Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
File: 3136382e3139352e36342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: mtcnE4YhYrAIAUOeaoV+rAIogNJPqzLvy2upSzyhvhY=
Subject key identifier: D2:61:12:71:1E:25:E4:66:79:40:11:DF:B7:5F:E0:D7:29:EB:25:D9
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 3B8DCA5D0C1C4CA07A1325DE4EF060B04E9CFA61
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:40:20 +0000
ROA not before: Wed 10 Apr 2024 12:35:20 +0000
ROA not after: Wed 09 Apr 2025 12:40:20 +0000
asID: 28201
IP address blocks: 168.195.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8d:ca:5d:0c:1c:4c:a0:7a:13:25:de:4e:f0:60:b0:4e:9c:fa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:35:20 2024 GMT
Not After : Apr 9 12:40:20 2025 GMT
Subject: CN=D26112711E25E466794011DFB75FE0D729EB25D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:e4:ae:44:b5:b1:16:64:10:87:e2:94:0f:
27:d0:ef:ee:57:bf:0c:f4:ee:d5:47:9e:11:a0:b4:
c2:76:b6:29:47:dd:90:4f:1e:eb:25:e1:a9:ea:85:
7e:3b:5d:ae:64:b9:0d:8c:13:98:12:72:3b:b3:a0:
88:50:05:c1:aa:24:2b:48:d7:75:ab:2b:e3:cf:65:
e4:68:e9:7e:c5:0a:f4:e8:7b:4d:c2:f1:68:ce:d7:
65:2b:3a:4f:a1:96:14:60:ad:27:bd:2c:a9:a6:8c:
4b:3e:d7:03:dc:8c:7c:a4:7f:92:46:9b:e7:0b:1a:
33:3a:b3:ef:18:e0:9f:f6:87:db:30:dd:e0:09:6b:
e7:56:54:6b:27:27:50:d1:62:63:bf:fe:1a:93:ab:
3a:33:cc:c0:3c:76:7b:bb:c3:8c:2f:a7:1e:f5:6d:
f7:d3:c4:04:10:45:ff:e6:ec:3f:f0:47:bd:ab:85:
51:7d:6f:6f:a1:e0:da:9f:62:e3:4f:1a:0b:d9:ec:
18:f0:6a:5d:b3:cd:f6:f5:e1:2e:0b:44:08:f6:d8:
71:c2:51:d9:93:92:2a:d0:79:1c:81:19:c0:30:bb:
cc:ba:2d:09:37:d0:87:c3:ca:a3:d8:09:eb:6e:4d:
a1:d4:7d:88:af:c8:b7:1c:3c:14:8b:4b:5b:5d:bb:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:12:71:1E:25:E4:66:79:40:11:DF:B7:5F:E0:D7:29:EB:25:D9
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.64.0/22
Signature Algorithm: sha256WithRSAEncryption
87:16:31:18:ae:21:99:c3:ec:cd:c8:21:c1:e0:ba:ae:54:4c:
81:e8:9e:6b:e2:e1:5d:84:ab:e3:13:c1:0c:a8:3a:e8:c8:4c:
db:70:88:9c:f6:2c:0e:f2:8b:c6:04:94:d8:92:f0:2e:53:fe:
82:c3:e1:81:1b:1a:c4:74:d9:8b:24:e4:4f:2e:8c:04:ba:c9:
22:31:f1:ad:67:7b:f9:66:20:b0:81:da:2a:6b:4d:99:80:68:
1c:1b:b1:67:fd:19:ab:22:8b:56:43:5b:9c:19:a2:1e:59:63:
a4:ce:3f:dd:12:bb:11:37:d4:be:70:f3:bb:bf:68:30:ac:54:
91:06:6c:0a:5d:db:68:b1:85:77:49:c1:b7:4c:2f:d3:92:11:
1e:f5:a4:d4:f3:87:15:61:fe:29:28:1d:6c:b1:2b:0d:64:94:
45:0a:29:27:dc:ea:65:43:2e:a9:9b:64:a9:76:a8:f6:69:2d:
73:93:0f:29:9d:a0:47:f5:ef:50:cf:a4:84:82:37:28:c3:5a:
57:9a:b8:6c:b0:60:3c:47:78:e5:e8:4c:ca:ed:6c:98:c5:f5:
a3:ae:71:92:4e:83:21:94:08:73:cc:20:95:29:12:ab:c0:84:
0b:62:da:a5:36:77:84:31:b6:aa:9e:2e:11:cc:50:63:83:e0:
1a:49:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org