Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
File: 3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier: MZ4LD/Lwq5zYRUSoKXkeE25kV4oL5Ysu2LaT5hstRdg=
Subject key identifier: 3C:3C:F1:20:48:7D:29:C6:AB:B1:F3:96:60:4B:21:8C:A6:DA:98:C8
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 7663DEFC1FCD61211870F24311C7B11ECDFBE7A3
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:58 +0000
ROA not before: Fri 23 Feb 2024 23:35:58 +0000
ROA not after: Fri 21 Feb 2025 23:40:58 +0000
asID: 265485
IP address blocks: 168.197.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:63:de:fc:1f:cd:61:21:18:70:f2:43:11:c7:b1:1e:cd:fb:e7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:58 2024 GMT
Not After : Feb 21 23:40:58 2025 GMT
Subject: CN=3C3CF120487D29C6ABB1F396604B218CA6DA98C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:b1:6d:a7:9f:b4:92:86:12:5d:a9:84:04:
5a:8e:cb:7b:c4:96:bb:dc:fe:d8:8c:e9:95:a4:82:
a7:49:c8:9e:4a:6a:63:46:20:b6:d3:2a:2a:58:d9:
ab:f6:03:4e:e2:f9:cd:d6:4c:9e:47:58:a7:bd:cb:
4e:95:1d:fd:ce:a0:9f:e0:bd:22:53:61:c8:12:2e:
34:dd:5a:71:37:47:9b:c8:26:4c:08:6b:61:7e:74:
38:3d:32:5e:f9:80:4f:79:fc:c1:bc:47:01:48:b8:
34:4c:35:fb:cf:4c:1d:0b:5d:d6:0b:30:69:e0:8b:
7f:51:02:3c:4f:f4:2e:8a:c7:fb:c6:f5:87:b9:be:
6e:d6:a4:b8:44:d5:ee:a6:c3:27:a3:85:6f:8f:af:
23:6e:1d:99:f1:1c:ba:e9:07:0a:98:2f:79:a9:d7:
08:f2:7d:78:aa:f7:d8:89:c9:c1:e2:20:f1:eb:0d:
b1:9b:93:45:b3:77:7f:cb:10:1b:cd:ae:bf:85:4b:
ec:8c:7c:01:05:81:04:93:76:b8:16:cb:e0:c4:b4:
b3:77:15:ea:4f:de:5a:30:27:45:08:84:6c:b5:74:
ab:c6:90:ea:fc:30:58:88:12:7a:2d:52:6e:8c:6a:
10:01:5c:c3:b8:47:ca:6f:6f:cf:b3:4c:db:48:8e:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:F1:20:48:7D:29:C6:AB:B1:F3:96:60:4B:21:8C:A6:DA:98:C8
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:5d:87:67:57:4d:ab:66:e9:55:bd:7f:50:0f:9f:49:e6:b1:
38:23:82:53:ee:1e:3a:13:73:2d:66:89:08:36:e7:08:a7:aa:
f2:70:d1:a4:6d:d4:01:d0:fc:26:7f:ae:8b:e0:04:19:33:82:
ca:90:b1:3e:09:47:96:14:6c:f5:3d:a8:be:72:0e:19:68:77:
d2:ae:1f:19:ff:78:e7:68:c0:37:ed:28:5d:ef:57:2d:7e:7a:
cc:5e:58:ee:56:e2:49:f5:0c:ee:23:8f:d8:8a:74:81:7f:40:
e6:17:2b:43:5b:e3:b4:bb:d1:9a:ad:66:c2:8c:2c:0b:a9:d5:
aa:98:b7:52:01:84:b5:ba:3e:a9:c4:7b:9f:b7:13:da:ed:db:
9c:a7:c7:f3:60:b0:11:bb:fe:df:4d:c4:40:92:ab:da:8f:d8:
fe:85:28:5d:1b:2a:97:78:3a:3d:0a:44:fe:8e:0b:b6:87:d6:
00:de:bb:16:30:f6:a0:ec:22:e0:d4:d1:96:75:a4:56:92:de:
ea:b6:cb:b0:49:44:2c:30:e4:b5:25:c5:6e:20:95:3a:32:90:
cf:49:fe:50:14:07:ca:4a:80:bf:c2:10:92:4e:18:2a:c8:7e:
41:00:9d:b2:be:3b:f1:7f:ab:5e:20:81:13:d7:6c:28:ad:66:
f5:ac:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org