Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
File: 3133382e3132312e36382e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier: zqbK+aOt3RJ6muSu88ViejxJ1uwXTyKD1dCYTAhJlnU=
Subject key identifier: F2:FF:B8:ED:47:D4:15:79:01:A8:3A:15:D3:E4:2D:49:D2:58:C7:07
Certificate issuer: /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial: 2C77459870D0A1D422355F2E5C0CCD94EDE610B1
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
Signing time: Wed 29 Nov 2023 17:49:08 +0000
ROA not before: Wed 29 Nov 2023 17:44:08 +0000
ROA not after: Wed 27 Nov 2024 17:49:08 +0000
asID: 1916
IP address blocks: 138.121.68.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:77:45:98:70:d0:a1:d4:22:35:5f:2e:5c:0c:cd:94:ed:e6:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Validity
Not Before: Nov 29 17:44:08 2023 GMT
Not After : Nov 27 17:49:08 2024 GMT
Subject: CN=F2FFB8ED47D4157901A83A15D3E42D49D258C707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:3b:b0:f9:ad:39:c6:fb:67:0b:ee:da:ec:
5b:34:3c:58:73:25:fa:f6:b8:83:25:11:13:51:a3:
5b:92:ba:b9:62:98:48:05:65:46:16:8b:19:86:37:
37:94:ea:e1:7d:a1:3a:40:0f:04:b3:ee:8b:69:0a:
b0:13:e4:75:e7:fd:1e:86:94:72:d4:87:2c:df:07:
89:68:e3:ab:ac:d4:c1:a2:fc:7d:c1:38:8a:48:2a:
4f:99:41:f5:8d:ce:69:f8:ac:ac:df:ae:b2:46:ec:
9b:90:77:85:92:13:52:61:f7:3b:86:4a:f5:4d:7f:
91:9b:ef:4d:16:fe:34:09:ef:22:04:64:27:fd:16:
7a:b4:41:5d:c0:63:77:f6:1f:e1:96:4d:20:26:5c:
1a:0d:6e:13:17:9e:da:54:b6:fc:e8:8a:0e:02:58:
b9:39:41:fd:5b:07:aa:c3:d5:d2:ab:55:b3:84:d2:
de:72:87:9e:10:aa:6b:f3:c1:0e:44:ed:0f:2b:bc:
90:24:08:92:6d:42:e2:de:98:69:99:64:13:f6:a8:
e9:4c:79:97:b8:76:03:fe:f4:a8:30:0f:e6:f5:df:
79:2b:dd:48:93:a6:37:8a:b9:7b:f5:f6:49:62:86:
f2:c1:38:fe:29:c0:d9:a3:d9:fd:4c:4c:ef:1f:de:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:B8:ED:47:D4:15:79:01:A8:3A:15:D3:E4:2D:49:D2:58:C7:07
X509v3 Authority Key Identifier:
keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:75:4b:c2:e4:22:5f:08:18:aa:25:c9:5d:f1:6c:4c:4d:d0:
e8:3c:3d:c3:22:f4:38:2d:f6:ac:bf:51:33:65:5d:34:c1:2c:
ba:8a:a2:84:9c:51:dc:8d:22:90:0f:47:96:c9:1a:c8:78:05:
9f:03:43:e5:ee:14:c0:9f:7e:b3:89:f7:9e:2e:b8:4c:6c:f6:
f7:1c:46:69:9d:30:29:f3:6a:ff:02:35:a2:e4:6a:1e:e5:b6:
1a:ea:fa:6b:07:b2:f7:4b:d6:7f:b4:6c:e3:f9:0e:17:f1:e0:
71:14:87:7e:03:98:b4:96:74:85:a7:6c:2b:c1:cc:b5:22:1f:
2d:36:53:4f:03:50:1f:d2:6e:38:79:77:de:6f:f5:b5:35:3b:
57:99:1b:69:6f:f5:40:f0:fd:e1:73:e0:79:d4:47:2f:be:f4:
bc:c4:a2:0a:81:a6:9c:79:f0:4b:f6:95:de:74:72:dd:b0:ce:
2a:62:0c:28:0b:d0:10:bc:42:3e:5f:99:11:cc:eb:81:16:a4:
43:ce:fc:0f:9b:49:49:f2:f5:11:ca:e9:68:10:b0:2f:04:07:
25:8e:5a:e1:8e:a9:1e:47:34:f4:88:54:b1:bc:04:da:e5:e2:
13:cc:df:8b:12:83:1f:60:13:f4:86:b1:1c:3b:29:72:8b:15:
82:b6:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org