Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32342d3234203d3e20323637303637.roa
File: 34352e3232382e38362e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier: 1+dRHPSnpba2LdjO4Ryk+feazQglKlrwD/SBwCbKTHw=
Subject key identifier: 1F:D0:15:A9:23:F4:E8:CC:B6:17:95:56:B2:85:0C:87:D2:4D:9C:0E
Certificate issuer: /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial: 7A8701D820C6307B865C1AD55E0C81966936E105
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32342d3234203d3e20323637303637.roa
Signing time: Fri 24 Mar 2023 14:08:24 +0000
ROA not before: Fri 24 Mar 2023 14:03:24 +0000
ROA not after: Fri 22 Mar 2024 14:08:24 +0000
asID: 267067
IP address blocks: 45.228.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:87:01:d8:20:c6:30:7b:86:5c:1a:d5:5e:0c:81:96:69:36:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Validity
Not Before: Mar 24 14:03:24 2023 GMT
Not After : Mar 22 14:08:24 2024 GMT
Subject: CN=1FD015A923F4E8CCB6179556B2850C87D24D9C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:30:d1:d7:7b:d2:6d:33:1e:8a:2c:24:56:b4:
10:38:0a:49:5f:ea:63:6a:51:e5:9f:7c:1c:26:50:
84:25:88:de:49:e6:b6:11:97:83:a8:e5:be:70:59:
36:20:a1:2f:bd:be:e4:47:f5:4f:1b:29:62:fd:86:
4a:e4:e2:ad:46:d2:7d:71:99:a8:1d:6e:2e:73:f3:
71:ec:75:9a:46:d0:d7:9f:ce:ec:fc:6b:72:e7:a8:
aa:12:1e:cd:7a:09:1c:ac:8c:ea:de:53:af:c8:20:
cf:5e:be:de:40:2c:fe:ef:a4:78:2e:6d:04:b6:9c:
6e:48:4f:1b:4f:c2:2d:23:2b:5d:98:a4:a7:70:13:
48:6a:91:22:69:5f:e6:28:15:ae:55:34:6c:01:9e:
9d:be:1c:ea:e4:ec:da:53:56:6e:c9:6e:ed:fb:12:
d9:b4:54:a5:f3:92:a2:34:1f:6b:ad:ec:7f:50:ef:
44:06:c8:bf:1f:06:15:4a:95:68:cf:68:6e:cd:cb:
44:23:44:4e:e8:14:31:6b:e8:9e:c3:fe:91:29:16:
1c:ec:e5:8a:c8:63:4c:d1:da:60:c4:c9:bc:96:3a:
7e:c1:2b:1f:a4:91:53:a5:5a:41:45:50:cf:91:19:
91:a1:e0:d2:4e:ab:56:c9:73:4a:23:b7:85:90:9c:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:15:A9:23:F4:E8:CC:B6:17:95:56:B2:85:0C:87:D2:4D:9C:0E
X509v3 Authority Key Identifier:
keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38362e302f32342d3234203d3e20323637303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.86.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:64:c0:c6:73:64:97:84:11:d9:55:10:43:43:8b:24:e3:93:
be:51:df:84:dc:4c:f7:9b:2e:76:3e:d4:88:ef:3d:32:0b:a5:
9b:fd:e5:1f:74:25:03:fa:39:6f:6f:c2:ec:4d:70:52:b2:d1:
43:45:9b:4a:10:9b:b4:82:f7:d4:b0:39:1f:21:f0:02:a3:b2:
ad:16:b5:0a:86:2f:84:f6:41:4e:51:21:b8:01:de:19:44:be:
89:6d:03:52:33:49:e7:a2:1a:f8:95:8d:10:2e:9c:c1:3f:d1:
32:b7:d0:c7:c7:b3:27:63:26:fd:81:06:6b:1f:b9:09:ec:d4:
0e:cf:5f:e3:a1:5d:25:7d:4f:14:1b:6a:4a:2b:7e:b9:27:bc:
57:36:cc:01:0c:cb:51:42:30:79:72:33:de:cd:f4:79:0d:e2:
cb:7a:a1:c8:f4:27:e2:64:80:ee:0d:6e:9f:ed:a7:07:56:89:
04:aa:37:3b:54:b5:90:cc:29:e3:09:27:70:0d:21:ae:d9:db:
b8:05:3d:16:7a:bb:1b:46:48:fc:fa:18:07:50:05:c2:01:f0:
14:41:69:1d:3a:1b:72:91:0f:9d:c2:64:ea:4a:e8:aa:e7:27:
bb:51:29:c5:e0:5e:8e:39:35:fa:aa:a3:f1:bd:c9:d0:51:a9:
e0:98:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org