Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/34352e3232382e32342e302f32322d3332203d3e203532373035.roa
File: 34352e3232382e32342e302f32322d3332203d3e203532373035.roa (raw, json)
Hash identifier: jOOUSHsAX+uWRhZCuc6Spip32/psdvaPgyVJhlGTnhU=
Subject key identifier: AD:69:65:10:ED:1D:7F:33:7F:95:AC:C9:B1:F5:EB:DC:41:DF:C1:EB
Certificate issuer: /CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
Certificate serial: 4469C20117C7F47EB80C3388EC1465C162A5EC83
Authority key identifier: 0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/34352e3232382e32342e302f32322d3332203d3e203532373035.roa
Signing time: Fri 28 Jul 2023 21:37:38 +0000
ROA not before: Fri 28 Jul 2023 21:32:38 +0000
ROA not after: Fri 26 Jul 2024 21:37:38 +0000
asID: 52705
IP address blocks: 45.228.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:69:c2:01:17:c7:f4:7e:b8:0c:33:88:ec:14:65:c1:62:a5:ec:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
Validity
Not Before: Jul 28 21:32:38 2023 GMT
Not After : Jul 26 21:37:38 2024 GMT
Subject: CN=AD696510ED1D7F337F95ACC9B1F5EBDC41DFC1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:bc:d8:3f:9e:4e:55:82:28:58:1f:ba:81:
cb:20:93:39:05:54:a8:26:cf:f6:b1:85:d7:81:d0:
0d:82:7e:e6:19:0d:a0:79:c6:c8:b8:bf:d2:37:c7:
e0:63:b9:bf:a1:3c:da:84:13:c2:23:9a:91:b7:ec:
0a:87:cd:57:88:91:e7:6f:80:7b:87:e4:32:06:3f:
d4:c4:cc:01:9c:27:74:7b:fa:f1:e9:cb:7a:e0:11:
d4:10:8b:44:1d:62:0d:c7:16:bb:33:10:e5:b9:11:
5b:14:1d:8c:3c:32:c9:06:87:75:94:9e:17:79:17:
ed:7a:0b:36:7d:27:29:0a:7c:33:53:87:b5:cd:eb:
37:73:15:27:29:da:4e:af:5b:c2:a1:83:ba:b4:ed:
db:5b:9b:93:16:a3:b9:07:2c:4a:e8:cb:ec:e6:49:
21:c3:cd:e9:44:da:0a:78:1e:e1:2c:63:91:83:98:
76:44:08:9a:8c:89:6a:d8:18:c4:c4:7d:0e:06:10:
3e:3f:1b:6d:5d:58:8a:97:cc:84:bc:50:45:83:28:
3c:37:ab:a1:54:1b:cf:9c:f5:0f:cf:08:b1:9a:3c:
f8:f4:01:40:45:7f:bc:63:9f:51:b1:f2:b0:9b:33:
7f:82:78:77:cf:0c:97:68:22:5b:3c:47:ee:7d:91:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:69:65:10:ED:1D:7F:33:7F:95:AC:C9:B1:F5:EB:DC:41:DF:C1:EB
X509v3 Authority Key Identifier:
keyid:0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/34352e3232382e32342e302f32322d3332203d3e203532373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.24.0/22
Signature Algorithm: sha256WithRSAEncryption
51:dc:36:4d:c5:74:fa:d0:86:b1:78:44:7e:8b:55:46:cf:5c:
9d:9a:33:d8:3c:d2:6f:20:18:4d:a6:af:b6:7f:05:76:59:6d:
f7:c2:9e:97:f0:d1:66:15:db:e7:b0:a8:ae:5b:d9:b0:4f:b2:
61:8e:f7:d0:07:49:5a:69:ee:a7:01:7e:80:92:c9:ae:e3:84:
cc:b0:37:91:03:54:99:93:17:51:e0:9c:0d:98:9c:3b:ad:be:
4f:81:2e:c6:ad:f2:fb:ae:98:a5:04:61:82:a3:29:5b:91:d1:
34:41:e4:45:cd:e5:de:29:88:0f:7e:78:95:96:d0:81:9c:82:
f6:f6:e9:ee:d1:d2:83:08:62:39:17:69:7e:a1:f7:43:83:e5:
de:9d:a2:3d:91:a5:26:69:e9:c5:b3:7c:b8:d9:ef:41:5a:58:
16:79:8f:77:2e:f3:81:97:13:fc:f4:3a:ed:21:c4:ab:6a:18:
69:cc:7a:65:ff:ea:6d:bc:94:b8:71:34:73:65:ac:77:e1:a0:
ff:1e:42:23:1d:5c:8e:41:72:ff:c2:e0:cf:15:3c:af:45:8c:
0b:5f:28:14:a6:e9:b9:ee:36:1e:b9:e8:ec:14:7e:6a:e4:00:
52:f2:d0:63:09:29:71:f3:83:99:c2:36:ed:0d:76:2b:95:dd:
fb:bc:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org