Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e302e302f32302d3332203d3e2031393136.roa
File: 3230302e31372e302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier: 61DTi/Q9jT+ng1AViazams4nHI9n/3d9iSZEp4Ak6io=
Subject key identifier: 40:77:21:DA:3C:CE:68:5E:43:38:E6:78:BD:31:74:F3:58:78:B6:A9
Certificate issuer: /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial: 33F28203628F5B37E381A621D0503BB4814F7648
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e302e302f32302d3332203d3e2031393136.roa
Signing time: Wed 29 Nov 2023 17:49:06 +0000
ROA not before: Wed 29 Nov 2023 17:44:06 +0000
ROA not after: Wed 27 Nov 2024 17:49:06 +0000
asID: 1916
IP address blocks: 200.17.0.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f2:82:03:62:8f:5b:37:e3:81:a6:21:d0:50:3b:b4:81:4f:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Validity
Not Before: Nov 29 17:44:06 2023 GMT
Not After : Nov 27 17:49:06 2024 GMT
Subject: CN=407721DA3CCE685E4338E678BD3174F35878B6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:77:b3:ce:6b:d9:36:91:53:88:73:38:08:
2f:be:44:16:6a:8a:5b:19:da:d2:fc:ee:cd:c4:2a:
f7:be:8a:8d:6a:89:4e:b8:15:91:2a:04:55:3c:3b:
b4:40:13:7a:b8:c2:72:3c:3d:54:0a:c6:b4:77:e0:
84:26:28:6c:11:fb:89:0c:d3:86:93:1b:cb:46:6d:
d0:08:31:b0:18:18:b8:41:2b:da:8f:79:c8:cd:83:
87:8e:c6:70:5d:fa:d8:d7:4c:e7:5d:44:15:ea:db:
3e:29:cf:a1:2c:4c:da:19:5d:71:3c:1d:75:df:3e:
09:95:9d:b0:e6:45:4f:37:e3:9c:ac:4a:7d:47:a4:
18:f6:2b:d0:e7:8b:82:9b:ae:37:1f:13:1f:2b:9b:
8f:78:af:fd:76:05:63:c0:74:17:59:f0:2d:4d:52:
79:fb:94:6a:17:ae:46:d6:2b:1e:f8:58:44:c5:f4:
0c:b8:15:d5:94:64:7d:45:1b:69:a7:be:dd:d2:1b:
78:9a:32:ea:e4:89:1c:4f:7e:56:e8:62:36:bb:16:
c3:89:be:45:33:e0:56:71:1a:ce:29:cb:cc:8e:8e:
71:84:bc:28:d0:98:58:ff:8e:6a:b7:46:8f:54:f7:
67:69:6e:c1:04:70:3f:5d:58:b2:e4:e0:fd:06:80:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:21:DA:3C:CE:68:5E:43:38:E6:78:BD:31:74:F3:58:78:B6:A9
X509v3 Authority Key Identifier:
keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e302e302f32302d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.17.0.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:22:e3:17:61:67:5a:52:4c:d3:e5:9f:f4:b4:c0:ce:9c:88:
a6:18:01:7f:8f:51:85:df:61:99:b9:ac:b4:a9:9b:f7:5e:2d:
3a:a1:17:25:28:7b:aa:ce:cc:fd:82:03:11:53:ab:1e:d9:4e:
93:37:25:1f:ae:73:4d:50:8c:44:fc:08:fe:7b:af:db:68:ce:
c5:f9:e7:cc:1a:59:49:39:09:bd:87:60:6f:cc:5f:40:31:5b:
69:91:7b:77:59:b8:c8:7d:67:24:f8:10:b1:56:9e:63:85:56:
fe:ec:50:a0:3b:45:b1:a8:bc:d9:87:f7:31:9a:4e:04:df:97:
58:9e:4a:a7:d2:21:8b:a7:2b:da:e9:73:e8:86:51:8c:1c:31:
b7:dd:f9:9c:5a:9f:cf:c6:da:c6:50:73:fd:a1:f8:28:d0:94:
93:52:ec:60:41:84:39:af:d5:49:ae:e7:1f:65:11:53:71:8c:
f2:22:4a:04:7a:5d:bb:04:6a:1e:20:25:20:17:df:85:c6:c9:
cb:71:d6:83:20:90:47:15:22:fb:19:e0:51:80:fa:1f:97:51:
da:80:91:bb:37:5f:c1:0b:94:31:aa:be:48:89:5e:8c:f7:90:
4a:de:18:e7:c8:fd:b8:70:fa:e1:e4:99:6a:20:50:4f:6d:4f:
7f:2b:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org