Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
File: 3230302e3134352e312e302f32342d3234203d3e203533313636.roa (raw, json)
Hash identifier: buuutp9mfvCBrxScgL2NSj+1C5JN1Lx+akzMQaIhSH0=
Subject key identifier: 23:1E:CE:8C:CA:76:6F:B6:2F:2B:47:AA:5E:9A:57:B1:49:E3:E0:7D
Certificate issuer: /CN=49614450300ED637E45BF74DC34E5F5622997AE3
Certificate serial: 6CD66B2111E7C61E2417969D3FCC13A2D5E237E2
Authority key identifier: 49:61:44:50:30:0E:D6:37:E4:5B:F7:4D:C3:4E:5F:56:22:99:7A:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49614450300ED637E45BF74DC34E5F5622997AE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
Signing time: Fri 22 Dec 2023 15:00:00 +0000
ROA not before: Fri 22 Dec 2023 14:55:00 +0000
ROA not after: Fri 20 Dec 2024 15:00:00 +0000
asID: 53166
IP address blocks: 200.145.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d6:6b:21:11:e7:c6:1e:24:17:96:9d:3f:cc:13:a2:d5:e2:37:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49614450300ED637E45BF74DC34E5F5622997AE3
Validity
Not Before: Dec 22 14:55:00 2023 GMT
Not After : Dec 20 15:00:00 2024 GMT
Subject: CN=231ECE8CCA766FB62F2B47AA5E9A57B149E3E07D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:22:49:04:53:24:5f:19:ed:48:9d:fc:cb:
55:a4:ed:1d:a6:f2:43:84:0b:b3:df:47:15:28:95:
73:13:4f:f9:14:58:64:49:91:8f:70:72:1d:4f:52:
73:3c:35:dd:84:3f:69:d5:34:2c:16:de:9f:71:d8:
51:88:a5:cb:d1:ef:f1:ee:72:b6:4d:38:4b:2b:b6:
d8:06:1c:a0:aa:9c:e9:cc:9b:b8:aa:50:46:eb:53:
04:d5:d1:4d:2c:2c:cf:59:9f:e9:87:04:be:f3:cd:
ff:4f:4f:58:48:80:7c:9d:dc:85:32:59:f0:88:84:
b8:8c:bf:f3:df:de:10:9c:f5:4f:eb:eb:c0:dc:11:
ad:c8:06:c7:11:6d:6d:75:a1:f5:f9:56:45:b8:a4:
81:ab:2f:ee:c3:02:78:3a:7b:03:de:d5:af:f0:b3:
2a:db:23:a8:92:0e:75:d7:e7:b2:18:08:98:a8:f2:
2b:6c:23:03:a8:19:e3:de:33:08:3b:f8:af:ef:17:
a3:11:8c:3b:83:e7:08:6f:a4:fe:bb:7b:d6:2e:4c:
b0:77:5d:7d:af:9e:9b:40:a1:04:91:96:35:f2:9e:
62:af:4c:05:eb:de:9c:7b:52:e6:5b:01:05:e8:25:
25:93:74:a3:d6:43:8b:13:31:fe:f2:73:32:e3:98:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:CE:8C:CA:76:6F:B6:2F:2B:47:AA:5E:9A:57:B1:49:E3:E0:7D
X509v3 Authority Key Identifier:
keyid:49:61:44:50:30:0E:D6:37:E4:5B:F7:4D:C3:4E:5F:56:22:99:7A:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/49614450300ED637E45BF74DC34E5F5622997AE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49614450300ED637E45BF74DC34E5F5622997AE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/0/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.145.1.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4f:37:a1:1a:3c:ba:a6:6a:37:b7:ff:73:96:ce:c8:64:90:
7c:7c:72:a0:a8:31:3b:29:56:b8:f9:c3:16:39:8d:5b:46:5e:
dc:f3:d4:8b:a6:16:3d:fd:2c:63:51:cf:03:5e:45:6c:c1:7b:
4e:79:7d:7b:18:05:c5:7d:fc:ba:6b:39:05:ec:bc:e8:8a:45:
83:e7:11:d7:40:9d:82:35:79:14:17:c6:dd:4d:4b:ea:85:45:
a0:e9:61:31:5a:44:4c:c8:56:ea:ef:93:c8:ae:f0:4c:c5:ca:
31:49:ef:68:5d:37:7b:4b:f8:b8:dc:dc:38:0f:50:21:45:cf:
0d:ff:f0:9b:f2:b0:c4:41:a6:94:1d:78:60:4c:a2:89:0f:20:
26:d6:d4:37:54:4d:e9:c2:ea:7a:ae:ab:4f:f3:8f:30:8b:a3:
fa:f9:3f:bc:85:b1:37:04:6d:d4:d3:77:d2:8e:45:ab:96:06:
49:e1:63:08:d9:5b:d3:ec:55:46:b9:b9:38:1a:6e:00:7d:f5:
9f:3d:77:41:43:e4:85:33:bd:90:1a:a6:d4:61:9d:90:e3:83:
9e:fb:9f:75:73:fc:4b:bf:fd:d0:78:6f:6e:5b:75:70:08:da:
1d:0c:c4:b5:0c:6f:27:43:55:ab:06:77:74:8d:21:12:0b:69:
d4:94:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org