Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
File: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (raw, json)
Hash identifier: aDhSYj4oTztHgTm38LMyptPim87FylmdwPIqPntJwwY=
Subject key identifier: C5:AF:25:18:14:91:28:49:79:AF:B9:63:8C:BD:33:4D:BA:42:60:6E
Certificate issuer: /CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
Certificate serial: 197E07B1F056B7DA4D809D636DC82756D6C2E750
Authority key identifier: 02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
Signing time: Fri 01 Mar 2024 01:57:52 +0000
ROA not before: Fri 01 Mar 2024 01:52:52 +0000
ROA not after: Fri 28 Feb 2025 01:57:52 +0000
asID: 264042
IP address blocks: 143.137.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:7e:07:b1:f0:56:b7:da:4d:80:9d:63:6d:c8:27:56:d6:c2:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
Validity
Not Before: Mar 1 01:52:52 2024 GMT
Not After : Feb 28 01:57:52 2025 GMT
Subject: CN=C5AF25181491284979AFB9638CBD334DBA42606E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:d5:c0:7d:97:68:c3:93:21:93:87:da:e4:
89:ff:cf:84:22:61:b1:df:7f:e2:06:17:f1:4e:5b:
7c:ec:94:7c:d7:9b:59:98:40:fc:8f:a1:b8:3c:fe:
9c:4f:45:5a:1b:8f:9e:c2:5c:b4:26:70:d8:b8:4e:
cf:9c:17:f3:f2:94:f8:a3:2d:bb:20:06:c1:f7:dd:
be:69:4a:f9:cb:71:2f:09:c0:33:fb:8f:1b:43:2a:
dc:4e:54:e8:45:fc:31:85:f6:10:db:eb:6d:f0:6d:
6e:bf:44:a9:5a:78:f5:b0:80:12:c1:77:57:1f:74:
a2:d0:dc:d4:e9:78:8c:06:cb:b6:c3:cd:c8:db:8e:
69:e6:8a:3f:2a:32:ff:8f:3d:d1:68:62:f6:d6:9a:
0d:c7:75:31:d0:76:e0:f4:bb:a7:ef:9a:b3:57:ff:
3c:a7:69:0b:95:ab:ce:45:c5:6e:f4:27:8c:6d:f6:
83:ef:53:a4:64:3f:bb:1b:8d:d2:b5:1f:7b:56:b9:
03:53:3b:6c:7a:04:29:e5:be:e8:36:9a:e5:96:d5:
96:1c:b3:22:98:22:3a:de:cc:b4:4b:c1:18:3f:f1:
28:d7:5d:88:93:7b:e5:3f:25:68:b7:d8:1c:e2:6f:
f8:a9:98:c1:ca:9b:d5:e1:49:37:d6:90:d1:68:f1:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AF:25:18:14:91:28:49:79:AF:B9:63:8C:BD:33:4D:BA:42:60:6E
X509v3 Authority Key Identifier:
keyid:02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d5:f3:cf:25:ff:3a:95:70:c3:fe:8d:a1:61:3f:96:86:e9:
74:0b:31:27:99:8e:36:0b:b5:f5:2d:44:ad:a4:66:d7:c8:d9:
9f:62:29:2a:3c:84:d9:74:20:34:81:9a:1b:aa:38:e8:37:2f:
1e:9a:10:75:cf:46:e5:eb:1c:c6:cc:d7:5c:ef:ba:d3:22:d0:
ea:81:5e:7e:11:00:36:ea:4f:12:06:be:c5:4a:98:b8:86:b4:
7d:26:00:7e:0e:46:32:ac:f4:80:fa:fa:6d:7d:a6:66:b2:27:
d8:c6:e8:2a:52:4e:ae:51:db:f5:bd:b9:b4:9c:cd:f0:fb:b2:
1e:44:2b:6b:7a:6b:c0:ff:bd:4d:df:50:aa:81:5d:a5:5f:65:
59:cf:77:08:f1:97:3a:1f:d7:69:15:b4:50:c0:48:3e:63:73:
cf:2d:56:8a:32:1b:89:82:bb:7c:1d:c1:c9:66:0a:1d:3f:b4:
78:ba:b4:37:01:58:2a:e1:4f:01:ff:ae:0f:26:92:7d:ef:57:
99:f1:a2:82:66:d6:e3:b2:f5:ef:9b:33:ea:72:82:78:51:97:
b1:db:06:2d:3b:9d:30:3e:c8:e8:0d:67:f8:4a:8d:0c:12:ff:
a7:a9:08:18:c1:02:de:13:34:ec:3e:62:c6:aa:f0:66:86:9a:
7f:a5:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org