Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File: 3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: l/w2GArC3oWcmUjVC5RxfruFXnLR63K0NlTlekMaKsc=
Subject key identifier: 23:68:25:34:2C:0F:B5:CF:BE:97:6D:E5:34:9E:2F:54:34:33:4A:F7
Certificate issuer: /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial: 206AD1D98ED2D8A7CEC272294B933AFBB4643CAD
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time: Sun 10 Dec 2023 14:29:48 +0000
ROA not before: Sun 10 Dec 2023 14:24:48 +0000
ROA not after: Sun 08 Dec 2024 14:29:48 +0000
asID: 53062
IP address blocks: 168.90.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6a:d1:d9:8e:d2:d8:a7:ce:c2:72:29:4b:93:3a:fb:b4:64:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Validity
Not Before: Dec 10 14:24:48 2023 GMT
Not After : Dec 8 14:29:48 2024 GMT
Subject: CN=236825342C0FB5CFBE976DE5349E2F5434334AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:42:f5:c6:45:86:1a:7a:fb:9b:a3:29:98:
21:bb:9b:f7:fd:46:7a:f6:7a:d1:37:d6:26:3b:09:
ea:80:73:f1:90:9c:00:0f:50:1d:8a:7c:71:e3:91:
06:cf:f5:bd:f8:63:5f:67:6b:ad:e4:6d:e4:13:e0:
ff:93:f5:2f:45:cc:66:50:b5:f6:92:0d:7f:e4:cf:
2d:7c:c4:0c:eb:1e:95:33:40:56:48:ed:03:9a:f4:
03:0b:a1:b5:66:55:f5:ed:81:01:e7:4c:b8:05:c2:
0e:e7:b3:9d:d1:1a:26:61:7a:77:a4:cb:44:e0:6d:
84:e5:82:7c:b8:53:c0:70:0f:fd:4b:f4:35:d2:c5:
19:fe:97:c7:28:19:fd:a6:eb:f5:b1:13:4d:2d:9a:
90:f1:fc:89:3f:b4:7c:77:85:c6:fa:36:ac:d4:cf:
0c:fc:fb:e8:3d:2d:b3:17:64:95:07:56:86:bb:27:
78:82:41:ce:6f:5f:b4:31:83:65:91:92:98:b3:83:
2c:e1:6b:06:f8:24:8d:0e:66:71:e4:5b:8c:ff:52:
05:18:b1:24:1e:de:68:b8:1d:d1:0e:a1:c7:ab:9c:
07:8b:63:4a:58:18:23:e9:6b:cd:f9:49:9e:d6:a8:
d5:65:60:20:27:55:44:04:67:f1:47:af:23:07:db:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:25:34:2C:0F:B5:CF:BE:97:6D:E5:34:9E:2F:54:34:33:4A:F7
X509v3 Authority Key Identifier:
keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:36:ce:0d:c2:30:21:62:9d:84:25:27:3a:3a:e6:39:a6:bd:
35:46:9c:29:03:76:22:ac:dd:98:e5:66:1c:7b:a6:f3:24:2f:
33:23:86:b5:21:81:d9:f8:91:fc:7d:25:91:54:fa:34:c1:76:
5a:c2:7b:d4:3c:92:eb:38:96:8d:46:a6:96:ca:d9:29:5d:38:
e3:a3:d9:5f:29:78:f2:27:a6:10:4f:c1:b8:63:b5:02:5e:f9:
2e:c3:0b:4e:14:ab:19:af:ab:a2:a2:f9:18:19:8a:13:b2:a0:
71:f2:62:b7:95:38:3a:97:8e:4b:9f:88:8d:08:ea:5b:3b:00:
62:c3:27:f2:95:83:51:c5:8b:90:51:ee:87:ea:8e:74:04:75:
c9:c9:3d:83:ef:14:32:61:dc:f4:e9:c8:79:3a:6e:06:c2:5f:
ef:81:14:9e:59:db:7e:73:54:84:af:16:2c:62:fa:62:9b:d2:
0e:df:a5:34:d4:33:fd:2f:36:1e:f7:e5:03:b4:b6:33:8a:3e:
60:03:4f:5c:27:72:93:2e:f4:fd:08:ff:b5:0e:ed:8a:4d:4d:
bf:36:e2:14:b3:cb:4c:a4:ec:64:ea:f7:82:4c:4a:ea:bd:2f:
66:f1:da:8f:c1:35:31:b3:2e:3c:ee:24:d3:ff:a8:d4:58:c8:
af:67:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org