f:d6:c7:e2:5a:df:65:4c:39:a2:9e:4d:db:2d:
84:97:f9:a5:e4:6d:db:71:6a:1b:54:23:83:8e:e5:25:60:12:
d7:8c:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org