Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa
File: 3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier: 5NjxXyIfZ0h4m4+mUQRQZGMM1T4GctqV7T/S1e877ok=
Subject key identifier: 53:A8:95:1C:D9:8F:A2:BF:0D:F6:B3:8B:DA:8C:07:F4:2B:C7:3C:B8
Certificate issuer: /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial: 4848C556789D64E0F50D8D0BC8B0624015CD9C6E
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa
Signing time: Wed 22 Nov 2023 22:00:00 +0000
ROA not before: Wed 22 Nov 2023 21:55:00 +0000
ROA not after: Wed 20 Nov 2024 22:00:00 +0000
asID: 52604
IP address blocks: 201.148.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:48:c5:56:78:9d:64:e0:f5:0d:8d:0b:c8:b0:62:40:15:cd:9c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Validity
Not Before: Nov 22 21:55:00 2023 GMT
Not After : Nov 20 22:00:00 2024 GMT
Subject: CN=53A8951CD98FA2BF0DF6B38BDA8C07F42BC73CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:39:93:c1:3a:2a:74:43:0d:99:c1:b2:d7:
7f:3a:68:22:35:6a:e4:a5:63:82:d7:e4:77:10:fa:
76:8b:8b:dd:64:a6:3d:44:6c:4e:ab:98:9d:fb:94:
af:7f:19:ee:b0:41:3d:7f:f8:3f:aa:4c:d2:f4:c7:
e7:5a:a1:85:60:a5:16:c9:e1:70:39:35:eb:46:87:
59:71:53:92:ee:17:55:2c:1e:62:3b:34:9a:64:15:
68:66:11:6d:6f:0f:63:ac:fe:ab:76:12:c7:9e:19:
a1:6b:94:e6:6d:73:5c:10:5f:0c:8f:ed:e3:d7:d6:
6b:59:a0:0a:f2:20:0c:5f:20:14:20:4b:cc:30:a6:
a1:b4:78:6f:f9:bb:77:e5:18:bd:40:df:5c:8c:57:
0c:dc:35:c7:3c:df:8a:27:36:9a:ae:e4:d5:58:49:
aa:e7:fd:05:b0:55:b1:91:26:c4:67:b6:10:28:94:
15:97:2b:d9:4a:0d:fe:f8:5e:9c:21:21:ab:3c:18:
6e:28:a3:d0:37:b0:45:b7:cd:70:53:2a:1c:1a:fc:
96:01:6e:64:d6:e7:f8:fd:b4:ec:cc:a5:20:06:e6:
cf:56:38:8f:88:6d:10:50:ba:e3:96:91:a7:58:39:
d6:ee:e6:d9:23:b2:27:0b:ac:c3:a4:e4:36:e0:f0:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:95:1C:D9:8F:A2:BF:0D:F6:B3:8B:DA:8C:07:F4:2B:C7:3C:B8
X509v3 Authority Key Identifier:
keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3230312e3134382e3130382e302f32322d3234203d3e203532363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.148.108.0/22
Signature Algorithm: sha256WithRSAEncryption
95:6e:be:81:15:2a:05:5b:c1:d2:3c:8d:da:4e:a7:1e:19:3b:
c7:b4:00:b1:3c:d5:53:18:c6:cb:21:c2:2e:a5:bf:c8:28:f5:
99:74:a6:cc:f4:21:fe:25:6f:07:41:59:e5:c3:41:ff:e9:93:
83:9d:bf:01:3f:c2:a9:72:df:c4:18:63:0d:b5:b6:06:4e:75:
73:3b:43:0c:a0:bf:e9:58:4a:86:cc:ce:31:81:cb:d2:12:dd:
cc:46:d0:5d:e4:31:cf:bb:02:c2:09:5d:fc:7a:22:a8:dd:a4:
f4:e9:7f:3d:a5:17:cb:fc:ef:8d:6c:0d:d9:08:9c:02:eb:b1:
7a:ab:d2:e1:66:19:f1:65:77:1d:d4:81:e6:99:47:17:4f:78:
7f:94:f8:fd:54:45:c7:36:1a:42:58:b7:a3:69:61:6d:04:b1:
68:e7:b9:be:31:cc:74:09:d0:f3:03:f1:f4:f0:cc:a5:c7:fa:
c2:ee:9e:41:76:04:c4:10:15:63:0a:04:4c:1f:1d:30:90:1c:
7f:49:be:f0:6c:9c:4a:2c:e4:ed:83:d3:df:3b:b4:bb:20:f4:
e2:21:47:8c:1c:ca:f7:fe:e4:ed:ca:e9:00:ec:2a:95:81:f6:
3c:64:24:96:cc:d4:8f:00:86:b5:4c:6c:1a:f0:d0:c0:37:89:
9e:41:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org