Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
File: 34352e3232382e38362e302f32332d3233203d3e20323637303637.roa (raw, json)
Hash identifier: VV953xZddArSTfaVtX//YrOkCF4Cwz/2pPqmZ4my/5k=
Subject key identifier: 78:F0:BA:DF:67:1C:B6:39:27:BA:63:F8:58:82:F5:0E:20:63:6D:CA
Certificate issuer: /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial: 3A6BC46500D00EC4EC91C379C867E3E90B00C2BB
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
Signing time: Fri 23 Feb 2024 14:40:53 +0000
ROA not before: Fri 23 Feb 2024 14:35:53 +0000
ROA not after: Fri 21 Feb 2025 14:40:53 +0000
asID: 267067
IP address blocks: 45.228.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:6b:c4:65:00:d0:0e:c4:ec:91:c3:79:c8:67:e3:e9:0b:00:c2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Validity
Not Before: Feb 23 14:35:53 2024 GMT
Not After : Feb 21 14:40:53 2025 GMT
Subject: CN=78F0BADF671CB63927BA63F85882F50E20636DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:a8:94:41:d1:67:6b:7a:9f:d7:60:17:0a:
24:2e:24:61:a8:78:dd:c2:0e:f2:a7:9c:f9:0c:11:
4e:32:d2:fb:3f:73:36:44:95:98:83:7e:7c:81:be:
4a:43:97:e8:24:fd:aa:e9:4d:4b:59:40:fd:1b:0b:
29:30:53:5d:e3:58:4b:5f:25:7a:77:7e:44:16:02:
55:d9:47:7b:45:bf:46:a2:03:34:62:ad:38:b9:e2:
8c:82:f8:a0:a8:b6:82:4e:20:60:1c:71:ff:a2:e8:
d6:df:a6:c7:94:87:6c:f5:5f:b6:72:57:07:fc:c7:
56:92:ca:76:e6:0b:50:04:b8:ac:c7:61:99:79:77:
2e:ad:7d:24:8d:4c:bf:20:0e:cf:c3:be:60:76:66:
27:a9:65:3a:6e:ac:b8:18:bc:17:60:86:b1:88:90:
e6:2e:0d:f8:e0:2c:f0:b3:61:6a:0d:52:67:36:2f:
c7:3c:09:7d:d5:80:c1:bd:e7:17:e2:e2:0b:3a:f4:
50:40:08:c6:ca:d9:05:d0:80:69:a1:88:58:eb:56:
30:a1:c3:69:72:12:02:3f:12:e1:e4:97:5f:e3:c8:
27:05:f6:7a:cf:d7:e1:4f:36:f6:d7:2a:7f:ce:56:
1f:e0:21:c9:de:5a:1a:35:3d:de:b7:b8:c2:4a:a4:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:BA:DF:67:1C:B6:39:27:BA:63:F8:58:82:F5:0E:20:63:6D:CA
X509v3 Authority Key Identifier:
keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32332d3233203d3e20323637303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.86.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:f0:ef:5a:b6:5f:9b:4f:0f:ae:1d:d4:6e:e5:7e:f2:df:63:
67:c9:76:0f:31:f8:b5:28:ff:2a:fd:20:c7:15:46:43:d4:46:
77:3e:85:bd:75:4e:b4:d0:01:25:9a:cc:f3:1c:3e:71:6b:ed:
87:87:dc:5e:43:7c:78:ad:75:d1:1f:fa:62:df:fd:5a:b1:28:
d5:ea:84:b4:84:3e:b8:b5:df:be:6f:bd:d0:a1:2d:d5:de:d7:
36:00:eb:e4:a8:3d:97:9f:d9:9f:e0:dc:ad:e5:6b:d3:38:dd:
40:e2:2a:1c:61:40:15:9a:28:54:7a:3e:1f:26:57:d4:58:83:
ce:cc:cc:a0:d5:06:81:2b:2e:ea:31:d1:68:c2:c2:20:9e:b0:
aa:c7:e0:0f:3e:54:c0:34:56:14:8b:40:54:3b:65:9f:1b:0f:
9b:81:dd:c6:66:cc:05:e3:f4:04:37:55:91:62:97:99:d8:85:
57:c7:ca:65:22:c5:3c:9f:3b:89:30:c5:e8:98:b0:2c:e6:9d:
28:b9:04:58:57:07:bf:9e:f2:9b:24:f2:d9:a2:1c:21:d0:0e:
4f:98:55:b1:8a:84:d2:76:f5:52:a4:cf:19:dd:a0:64:87:9f:
54:88:44:cc:85:14:18:b1:43:f4:0e:95:fe:33:f8:2e:c5:81:
51:d5:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org