Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/34352e3233332e37362e302f32322d3232203d3e20323637323936.roa
File: 34352e3233332e37362e302f32322d3232203d3e20323637323936.roa (raw, json)
Hash identifier: jfZRVXb0gj25ODA4QXONVduuD67clY0jME+M0Y8Czc0=
Subject key identifier: 3A:14:6D:C6:C2:C3:45:F1:49:8B:6C:A7:FA:FE:3C:D9:08:DA:71:A7
Certificate issuer: /CN=942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663
Certificate serial: 08C938251AC0D1A2201EF616983A3149EFF2F894
Authority key identifier: 94:2A:D0:AA:1A:2F:AD:0F:14:46:F7:93:06:49:E8:CF:DE:8F:F6:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/34352e3233332e37362e302f32322d3232203d3e20323637323936.roa
Signing time: Thu 04 Apr 2024 20:14:48 +0000
ROA not before: Thu 04 Apr 2024 20:09:48 +0000
ROA not after: Thu 03 Apr 2025 20:14:48 +0000
asID: 267296
IP address blocks: 45.233.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c9:38:25:1a:c0:d1:a2:20:1e:f6:16:98:3a:31:49:ef:f2:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663
Validity
Not Before: Apr 4 20:09:48 2024 GMT
Not After : Apr 3 20:14:48 2025 GMT
Subject: CN=3A146DC6C2C345F1498B6CA7FAFE3CD908DA71A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:00:d2:be:ee:04:47:a2:b8:93:74:89:02:
1d:a7:ed:f1:ce:8b:6c:dd:9e:9a:fb:ca:35:f8:e5:
cf:00:dd:38:2a:f5:af:0a:d5:da:88:bd:ce:67:db:
c2:4e:72:04:84:ff:36:16:30:df:dc:47:bd:4a:af:
ce:a1:da:91:b8:f7:81:2d:dc:b6:46:84:b1:1b:bf:
ff:5f:53:6b:39:78:a4:15:26:8e:75:4b:1d:68:50:
6a:ce:12:ce:13:ac:f8:0d:a7:e0:c9:77:dd:32:2e:
c7:79:d3:fa:5b:dc:ac:80:0e:bd:83:1b:53:0c:d5:
e2:f8:27:64:f8:da:27:06:08:ac:5a:dd:e8:17:95:
fd:98:ca:71:5d:49:47:76:b8:dd:f2:d8:5d:54:8b:
c8:b4:48:1f:20:64:9b:1f:12:8c:12:ee:e4:5a:ab:
1c:c5:d9:e4:ae:ea:78:75:9c:9e:67:a1:64:80:69:
5f:88:df:a2:08:70:5a:a7:8b:bf:46:52:dd:23:eb:
34:0e:6b:6e:47:92:b7:30:d6:fd:05:97:f6:19:f6:
c5:4e:fe:a9:ed:f8:0e:b0:0c:16:3b:de:20:f8:68:
37:4c:28:8a:83:4d:2f:b1:85:ca:0a:ae:db:58:23:
ea:88:75:27:44:5d:5a:89:64:fb:c1:a8:a1:58:36:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:6D:C6:C2:C3:45:F1:49:8B:6C:A7:FA:FE:3C:D9:08:DA:71:A7
X509v3 Authority Key Identifier:
keyid:94:2A:D0:AA:1A:2F:AD:0F:14:46:F7:93:06:49:E8:CF:DE:8F:F6:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942AD0AA1A2FAD0F1446F7930649E8CFDE8FF663.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/1/34352e3233332e37362e302f32322d3232203d3e20323637323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.76.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d7:dc:1d:62:2c:98:76:c0:02:eb:6a:b8:d0:a2:f5:65:df:
7e:4b:a7:e1:63:55:24:3a:65:64:a7:5a:0d:57:ff:91:cf:28:
64:58:9b:d6:fb:a0:18:40:a1:d1:de:3c:7f:a8:f8:ed:fa:9c:
fb:a8:97:eb:ae:c9:0f:3b:9e:e0:cf:5c:fe:22:da:24:78:a9:
7a:85:1d:17:2b:e7:8b:08:f5:2c:79:f4:36:f5:44:d4:79:ae:
b9:23:94:08:47:0c:39:ed:bd:6e:a4:83:54:3c:c2:c3:01:98:
80:6a:00:61:28:56:e5:62:16:99:24:20:9b:ca:ee:31:6a:31:
18:85:f2:68:84:d5:76:01:9d:ca:69:73:5d:2e:83:13:ec:c2:
16:55:9c:77:76:3b:33:8e:d8:3b:8c:6f:37:75:53:70:10:6d:
be:61:cd:2b:dc:cb:fc:27:7d:c9:61:0a:bc:3e:a9:c2:4d:86:
8b:b6:ea:df:8c:e4:b9:84:e8:d3:31:44:3e:64:0c:f4:4f:28:
55:a1:a8:ae:5c:7b:5d:f8:dc:a6:98:0e:21:06:74:28:cb:3b:
86:32:58:36:3c:02:c0:65:15:63:6c:c4:b6:19:3f:56:3f:68:
15:7b:6c:8e:e1:91:a3:03:d9:4e:75:c8:4b:a5:c6:33:00:5d:
99:58:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 15:20:45 2024 by rpki-client on console-ams.rpki-client.org