Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/3230312e33332e3134342e302f32302d3234203d3e203131393933.roa
File: 3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (raw, json)
Hash identifier: GRNFb5vRytSdwfKSckLH1zVLYCwkZXc4uas7PpUVDEU=
Subject key identifier: DB:25:75:D9:4F:F9:9D:C7:F0:A7:1F:F6:C4:AE:95:D5:2D:7D:C0:8A
Certificate issuer: /CN=D9E7A0210528723D646525CFCB73A4EC0737CC58
Certificate serial: 3DBA81E594BDCC887149087081FE6E46D63152A1
Authority key identifier: D9:E7:A0:21:05:28:72:3D:64:65:25:CF:CB:73:A4:EC:07:37:CC:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E7A0210528723D646525CFCB73A4EC0737CC58.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/3230312e33332e3134342e302f32302d3234203d3e203131393933.roa
Signing time: Sat 24 Feb 2024 02:29:52 +0000
ROA not before: Sat 24 Feb 2024 02:24:52 +0000
ROA not after: Sat 22 Feb 2025 02:29:52 +0000
asID: 11993
IP address blocks: 201.33.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ba:81:e5:94:bd:cc:88:71:49:08:70:81:fe:6e:46:d6:31:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9E7A0210528723D646525CFCB73A4EC0737CC58
Validity
Not Before: Feb 24 02:24:52 2024 GMT
Not After : Feb 22 02:29:52 2025 GMT
Subject: CN=DB2575D94FF99DC7F0A71FF6C4AE95D52D7DC08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:de:ef:35:29:0c:be:2b:19:72:ac:f0:f0:
c6:89:7e:d6:94:53:88:9b:62:fc:f3:58:cb:69:fd:
31:27:9d:5d:48:da:62:be:55:95:9e:8e:6a:01:97:
f8:bd:fe:45:76:a5:10:71:7c:8f:e6:5b:e7:20:a5:
07:14:de:d6:c0:ad:a1:c7:39:04:f4:39:2d:b8:51:
c6:12:3d:b2:f6:7c:fb:20:f9:91:f7:4e:13:9f:b2:
8e:95:7d:0c:31:6d:6d:15:09:e8:ef:fb:14:75:72:
1b:e4:83:48:a2:43:c8:74:4b:c1:c2:cc:bf:69:fa:
39:cc:7b:58:1b:7d:74:e0:c2:c5:c1:f2:1a:c7:09:
89:64:7e:5a:17:96:aa:4d:5d:50:6f:6f:12:79:ff:
f7:de:e7:6d:82:22:3f:af:ae:65:38:7d:34:b6:d7:
4b:8d:f9:8d:1d:51:26:f7:c3:92:39:ca:b7:4b:c4:
15:14:dd:78:b0:57:50:70:99:76:3c:75:44:dd:eb:
d0:fc:94:36:84:dc:b0:93:0c:d4:26:99:7c:77:68:
ab:dc:e4:46:c9:31:2f:9c:58:36:19:80:47:f4:52:
06:cf:70:59:c6:d5:6f:2c:1a:fe:f1:f9:1a:54:eb:
fd:45:65:5a:9f:13:fb:6b:8c:2f:b4:72:ba:55:99:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:75:D9:4F:F9:9D:C7:F0:A7:1F:F6:C4:AE:95:D5:2D:7D:C0:8A
X509v3 Authority Key Identifier:
keyid:D9:E7:A0:21:05:28:72:3D:64:65:25:CF:CB:73:A4:EC:07:37:CC:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/D9E7A0210528723D646525CFCB73A4EC0737CC58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9E7A0210528723D646525CFCB73A4EC0737CC58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/1/3230312e33332e3134342e302f32302d3234203d3e203131393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.33.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:d4:7e:ae:3d:0a:33:7a:6b:ad:17:02:be:e2:57:b9:60:f6:
53:e0:9f:df:ba:18:98:16:24:1a:44:4b:e6:58:9f:6c:ce:72:
0b:d3:12:11:6f:53:80:f2:d1:3e:9f:49:01:e0:10:9b:29:4f:
fe:c3:1d:f0:5a:d5:5d:29:d3:32:ba:05:65:16:61:42:9f:df:
e0:38:67:9a:c7:b0:70:b0:e0:3d:c1:a8:37:fa:0b:70:22:9e:
37:d1:53:e0:3d:8f:d1:a4:f7:08:b5:39:c3:e2:09:78:40:ea:
7b:91:53:d1:30:7c:08:14:c3:19:8c:70:7d:ba:0d:2e:65:8f:
36:09:97:7b:60:12:0a:8a:16:e5:06:72:ce:96:29:00:e7:b8:
f3:7c:fd:4c:8f:99:e4:51:4b:df:20:ab:be:3f:15:f7:5b:39:
a0:a0:e6:07:3f:7c:a4:30:e2:eb:78:0c:b1:22:12:54:d1:e1:
79:e9:4d:fd:59:f1:4d:0a:3b:e6:4a:15:d7:e3:89:17:6b:37:
0f:c9:39:c7:f8:54:d8:85:c0:bb:82:5b:fb:e3:7f:56:70:92:
09:db:a7:9c:dd:64:a7:5c:88:45:12:4d:7b:4d:8e:bf:42:52:
2a:93:53:bb:ed:b1:15:28:d7:4a:5e:7f:58:7f:17:68:37:03:
55:da:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org