Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
File: 34352e3232382e38352e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier: b7r86BxH8R979eul6qQbXP7iSxjP0HbOPGoe1Yaxqpg=
Subject key identifier: 8F:7F:B7:12:FA:52:7F:80:EF:26:8C:10:13:73:05:45:FF:01:4E:94
Certificate issuer: /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial: 6A22EA8D2834C457ED7EA4B76B3A77AF79FAC016
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
Signing time: Fri 24 Mar 2023 14:08:25 +0000
ROA not before: Fri 24 Mar 2023 14:03:25 +0000
ROA not after: Fri 22 Mar 2024 14:08:25 +0000
asID: 267067
IP address blocks: 45.228.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:22:ea:8d:28:34:c4:57:ed:7e:a4:b7:6b:3a:77:af:79:fa:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Validity
Not Before: Mar 24 14:03:25 2023 GMT
Not After : Mar 22 14:08:25 2024 GMT
Subject: CN=8F7FB712FA527F80EF268C1013730545FF014E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7b:46:e8:85:18:c9:ef:b3:13:90:a5:73:fc:
39:00:47:88:ee:ac:7f:75:ec:ff:a3:9a:a9:09:32:
37:c3:74:17:d9:56:47:5b:9c:fc:20:f9:48:57:5e:
44:74:9b:36:71:13:8e:cd:c8:bd:cf:95:56:90:39:
f8:84:73:ef:59:aa:30:ed:02:e5:26:1c:e3:46:63:
60:a0:d1:2d:25:ff:c0:a3:f0:b9:a8:30:fa:75:70:
17:44:d5:d9:42:26:fb:cf:44:0f:88:0a:fd:8b:e0:
52:9a:33:ec:54:dc:6b:52:b3:87:d4:cf:26:02:64:
62:78:4c:e4:aa:69:1c:b2:fc:0b:f1:73:49:7d:c4:
e6:8e:56:f2:e4:fa:20:a0:b6:d2:aa:85:a2:b9:ca:
7f:80:46:07:0d:fe:85:34:e4:05:06:39:7b:eb:a9:
a5:a3:80:46:b8:55:3a:b7:4e:dd:18:c3:e9:10:ae:
2c:eb:3c:a5:55:fa:e2:7c:ae:9c:ac:f1:f6:6c:47:
ae:8b:b0:63:7c:92:24:87:9f:d9:01:2d:1e:55:0a:
7e:8e:22:e9:9d:01:b2:c8:2d:42:37:c5:bf:50:e9:
57:3f:c8:7f:51:f7:4e:2c:c9:90:ae:49:77:6b:4c:
a6:30:4a:0c:96:ca:55:16:1f:08:23:ce:87:f1:b3:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:B7:12:FA:52:7F:80:EF:26:8C:10:13:73:05:45:FF:01:4E:94
X509v3 Authority Key Identifier:
keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38352e302f32342d3234203d3e20323637303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.85.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e9:e3:41:93:ac:95:72:74:60:1f:9f:9c:5a:b4:64:ae:ab:
28:67:61:8b:71:4e:df:8d:b0:b4:16:f6:52:bc:c6:db:21:2c:
89:18:77:d1:36:01:e4:0d:86:b0:2a:53:6a:bc:1a:ce:f3:84:
1f:7c:3b:f4:82:17:7f:dc:8f:71:69:54:a9:aa:c8:67:a1:02:
71:9a:1b:7e:1f:51:fe:0e:1f:27:4f:a6:9d:3a:3d:a1:f6:c0:
40:bc:26:dd:82:a6:7f:10:aa:14:d1:a6:50:60:25:c4:0f:1d:
57:35:d5:0a:6d:b8:f2:48:18:27:7d:ab:e5:38:65:50:3d:ac:
dd:ee:34:70:7d:24:2e:9a:12:48:ef:e2:51:a1:21:fc:ac:b0:
c1:f3:14:7e:1c:33:16:4f:eb:c1:b2:e9:76:6c:f8:60:0c:51:
2d:32:25:cf:ec:c3:2b:c6:13:d7:92:27:7f:d8:b0:58:65:f6:
a3:6a:47:22:f2:ca:ce:af:3e:58:77:46:81:d2:98:dd:19:c1:
c5:b7:eb:78:25:13:81:67:49:95:62:33:3c:a5:93:73:2f:bc:
f9:f5:c9:39:d7:20:90:04:a9:24:96:2d:e9:00:4c:0d:a6:e6:
4e:c2:2e:44:97:7f:d4:94:4f:68:8a:8d:0b:3e:1b:93:9e:47:
4d:51:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org