Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
File: 3136312e3134382e302e302f31362d3234203d3e203130393534.roa (raw, json)
Hash identifier: OxXLxzwaz999Yx1brYRGEXK5ArsxIzJt5AtAQkxXeE0=
Subject key identifier: 3D:0B:53:95:83:6B:44:17:7B:9B:28:33:AC:5A:01:33:3D:0A:47:04
Certificate issuer: /CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
Certificate serial: 65542503A7D17BA9ACF2D3A6BEEEAE4F6A056921
Authority key identifier: 7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
Signing time: Thu 22 Jun 2023 18:16:03 +0000
ROA not before: Thu 22 Jun 2023 18:11:03 +0000
ROA not after: Thu 20 Jun 2024 18:16:03 +0000
asID: 10954
IP address blocks: 161.148.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:54:25:03:a7:d1:7b:a9:ac:f2:d3:a6:be:ee:ae:4f:6a:05:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
Validity
Not Before: Jun 22 18:11:03 2023 GMT
Not After : Jun 20 18:16:03 2024 GMT
Subject: CN=3D0B5395836B44177B9B2833AC5A01333D0A4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:49:48:0d:af:36:1e:2f:19:3f:ad:f8:ee:
51:5d:32:4e:e9:e8:d7:24:a6:66:4e:6e:fb:63:14:
a5:c1:70:21:19:d7:72:32:6e:10:74:6d:6b:ab:13:
0c:d8:68:5d:b6:4e:c4:85:98:6b:50:3a:36:67:9c:
50:6b:77:01:40:ea:ea:c8:49:dc:7e:4f:ec:e3:3e:
b4:4e:0c:e0:32:03:80:e5:95:4c:d3:65:a4:07:65:
e6:e9:c3:dd:bd:91:40:5d:b4:bb:83:63:23:5e:5b:
bb:cd:b0:0b:4d:8e:9a:92:e3:73:7a:43:e1:a9:14:
04:fd:a1:46:61:bf:56:3c:80:96:2b:ac:70:e8:9c:
56:0e:8d:e5:01:b7:9a:25:cc:cf:11:3b:14:db:55:
76:cf:5a:3b:aa:06:fb:66:b2:73:8e:44:64:8c:f0:
d6:89:59:94:33:0b:36:fa:a9:49:25:d8:57:2b:17:
02:33:39:4c:2f:d9:c3:ee:2f:0b:c2:ce:37:f5:bf:
19:a4:cd:39:e8:85:5f:45:aa:2e:47:eb:7a:68:e6:
d9:ac:9e:94:aa:0d:9f:00:f5:92:bc:f1:7d:a7:a6:
23:60:48:90:99:39:66:c1:f8:cc:fb:66:4d:27:ab:
ec:61:62:05:29:c8:13:04:f8:87:a6:52:48:3f:50:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:53:95:83:6B:44:17:7B:9B:28:33:AC:5A:01:33:3D:0A:47:04
X509v3 Authority Key Identifier:
keyid:7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.148.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:13:db:2f:91:1b:5c:73:af:cf:55:f8:7d:bf:89:51:be:ba:
91:88:46:f1:e5:f2:0f:f5:11:b2:36:56:5d:12:4e:4c:bf:33:
ab:62:e9:00:08:1b:12:9d:1c:a1:7c:95:c9:84:df:c6:f7:ac:
2f:64:d4:68:0c:97:ed:e8:df:11:9c:29:d1:f9:06:fb:6a:99:
8b:80:ea:3d:9c:e5:70:27:94:23:9e:fd:5e:34:c4:a8:ca:2b:
79:bb:24:aa:37:fe:0d:7e:1d:6f:26:65:66:12:06:ec:ba:07:
28:7e:9b:00:6c:e7:67:8f:d6:0a:e6:b6:4c:a4:18:4e:3b:46:
37:85:38:38:a1:68:ca:01:b7:7f:2f:77:8c:03:4c:ba:41:5d:
58:75:c3:c9:7c:57:5c:7f:4b:e6:8d:9c:6f:e2:b7:51:d2:84:
a0:5b:12:c3:79:bf:cd:03:64:25:bb:89:0e:3b:af:1e:eb:8c:
c6:66:43:5f:b3:57:0e:e0:3a:ce:c9:65:15:05:d9:f6:95:45:
27:3e:c9:4b:74:4b:d5:c8:91:de:eb:fb:73:0c:a5:93:cf:fc:
c8:0d:ad:46:c5:c0:4e:80:e1:16:31:7d:e1:dc:e5:01:91:5a:
64:5e:af:0c:cf:64:2f:12:8d:8f:ed:98:c6:26:67:27:a9:ce:
6a:b1:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org