Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
File: 34352e3139312e34302e302f32322d3332203d3e20323730323534.roa (raw, json)
Hash identifier: kU9lCdVEQ/L2zyanmErOjJigl54E/7Bw6K3P4Xv4C0Q=
Subject key identifier: E2:94:21:A6:43:65:1B:ED:69:90:FA:87:A6:2C:14:92:1C:62:CC:60
Certificate issuer: /CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
Certificate serial: 71C9670710127623F2A76B1ED200ADB7F8F99B32
Authority key identifier: 02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
Signing time: Tue 26 Dec 2023 12:19:07 +0000
ROA not before: Tue 26 Dec 2023 12:14:07 +0000
ROA not after: Tue 24 Dec 2024 12:19:07 +0000
asID: 270254
IP address blocks: 45.191.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c9:67:07:10:12:76:23:f2:a7:6b:1e:d2:00:ad:b7:f8:f9:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
Validity
Not Before: Dec 26 12:14:07 2023 GMT
Not After : Dec 24 12:19:07 2024 GMT
Subject: CN=E29421A643651BED6990FA87A62C14921C62CC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:f4:21:c2:01:88:df:71:81:91:70:ab:ea:
86:4f:85:4a:aa:4d:bc:d3:72:74:0f:44:70:36:89:
16:69:d6:0d:83:47:a9:d1:93:20:36:45:bd:0d:cf:
b0:9c:09:ca:38:08:ce:4c:38:ad:7d:5f:dc:d1:80:
0c:b3:71:48:9d:3c:b3:92:3b:9d:c0:5d:16:b1:74:
af:d4:67:d3:52:8a:38:45:b0:4a:55:b5:17:40:70:
3c:55:f6:a5:17:50:1d:13:5c:d4:74:1d:af:19:d8:
8c:c3:41:e3:14:67:1f:55:9e:14:62:91:84:77:c0:
12:3d:0c:2f:8e:1b:2a:a9:ba:00:77:c6:14:88:19:
12:61:8f:9c:45:6b:62:e7:d0:82:d1:38:33:f6:e8:
84:e2:da:d4:a8:75:7d:3a:16:53:a3:80:f5:81:ce:
2d:b5:50:93:62:c4:ce:6a:3b:3c:3e:ab:6b:69:d5:
28:a0:6b:11:93:54:a1:0f:c6:10:85:df:33:cb:63:
50:30:78:a5:db:f2:a5:e0:3a:5f:6f:81:c6:82:b8:
2f:46:48:b8:d8:f6:5b:c7:25:0f:49:4a:2c:46:db:
ee:d6:cb:01:a1:94:99:ba:1a:eb:fd:7d:fe:a5:32:
b7:7f:c1:3b:36:8f:1d:fc:8c:bb:72:eb:d3:2e:10:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:21:A6:43:65:1B:ED:69:90:FA:87:A6:2C:14:92:1C:62:CC:60
X509v3 Authority Key Identifier:
keyid:02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:71:e6:09:57:29:e0:07:a2:ce:6e:07:1a:a9:7f:c9:a8:12:
9d:2d:a9:fa:fe:34:e9:99:88:ab:66:21:d0:bf:9f:48:4a:b0:
d0:88:ca:5e:80:b0:41:6e:47:dc:b9:71:be:79:ff:ad:67:09:
b8:37:e7:4b:bb:ed:a6:f2:5d:89:41:cc:03:36:cf:c6:29:78:
e0:32:be:0a:37:5d:11:5d:73:c8:93:31:d2:0e:43:3d:66:e4:
a9:f1:1a:1c:07:c2:0c:86:52:28:e8:44:69:10:4d:83:18:4b:
09:81:e9:8b:09:d5:79:bc:dd:37:21:1c:c1:26:29:0f:8b:94:
e3:f8:3a:45:61:e1:42:27:ad:4e:8e:3e:51:6a:71:29:22:22:
bf:b6:e6:3d:9c:6b:8b:5a:8e:f1:4b:e9:44:cb:e8:f1:9f:72:
d3:57:6e:a0:34:8e:48:0c:cc:ef:89:a6:78:f6:10:2c:35:24:
0d:66:bc:be:50:d3:f9:ac:aa:a3:8f:a2:32:c1:86:63:0f:8e:
14:51:00:ae:7a:91:b6:85:ce:a7:3f:ed:f6:64:49:4c:4e:f1:
48:19:fd:cb:67:78:62:e0:ab:8b:0e:0b:7d:d2:15:a3:d7:ca:
ed:12:73:0d:ef:88:53:58:cc:6b:56:14:d9:8e:66:95:25:85:
24:d4:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org