Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
File: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (raw, json)
Hash identifier: /xR85TZ4nQqNPbG/nxroIxB26uX8tUxB+HcP66y9PLo=
Subject key identifier: 3D:25:BA:A3:AC:B6:C3:3F:8A:C0:14:8A:D0:EF:E6:AE:28:A3:CA:96
Certificate issuer: /CN=C086F933844AE977142A610348BAC966E4D6B7B4
Certificate serial: 422478DE3160B5ABF181B7B95A46BD87A284E545
Authority key identifier: C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
Signing time: Mon 12 Feb 2024 00:52:09 +0000
ROA not before: Mon 12 Feb 2024 00:47:09 +0000
ROA not after: Mon 10 Feb 2025 00:52:09 +0000
asID: 265242
IP address blocks: 168.0.20.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:78:de:31:60:b5:ab:f1:81:b7:b9:5a:46:bd:87:a2:84:e5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C086F933844AE977142A610348BAC966E4D6B7B4
Validity
Not Before: Feb 12 00:47:09 2024 GMT
Not After : Feb 10 00:52:09 2025 GMT
Subject: CN=3D25BAA3ACB6C33F8AC0148AD0EFE6AE28A3CA96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:a9:f7:fd:09:ca:e0:d3:b5:cd:a7:0b:1e:
c1:10:f5:78:4d:9b:95:9f:ea:57:f3:43:75:00:d5:
a2:1e:1b:e9:b4:e5:89:cd:1a:31:c7:f9:af:d4:52:
18:f8:f2:25:aa:31:b6:e4:d8:fc:d3:57:86:5c:aa:
87:91:76:10:e5:29:24:ed:fc:05:f0:41:48:74:97:
1c:1d:30:00:d5:b7:2b:14:71:97:6b:70:92:f3:00:
45:ad:2b:14:65:c6:45:cf:c0:5a:e8:d7:b8:c4:30:
f5:9b:9e:20:64:97:2b:75:29:04:be:4b:fd:39:fe:
4e:c7:80:38:1f:ce:67:b6:82:6a:48:ed:95:d3:29:
e3:61:c8:10:9f:0a:ab:12:e5:4b:5c:ea:e6:0b:08:
e3:89:a0:cb:4e:da:2c:6e:8e:14:ef:f9:35:72:43:
00:3f:dd:60:a7:cc:38:8e:64:a2:ec:3d:f8:06:e7:
61:02:af:14:c2:d3:9e:93:b7:92:92:ee:d4:c7:6c:
6a:5b:19:28:d3:4e:a9:32:a5:6d:c7:95:cc:2f:0c:
e5:df:88:da:94:d6:ac:bc:47:e9:bd:32:16:d1:23:
00:86:b2:a0:10:2c:be:59:36:4b:aa:d2:49:e2:2d:
54:6c:5e:7e:e6:b9:23:69:9b:0e:0e:29:57:3f:69:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:BA:A3:AC:B6:C3:3F:8A:C0:14:8A:D0:EF:E6:AE:28:A3:CA:96
X509v3 Authority Key Identifier:
keyid:C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:98:55:85:4f:74:91:53:76:65:ce:d0:73:f5:ca:64:0a:d5:
11:56:e7:d2:51:13:a5:f5:45:03:d2:ca:c9:f2:39:0f:69:76:
2c:c2:e1:9b:b4:c7:35:95:d6:cb:f7:77:19:29:ac:92:b2:18:
73:28:4b:f2:ee:5e:ac:2b:13:b8:84:28:9c:32:3a:4c:5f:e0:
9a:38:16:3e:ea:94:09:71:76:a7:d6:45:e6:95:f2:39:79:ff:
60:dd:1d:ab:4a:ca:26:44:9c:de:40:c8:50:45:08:a4:99:fb:
ce:89:fe:18:11:8c:ce:37:07:a8:ad:4e:3f:70:02:a9:c2:49:
30:12:00:82:b1:7d:fc:a1:0d:fa:1e:ca:2b:fc:04:79:36:c0:
4c:66:f9:d0:ba:8e:87:3f:6c:4f:6f:ff:ea:36:ee:13:7b:ca:
93:b8:de:39:19:cc:aa:30:67:d5:9b:38:d5:e7:59:3b:df:2f:
67:2a:42:ef:9a:17:97:ed:38:c0:bb:33:67:95:79:13:30:b8:
4f:2f:f5:3f:7b:48:40:85:00:8c:aa:2a:0d:4f:d1:fd:10:67:
13:ab:8a:8e:8e:58:07:31:46:e7:a6:8b:76:0c:85:88:69:df:
91:f7:d7:e0:d4:ed:9f:ad:c2:3e:49:39:22:42:68:25:54:5d:
8f:19:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org