Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e342e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: 3aYCH7Zr9uYf9ys8CTWUHenE9Z6AsOgBhe53nmJ8j94=
Subject key identifier: D9:74:B0:E8:76:1E:9D:A8:76:E5:76:48:2E:D8:F1:E2:08:4E:3F:D1
Certificate issuer: /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial: 2768B44A5F8215C7B9FC95AB2D452BD2476F298E
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
Signing time: Mon 21 Aug 2023 14:42:29 +0000
ROA not before: Mon 21 Aug 2023 14:37:29 +0000
ROA not after: Mon 19 Aug 2024 14:42:29 +0000
asID: 268308
IP address blocks: 45.238.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:68:b4:4a:5f:82:15:c7:b9:fc:95:ab:2d:45:2b:d2:47:6f:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Validity
Not Before: Aug 21 14:37:29 2023 GMT
Not After : Aug 19 14:42:29 2024 GMT
Subject: CN=D974B0E8761E9DA876E576482ED8F1E2084E3FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:c8:dd:55:82:cc:19:7a:ed:d2:35:ab:1e:
49:5d:4d:ed:02:8c:08:01:79:82:c8:00:1e:23:38:
7d:c1:44:51:03:db:8c:72:99:e5:84:86:ae:58:80:
2c:18:73:b2:d0:0e:a4:33:58:dd:0a:ac:28:6b:db:
5f:16:90:dd:d5:51:cc:a6:11:fd:bb:be:20:75:b1:
e9:0c:e6:db:40:ac:cf:d4:af:f5:48:f9:54:d5:d5:
23:78:c6:dd:3d:d4:92:64:0f:12:0f:5d:6d:49:24:
a8:1b:9f:9e:19:b9:4c:fc:9e:4c:fa:68:ad:b6:c7:
fe:c1:b1:cc:ef:b7:5a:73:6b:b5:f7:1e:2b:03:13:
38:01:5e:94:52:0e:41:c3:ca:1e:32:a2:1c:be:04:
ad:8a:ed:5b:7d:fd:16:93:bf:7d:60:1d:a1:04:83:
8e:e4:f8:65:23:de:b3:99:28:ce:65:bc:9b:3b:da:
e6:3c:82:5e:c3:e3:59:77:0e:aa:b7:d0:02:71:57:
c7:42:41:4d:92:8a:a1:a0:ce:0e:a3:59:dd:8e:75:
06:f2:73:c6:88:51:d5:d6:2e:41:22:d7:22:64:5b:
33:29:d8:7a:b9:bb:23:89:9f:80:fa:c8:e2:82:c9:
02:9b:db:cc:57:0e:46:93:95:46:fd:ca:00:db:f0:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:B0:E8:76:1E:9D:A8:76:E5:76:48:2E:D8:F1:E2:08:4E:3F:D1
X509v3 Authority Key Identifier:
keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.4.0/24
Signature Algorithm: sha256WithRSAEncryption
06:92:5b:86:74:85:23:3c:cf:b9:06:c0:8b:08:6a:24:57:34:
e4:e9:45:e3:f9:7d:9b:26:9a:5c:48:52:23:d7:4a:bc:c5:da:
8a:b5:98:f5:1c:b4:d1:39:4a:c9:b3:2f:aa:b6:68:95:d8:a5:
c5:94:7b:e4:21:7b:66:52:b5:06:46:dd:9c:56:fc:31:a4:12:
32:fa:cc:e4:79:32:87:1d:d8:69:f5:01:cd:da:cb:9a:65:2c:
b4:c3:2a:a9:1d:5c:d3:de:0b:3f:6b:8a:c6:aa:11:b1:f3:8b:
89:5d:47:93:0e:2f:9b:d4:fa:80:ec:b7:f2:d9:fe:07:b5:46:
23:94:60:59:e8:d5:a1:a8:eb:2f:d7:e2:d4:d5:07:f9:e5:7f:
18:4f:f1:c3:8a:98:14:c4:d3:2a:99:bc:b0:c8:c4:e1:b3:05:
47:1d:e8:bf:a8:3a:09:a2:fe:01:08:8b:58:6b:6c:80:be:89:
32:df:68:cc:e7:98:f2:b9:ed:17:2f:ff:d6:d3:64:45:a0:98:
99:d0:bc:fe:33:30:c8:74:d7:3a:38:a8:88:a9:42:fa:a6:ed:
fd:3a:38:3f:dc:e8:7b:e7:30:ce:64:78:1d:8e:c6:c4:6e:84:
70:6d:d4:f1:4a:3f:66:86:2d:64:48:9a:c2:ba:a7:0e:af:5c:
e7:0b:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net