Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3134332e3235352e3130382e302f32322d3234203d3e20323635313434.roa
File: 3134332e3235352e3130382e302f32322d3234203d3e20323635313434.roa (raw, json)
Hash identifier: iTeL8v8ZL21gM55o3Niv7C7OJJmCQa73Ty1sLlFXZLU=
Subject key identifier: 45:AC:D2:BF:2E:76:23:A1:3B:F6:D3:FB:3E:F5:DF:F3:30:0F:95:59
Certificate issuer: /CN=251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3
Certificate serial: 3ABA42291578B87BA70C0F4DC9D4471D40B6DBDD
Authority key identifier: 25:1E:34:6C:D4:BE:E6:D0:8C:7C:5E:F0:0B:B3:C7:C2:67:69:74:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3134332e3235352e3130382e302f32322d3234203d3e20323635313434.roa
Signing time: Tue 21 Nov 2023 13:41:28 +0000
ROA not before: Tue 21 Nov 2023 13:36:28 +0000
ROA not after: Tue 19 Nov 2024 13:41:28 +0000
asID: 265144
IP address blocks: 143.255.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ba:42:29:15:78:b8:7b:a7:0c:0f:4d:c9:d4:47:1d:40:b6:db:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3
Validity
Not Before: Nov 21 13:36:28 2023 GMT
Not After : Nov 19 13:41:28 2024 GMT
Subject: CN=45ACD2BF2E7623A13BF6D3FB3EF5DFF3300F9559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:d3:17:d9:43:bc:71:07:db:75:2d:56:31:
af:f0:cc:46:5b:29:be:dc:d7:15:6f:9a:5a:0d:33:
af:c7:9e:66:77:1c:12:74:4f:87:9d:e1:18:0a:c4:
8c:05:06:cd:d8:d5:68:0b:ea:d8:6f:94:42:ec:8c:
7e:40:94:1f:be:ea:cd:b3:76:5b:38:e2:01:38:a5:
23:59:fd:e1:2b:b6:3e:06:d9:36:bc:8a:b5:b9:f8:
fa:1d:63:99:f6:fc:56:b9:68:c0:2c:b6:33:7c:f7:
dd:6d:63:05:1a:32:37:f0:9d:b4:8a:b3:8d:e1:12:
82:8a:17:e0:2f:a7:e1:21:ad:10:55:3f:8b:a7:67:
f3:65:90:27:3b:7d:87:5e:ff:0b:98:42:f7:1c:e2:
42:0c:cc:77:a0:21:7a:9f:4f:d4:b8:fc:83:4b:ae:
bc:b4:83:87:32:47:2b:34:22:5e:ae:1c:9c:84:e1:
f9:8b:5d:a4:79:f7:3f:1c:63:e3:f6:ae:2e:00:0e:
3d:52:9b:d1:06:e9:85:d4:a8:cf:19:dd:4f:33:54:
4d:a2:8a:57:e5:47:f5:fd:83:40:e7:b6:58:9b:d7:
a3:2c:de:9e:7d:31:cb:f2:e0:68:72:08:c0:ee:a4:
d9:b0:25:5f:87:d3:33:97:cf:dc:bb:25:f6:2f:68:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:D2:BF:2E:76:23:A1:3B:F6:D3:FB:3E:F5:DF:F3:30:0F:95:59
X509v3 Authority Key Identifier:
keyid:25:1E:34:6C:D4:BE:E6:D0:8C:7C:5E:F0:0B:B3:C7:C2:67:69:74:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3134332e3235352e3130382e302f32322d3234203d3e20323635313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:f7:43:04:d1:fa:e8:d9:67:ad:3a:f8:7e:e2:6d:e0:30:75:
3d:c3:49:e4:07:8f:b7:6e:1f:0c:9c:de:49:56:24:72:ad:fe:
9c:a7:8e:b0:59:2c:2e:5e:2e:39:eb:a9:ce:72:be:e2:40:a1:
a9:9b:87:44:be:7f:6b:b2:2d:75:d8:95:9e:60:46:54:44:b4:
10:5a:71:30:f5:b4:78:d6:c9:2e:b4:7e:66:7b:01:0c:4c:d4:
f5:e6:c5:e1:f2:4f:2a:d0:6b:9e:ab:cb:c4:d0:de:de:f2:de:
98:df:ab:39:b1:a3:3f:30:17:09:85:cd:52:0e:b1:b2:66:f8:
d0:a5:71:f2:db:12:78:33:d5:7d:dd:f0:64:63:c8:d1:91:f4:
b7:57:d2:5f:fa:86:7f:aa:1f:53:5a:3a:ea:99:dd:ec:77:a8:
3d:5e:b4:e8:5e:ee:dd:c2:8c:67:56:b1:e8:58:8c:df:a4:06:
01:d3:a8:da:f8:a7:6f:c2:6c:88:af:37:5d:e1:41:ea:14:18:
95:bb:01:14:e6:7a:14:63:c7:c0:2d:9a:a5:f2:b2:4c:c9:88:
d3:9c:8b:44:17:25:4a:c3:16:1a:20:de:70:71:00:07:5d:22:
0e:e9:58:fe:ec:5b:ce:b4:f2:c0:be:83:7f:21:f9:b4:35:ed:
28:73:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org