Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3332203d3e2031393136.roa
File: 3230302e31372e3131322e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier: lWNhn6lezjBHRut3I6pCM/y4VdVtrCEMtm43ZW5b3Lg=
Subject key identifier: 42:82:F6:30:5F:A8:EA:B0:3F:87:53:5C:BD:C5:9D:87:F2:87:DD:49
Certificate issuer: /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial: 2470CDDB22BA45C579F6DA0FFC54CB3D8081D4CF
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3332203d3e2031393136.roa
Signing time: Wed 29 Nov 2023 17:49:05 +0000
ROA not before: Wed 29 Nov 2023 17:44:05 +0000
ROA not after: Wed 27 Nov 2024 17:49:05 +0000
asID: 1916
IP address blocks: 200.17.112.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:70:cd:db:22:ba:45:c5:79:f6:da:0f:fc:54:cb:3d:80:81:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Validity
Not Before: Nov 29 17:44:05 2023 GMT
Not After : Nov 27 17:49:05 2024 GMT
Subject: CN=4282F6305FA8EAB03F87535CBDC59D87F287DD49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:c2:1c:64:07:7f:8b:70:c7:2e:19:47:da:
10:1b:8b:84:34:50:45:7b:73:a9:27:b9:94:43:c1:
da:28:e4:1a:89:78:60:de:9e:94:ed:50:b6:a4:72:
27:10:60:a9:ac:3b:ba:b5:0a:a0:40:da:f5:34:61:
c0:f8:01:6e:8f:c6:6d:e8:f9:3c:cc:1d:99:75:05:
41:4d:42:ae:44:9b:ac:b1:13:fa:88:45:8f:54:b2:
02:69:a0:f3:32:a3:4e:18:d9:a1:80:6d:06:11:eb:
56:00:aa:3f:22:e1:04:10:ca:9e:95:1c:e9:e8:ad:
77:8b:4f:5f:3d:c9:0d:e1:ed:5d:1a:92:8b:84:31:
2f:68:e6:fd:31:e0:48:61:77:e8:07:7b:6d:5d:f0:
6c:20:94:fa:f6:f8:f5:62:f4:56:3a:b4:3b:57:52:
83:28:ba:ba:b1:81:84:c8:7e:9d:52:8e:ca:07:da:
bd:e9:a0:42:4f:32:47:0a:17:b4:b3:ae:dd:f0:7d:
77:12:6d:a4:0b:44:bc:ea:32:63:11:fe:4c:67:81:
30:c3:27:9b:af:2b:04:9f:cb:fc:3f:dd:cf:a0:09:
9f:ee:a3:51:62:1b:9f:95:77:c3:c8:16:81:59:3d:
9d:1b:e9:fa:68:db:51:9b:d3:3a:a0:93:d9:ad:54:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:F6:30:5F:A8:EA:B0:3F:87:53:5C:BD:C5:9D:87:F2:87:DD:49
X509v3 Authority Key Identifier:
keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.17.112.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:91:ab:3b:fd:ff:d7:c8:e7:1a:e4:6f:b0:07:1f:d2:e6:65:
62:cd:a0:a2:4b:e0:21:b4:35:8c:ce:23:dd:f7:9e:3b:b0:c2:
5b:77:f3:be:3b:22:d9:c0:4e:c8:be:a8:94:53:79:ec:67:7e:
ce:8d:a6:e2:86:37:c3:f7:0a:25:31:06:03:31:76:07:99:80:
5e:96:d7:40:78:fc:ca:c7:3c:67:5a:2b:cf:dc:99:82:4b:3b:
77:78:07:46:63:ac:32:fe:a7:d1:42:3b:69:96:97:3f:47:4c:
e1:7d:80:12:df:ad:9d:e2:85:ef:7f:5c:db:43:aa:d6:6d:ee:
de:fc:db:f7:6b:dd:d2:bd:89:ee:6a:1c:82:3b:81:d3:8d:fe:
c0:43:64:b1:aa:75:e0:23:ae:ac:b3:de:2a:df:c3:6f:9b:7b:
2a:2f:67:15:0b:92:b5:55:e9:9e:62:bf:4f:2d:ff:5b:e0:b2:
b9:c7:0e:8c:0e:f2:d5:8f:65:03:b8:08:8d:f1:c1:2e:7a:d0:
64:3c:16:cb:22:5d:92:da:10:3b:43:89:42:c2:e9:63:d2:60:
d7:fb:95:64:8f:cf:3e:4b:f2:4e:86:ed:3b:8c:31:75:8c:c0:
c1:fa:bb:11:17:97:80:71:71:2b:f8:93:60:9b:d0:63:96:b6:
4b:b5:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org