Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
File: 3230302e31382e32342e302f32312d3332203d3e2031393136.roa (raw, json)
Hash identifier: gSVagksT7sAvmhVNrXp36JidCrafAWuHu55XPtzW1sY=
Subject key identifier: 42:87:60:C0:E6:9A:C5:8C:1F:5C:44:A4:C1:BC:32:56:CA:5C:A2:9F
Certificate issuer: /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial: 4D280CA8D57F47C211B2D593261C3376D4FCC5C5
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
Signing time: Wed 29 Nov 2023 17:49:04 +0000
ROA not before: Wed 29 Nov 2023 17:44:04 +0000
ROA not after: Wed 27 Nov 2024 17:49:04 +0000
asID: 1916
IP address blocks: 200.18.24.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:28:0c:a8:d5:7f:47:c2:11:b2:d5:93:26:1c:33:76:d4:fc:c5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Validity
Not Before: Nov 29 17:44:04 2023 GMT
Not After : Nov 27 17:49:04 2024 GMT
Subject: CN=428760C0E69AC58C1F5C44A4C1BC3256CA5CA29F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:7a:62:70:c5:9c:66:f1:c5:09:a4:8d:8d:
0b:dd:24:44:48:67:4d:1e:fb:65:44:b5:ae:2b:18:
63:77:59:3d:33:be:58:48:69:1c:c3:96:2e:03:3d:
48:79:6d:67:bd:b6:a5:92:93:31:e9:52:3b:bc:8a:
98:f7:2c:83:8d:89:db:13:1d:db:b3:19:62:31:2f:
2f:25:6e:a4:f4:c0:ad:57:43:c1:be:8f:ff:e8:05:
b9:94:b1:5b:46:cc:32:45:1f:21:90:4f:f5:1c:d7:
cf:65:e9:7c:83:73:7b:c9:9c:aa:5e:16:a2:ea:88:
44:23:fe:ac:bb:63:a4:8b:87:7f:03:ed:9d:eb:02:
b7:a7:86:af:e7:28:35:e5:87:53:d8:dc:b7:f3:13:
0b:28:57:cc:b7:e1:b5:3c:e6:a6:1f:87:35:67:6c:
e9:37:ef:72:b6:5f:ca:b2:67:df:f8:4c:3d:d2:5d:
02:d3:27:b7:30:33:7f:93:b7:12:49:6d:c3:14:ea:
b9:a1:ab:39:2b:85:06:83:c1:66:f7:0f:51:13:87:
d1:da:09:06:7e:fb:48:73:ad:be:bd:88:8e:37:c6:
e9:ce:56:c7:f9:08:4c:35:30:ec:de:63:bb:5e:c1:
b1:43:78:b8:96:e9:fc:3b:7e:be:46:28:32:08:fe:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:60:C0:E6:9A:C5:8C:1F:5C:44:A4:C1:BC:32:56:CA:5C:A2:9F
X509v3 Authority Key Identifier:
keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.18.24.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:e9:0c:83:39:f3:60:97:5e:48:67:cb:c2:94:a4:9a:21:be:
a1:76:53:8f:f4:95:43:08:29:9a:c0:24:2b:1b:11:b1:5e:54:
f4:f9:76:c8:2f:c1:9c:81:1a:43:9d:af:a3:a5:f2:77:23:e4:
8c:0a:05:5e:76:6e:c1:9d:4d:85:f5:dc:50:57:98:dd:60:93:
c8:f8:f5:6f:24:61:0c:9e:cf:b9:f6:8d:f0:b1:a0:9c:40:78:
ab:4e:13:f4:d4:8d:a9:97:52:73:e7:e4:27:bb:ec:a3:de:b6:
b7:5b:24:4c:63:b2:30:80:d8:81:82:91:a0:86:6a:2e:c2:ea:
f4:7b:66:b7:9b:d7:fc:76:3f:43:57:b0:2c:5f:e7:dc:df:e8:
7b:0c:09:64:6f:19:d0:01:50:fc:73:b8:ec:06:f3:bb:05:ef:
19:28:40:6a:26:51:ad:d1:fe:b8:df:c4:f8:5e:c3:93:f7:6f:
86:61:f0:7b:89:24:64:31:91:03:40:1a:f8:26:48:74:c9:d6:
b7:c2:40:3b:b0:e1:13:1c:99:da:90:f9:e1:8c:9e:00:34:e7:
82:6a:c0:fb:f1:99:73:e7:99:c5:35:a6:9a:ff:88:13:00:3a:
13:3e:74:ce:b2:b5:d9:b7:d3:2d:cc:ee:e4:68:cb:3c:08:42:
6e:ba:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org