Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0/34352e3232382e33322e302f32322d3234203d3e20323637313031.roa
File: 34352e3232382e33322e302f32322d3234203d3e20323637313031.roa (raw, json)
Hash identifier: 9j8Z3SAFmXg4zGoyUfdx7rq750zXTHqqRe83MdWFeOg=
Subject key identifier: F4:69:0E:5C:CB:6C:33:B6:55:3F:E6:3A:BE:A6:96:AB:5C:78:08:49
Certificate issuer: /CN=63D025C813765015C5A952A7FA93C945BAAB0B2C
Certificate serial: 06B60B249FE7D4FD50ABEA761CCD3A16B4540ABB
Authority key identifier: 63:D0:25:C8:13:76:50:15:C5:A9:52:A7:FA:93:C9:45:BA:AB:0B:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D025C813765015C5A952A7FA93C945BAAB0B2C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0/34352e3232382e33322e302f32322d3234203d3e20323637313031.roa
Signing time: Mon 29 Jan 2024 14:17:29 +0000
ROA not before: Mon 29 Jan 2024 14:12:29 +0000
ROA not after: Mon 27 Jan 2025 14:17:29 +0000
asID: 267101
IP address blocks: 45.228.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b6:0b:24:9f:e7:d4:fd:50:ab:ea:76:1c:cd:3a:16:b4:54:0a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D025C813765015C5A952A7FA93C945BAAB0B2C
Validity
Not Before: Jan 29 14:12:29 2024 GMT
Not After : Jan 27 14:17:29 2025 GMT
Subject: CN=F4690E5CCB6C33B6553FE63ABEA696AB5C780849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:d1:91:5c:a4:20:f7:f3:85:31:eb:db:4a:
53:9f:b0:1b:bf:44:09:8e:f3:7a:a3:e8:fd:df:05:
2a:bd:b2:ec:9d:5a:2e:68:0e:a2:ba:da:14:17:85:
e8:25:7b:86:52:f0:93:58:c0:8a:d6:ff:9d:d9:f7:
d3:77:69:ad:2c:87:dd:62:cc:7f:bf:08:3b:0f:75:
1a:41:8a:8f:b1:8c:cd:c8:2a:e0:f6:a5:21:d3:99:
e3:1f:d1:bc:c1:aa:c0:bc:11:19:c5:40:03:74:e1:
a2:0b:65:a2:a2:b7:85:99:09:dc:c2:03:55:3e:eb:
64:30:b2:83:37:a4:40:57:9a:18:ec:20:37:87:02:
89:35:d0:a9:21:36:aa:a0:05:0d:53:5d:03:aa:8f:
58:cc:f8:8a:8a:98:9b:b7:d8:15:3f:17:97:a5:56:
b8:d5:9b:b2:25:ca:39:f4:81:60:aa:0c:f0:b7:5d:
48:64:0a:f3:dc:de:d5:11:df:65:de:b8:46:7d:08:
e5:a2:58:fd:ad:0f:a5:e0:bb:c7:65:1e:81:cf:51:
c0:af:d9:3a:ca:4e:f8:96:b1:05:10:70:71:83:fb:
a4:e0:bb:39:08:7c:94:e7:95:fc:60:d7:d9:75:de:
68:37:33:bd:0e:5f:7a:7e:50:7f:7c:f7:b6:ae:69:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:0E:5C:CB:6C:33:B6:55:3F:E6:3A:BE:A6:96:AB:5C:78:08:49
X509v3 Authority Key Identifier:
keyid:63:D0:25:C8:13:76:50:15:C5:A9:52:A7:FA:93:C9:45:BA:AB:0B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0/63D025C813765015C5A952A7FA93C945BAAB0B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63D025C813765015C5A952A7FA93C945BAAB0B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/0/34352e3232382e33322e302f32322d3234203d3e20323637313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.32.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b7:3d:61:05:34:0e:ca:89:f5:7e:16:ee:37:61:6c:84:74:
a5:df:fc:e9:76:e4:17:59:a6:8f:5b:a5:e1:55:77:0c:7f:e6:
42:96:dd:8b:60:f3:8a:e1:80:ae:41:14:92:cd:66:f3:a5:77:
5d:44:36:49:ec:90:ca:5a:f4:84:cd:e2:77:17:3e:91:62:57:
cd:e4:80:f5:35:3d:9a:9f:a1:3c:8d:29:40:9a:43:65:cc:3e:
f2:6b:1a:00:0e:7d:2b:91:16:45:7a:3a:e8:0f:37:90:07:c0:
e0:8d:a0:44:1f:90:87:eb:c8:3e:21:c0:4e:36:59:5a:1e:4b:
d8:ac:f2:e1:6c:05:e7:a0:c9:7b:95:a1:aa:4e:a3:e9:97:71:
d1:e7:13:ef:f4:22:f5:bd:d5:be:a7:1c:98:07:db:34:88:36:
c6:d3:b5:71:22:3d:67:8c:84:7e:94:0d:1b:b3:82:f3:61:07:
e9:5c:f0:ae:75:98:34:d4:48:0f:70:22:50:ae:61:9c:65:e8:
be:45:dd:15:16:bf:25:e2:d9:cd:2c:90:8c:4d:83:02:dd:e9:
70:2d:c4:ea:e6:a6:1c:5b:66:54:2e:0b:53:de:eb:a2:b7:36:
a2:9d:bf:9d:42:03:66:b2:6a:b5:0b:ad:63:60:69:d9:dc:bd:
ad:69:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org