Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32342d3234203d3e20323637353936.roa
File: 34352e37312e32302e302f32342d3234203d3e20323637353936.roa (raw, json)
Hash identifier: D66woV8BMSbPrI5SEg+C6KCZ7FFvI+Yd2XOhXdnn0iw=
Subject key identifier: 3E:49:2E:3C:92:4D:2A:C1:56:D0:38:BC:2E:31:F8:09:79:DC:EE:7B
Certificate issuer: /CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
Certificate serial: 4113D37A9B80C0DC15B64CD02331BE1D7F6CDE63
Authority key identifier: 61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32342d3234203d3e20323637353936.roa
Signing time: Wed 29 Mar 2023 21:40:41 +0000
ROA not before: Wed 29 Mar 2023 21:35:41 +0000
ROA not after: Wed 27 Mar 2024 21:40:41 +0000
asID: 267596
IP address blocks: 45.71.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:13:d3:7a:9b:80:c0:dc:15:b6:4c:d0:23:31:be:1d:7f:6c:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61FAAA30490638B45CAC59240695D24F3F9F5A15
Validity
Not Before: Mar 29 21:35:41 2023 GMT
Not After : Mar 27 21:40:41 2024 GMT
Subject: CN=3E492E3C924D2AC156D038BC2E31F80979DCEE7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:e2:19:50:83:ba:c0:35:87:3f:fc:82:fc:
25:84:42:ae:e8:cf:32:6c:ac:dc:e9:a0:fb:68:7a:
33:11:95:a6:09:15:1f:ee:4e:06:fc:8c:44:90:17:
e8:50:73:78:4c:2e:a6:a6:29:29:be:54:54:90:df:
ac:3e:2f:31:bd:4a:7e:c2:03:64:54:a8:9e:a7:69:
8c:33:be:d1:0a:50:b7:b7:96:93:52:7e:8d:dc:57:
9d:67:46:9b:99:f9:25:d5:bc:47:4b:b4:2f:1d:b2:
7a:45:b8:bb:d6:2b:07:df:52:9c:47:34:20:fa:77:
65:82:f0:37:c7:5a:03:34:ea:0d:d2:7f:6b:72:51:
75:87:74:66:1d:b7:ef:e2:48:cc:19:e7:09:52:27:
d3:5d:7a:ef:a4:4e:4f:72:24:01:2f:07:9f:33:77:
ff:f9:6d:f2:75:81:db:82:3e:7f:51:44:98:b7:8a:
85:76:b3:4e:ef:69:d8:7d:29:65:30:e7:53:5b:6f:
45:c3:90:0f:a5:bb:8b:64:d8:33:42:8b:24:b5:a4:
eb:0f:70:8a:1a:a0:ca:07:8f:6d:21:b0:b4:70:49:
c5:3d:65:0a:cc:6e:fb:51:9d:30:88:93:8a:ce:d9:
48:ee:74:d5:ae:4b:83:5e:de:41:88:59:07:f1:49:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:49:2E:3C:92:4D:2A:C1:56:D0:38:BC:2E:31:F8:09:79:DC:EE:7B
X509v3 Authority Key Identifier:
keyid:61:FA:AA:30:49:06:38:B4:5C:AC:59:24:06:95:D2:4F:3F:9F:5A:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61FAAA30490638B45CAC59240695D24F3F9F5A15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32342d3234203d3e20323637353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.20.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f3:4f:af:af:19:c1:8b:40:28:5a:3a:c9:97:ce:ed:c8:fb:
7b:6d:85:ea:0b:cf:93:18:13:95:76:c1:1d:70:e6:db:e7:46:
64:b8:b6:4a:d3:b9:c6:a0:40:62:e8:f4:fe:c9:09:1d:be:ef:
97:8a:7f:9b:39:f8:7f:da:99:16:f0:e4:09:8d:a5:7d:07:6c:
06:43:a2:4e:74:51:28:4c:d4:55:24:50:d9:88:41:12:49:8f:
77:68:45:8b:85:5a:74:f8:31:af:46:0b:76:a9:75:5a:bc:d2:
79:21:44:29:e1:ae:7c:b3:ef:34:1e:46:0f:4d:1e:63:94:49:
f5:a9:f1:20:3a:81:b4:45:b6:c6:ad:79:c8:30:02:71:48:89:
b0:95:e2:26:4a:a4:10:c8:cb:2e:c1:53:0e:c7:8b:db:45:d9:
5e:95:5a:ab:eb:05:c3:d1:0b:ee:ef:57:1e:13:39:35:a3:04:
8d:0d:d2:37:c1:5a:57:94:56:9a:e4:63:cb:91:e8:20:15:e3:
62:eb:9f:91:ac:2e:b7:8c:bf:09:f0:f7:8d:da:32:72:6c:c0:
59:e8:33:53:bb:3f:2d:50:ab:0b:2f:82:54:9f:11:5f:fb:34:
ac:d5:86:4c:c7:22:2f:fd:95:01:0b:1e:ec:cb:db:fa:96:ee:
9e:98:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org