Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e20323032.roa
File: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier: +BvXT8h1524jRKRzGV+PYlw49y1MQbxQcScFwgTX0h0=
Subject key identifier: C1:DD:5E:D3:58:9B:47:2D:E0:71:5A:E8:60:EC:0A:C4:BB:07:F9:32
Certificate issuer: /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial: 6A99DD91A7F0FF082CDFB3A1E52A3EA6D99378DA
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e20323032.roa
Signing time: Wed 29 Nov 2023 09:55:34 +0000
ROA not before: Wed 29 Nov 2023 09:50:34 +0000
ROA not after: Wed 27 Nov 2024 09:55:34 +0000
asID: 202
IP address blocks: 45.65.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:99:dd:91:a7:f0:ff:08:2c:df:b3:a1:e5:2a:3e:a6:d9:93:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Validity
Not Before: Nov 29 09:50:34 2023 GMT
Not After : Nov 27 09:55:34 2024 GMT
Subject: CN=C1DD5ED3589B472DE0715AE860EC0AC4BB07F932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:13:b6:7b:d7:3b:96:e2:e1:5c:0f:49:34:
b4:d2:6a:89:88:9a:f5:62:9f:30:69:04:c5:b2:57:
07:df:96:fe:d9:b9:b2:2a:f0:40:49:28:cb:eb:45:
31:65:4a:cf:c8:b8:3d:57:95:45:d2:42:3d:77:31:
1d:4b:89:3f:1b:30:88:50:37:e4:c5:4f:c3:5b:db:
cf:a4:08:fa:f4:6a:11:d6:f0:9d:ce:08:69:53:d2:
fd:9d:55:fa:73:43:37:0e:27:55:c9:05:8d:7f:c9:
71:0b:3d:33:c7:b0:5b:b2:0f:c8:b0:c3:c6:6a:b9:
e5:1a:51:be:ca:4a:52:dd:f7:53:ec:2c:49:18:89:
36:99:ef:99:8d:22:1f:44:77:3e:01:bb:ea:8b:19:
17:d2:2e:a8:20:a1:eb:8c:67:b9:da:f8:9b:c0:c6:
dc:9e:0c:25:b7:37:ad:3c:a3:02:5e:32:ef:db:a0:
be:f5:b5:84:f6:66:7f:46:80:6b:23:f2:4b:5a:9e:
ca:32:dc:03:3c:1c:8a:76:ef:8b:61:d7:9e:49:1d:
27:bd:c8:b2:50:64:3b:6d:86:58:c5:c7:4f:6b:00:
01:20:38:e8:f1:33:52:40:27:8d:e0:27:af:ef:96:
bb:8c:24:58:f1:5b:1b:2f:79:4a:fb:63:8c:58:65:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:5E:D3:58:9B:47:2D:E0:71:5A:E8:60:EC:0A:C4:BB:07:F9:32
X509v3 Authority Key Identifier:
keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/34352e36352e3232302e302f32322d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:da:32:58:3d:41:cb:ac:3d:d9:08:f9:33:36:15:d6:20:3b:
15:84:6c:d5:21:61:af:be:2e:7d:9a:72:2d:e9:4f:de:9b:49:
9c:3d:ce:af:e9:ea:b0:53:80:38:c9:0c:cf:02:7e:b1:c5:da:
8c:a0:d3:95:b7:7c:5c:3b:8f:6a:55:3c:51:5d:44:f8:a9:77:
cd:c5:b1:a9:bc:21:e3:d6:dc:d1:79:6c:40:ff:a3:b7:b2:3e:
ca:eb:e8:af:d8:4b:e8:51:f3:f5:38:16:4a:c5:d1:77:c8:e2:
80:e0:6d:64:ba:a3:1c:87:ed:2a:90:58:17:df:60:c3:86:1e:
1f:7a:1c:6e:02:f9:b5:d2:0a:49:51:dc:c1:91:13:c0:eb:45:
97:b4:e2:16:df:fd:1d:56:3b:14:10:c9:ea:02:b2:34:80:35:
51:0c:d2:c5:d9:9a:fa:8a:cb:3b:e0:1b:6e:09:54:b2:19:76:
35:ef:3b:a5:d8:0e:93:be:c9:b6:a7:96:1f:33:96:e8:8b:c7:
af:5a:f3:58:a0:c4:f8:dc:30:e7:6e:51:66:eb:c8:56:cc:f1:
41:1e:bf:49:c1:5b:d9:cf:01:d9:42:90:1a:ac:63:5e:f0:7f:
97:d7:df:86:14:2b:fe:c4:fa:c7:e3:50:43:3b:c1:3c:2c:ab:
9b:8f:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org