Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32342d3234203d3e20323637303637.roa
File: 34352e3232382e38342e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier: sQgqmyLtwuxrytx8cpYyRkRIxIP5qN1xnu+WdfYQpPU=
Subject key identifier: AA:76:F4:EC:03:32:54:3A:A9:00:8E:A3:04:2E:DA:6C:B8:79:AD:35
Certificate issuer: /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial: 0CA0F6423A189F505B835922CF236254D8A70462
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32342d3234203d3e20323637303637.roa
Signing time: Fri 24 Mar 2023 14:08:25 +0000
ROA not before: Fri 24 Mar 2023 14:03:25 +0000
ROA not after: Fri 22 Mar 2024 14:08:25 +0000
asID: 267067
IP address blocks: 45.228.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a0:f6:42:3a:18:9f:50:5b:83:59:22:cf:23:62:54:d8:a7:04:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Validity
Not Before: Mar 24 14:03:25 2023 GMT
Not After : Mar 22 14:08:25 2024 GMT
Subject: CN=AA76F4EC0332543AA9008EA3042EDA6CB879AD35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:ca:72:bf:2e:dc:49:89:d3:8b:18:b0:9d:
bf:4c:fb:15:ff:97:7b:e5:aa:d6:46:0c:84:fe:5b:
e7:da:b9:a5:4f:e2:86:22:c5:55:8b:c2:f0:c4:05:
78:fc:dc:9f:6d:f9:ca:36:df:1f:ed:04:74:66:50:
72:2d:fa:08:1d:e4:c7:86:ac:67:9c:5b:5c:db:64:
6d:7d:60:34:bb:f8:43:9b:03:ef:a2:a2:74:79:b8:
fa:3d:64:78:81:36:61:0a:34:51:14:83:a8:4d:e7:
85:c0:c3:09:6f:f8:b0:49:fa:0b:d5:2d:68:99:9e:
a5:dd:1c:07:6d:04:5a:41:a7:74:1f:f9:4c:a0:6c:
d2:67:d3:8e:55:05:bc:a0:b8:d9:88:a1:1a:37:58:
27:36:43:04:76:2b:50:7f:91:4b:75:1c:c1:5e:63:
47:6f:1a:24:4c:7d:81:b7:af:00:d9:be:2e:2c:e8:
0a:4f:56:57:24:1a:d2:09:9f:6e:52:f0:47:e5:1c:
a7:15:59:1d:38:4b:b1:13:cc:c9:ea:c8:d7:88:cd:
50:2a:44:28:53:29:2d:5a:0a:24:eb:7e:05:d6:1b:
fe:0f:46:ad:c2:cf:ba:47:af:e4:95:b2:de:12:0f:
3b:44:01:61:4e:c1:e0:84:09:af:de:a5:33:0d:91:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:F4:EC:03:32:54:3A:A9:00:8E:A3:04:2E:DA:6C:B8:79:AD:35
X509v3 Authority Key Identifier:
keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32342d3234203d3e20323637303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:00:ae:db:4d:64:3e:b5:5e:e7:ec:e8:41:cf:af:97:0f:8d:
da:d7:b8:f1:c3:19:00:25:ce:aa:3c:65:71:72:9b:32:d5:81:
99:fc:f1:7b:14:c6:d3:f4:16:f8:7a:43:b7:0e:38:07:b1:20:
20:c5:c3:37:86:b1:3e:08:6b:8f:88:80:46:4d:8c:45:52:4e:
23:be:6f:06:fd:15:5a:a2:23:18:2a:16:ce:2f:d4:81:0b:65:
46:61:2e:5e:65:f3:86:e2:0a:4a:e7:bf:17:fa:e6:40:cf:df:
36:d9:50:91:11:6a:21:a7:ce:b8:0b:a7:30:a9:c5:b4:cb:1f:
4c:f0:7c:46:b7:a2:b8:09:b7:ef:14:21:3f:cf:96:76:57:a6:
61:ad:2a:ee:9f:0d:08:62:1a:0c:4a:1c:24:ac:9b:55:4b:77:
4d:7b:e6:38:e5:86:3f:6b:1c:b5:a7:69:88:30:71:cd:d4:c4:
4a:b9:9d:26:0d:39:4a:bc:7d:b3:9b:8b:9b:73:52:d6:fc:d8:
9c:14:f6:44:04:f6:43:77:0c:b6:1d:80:39:2f:ce:45:09:12:
a5:1b:67:d0:1b:d2:eb:2a:60:ba:e1:18:46:1d:c2:12:81:67:
71:55:2b:7e:73:74:67:87:68:f5:a0:2a:09:b3:ff:e2:0e:aa:
60:53:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org