Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3232203d3e20323633303733.roa
File: 3133382e302e3139362e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier: PegnX+urHyGYIyWJY8Doygk1cRVv181mhDbySUkT0XA=
Subject key identifier: 9A:14:C1:E7:BD:D8:2B:24:9B:82:9B:57:29:90:B8:C0:61:DB:05:8D
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 2BAD0E4E8A440FBAD1037487241F9301DC343ACE
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3232203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:12 +0000
ROA not before: Fri 22 Dec 2023 20:20:12 +0000
ROA not after: Fri 20 Dec 2024 20:25:12 +0000
asID: 263073
IP address blocks: 138.0.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ad:0e:4e:8a:44:0f:ba:d1:03:74:87:24:1f:93:01:dc:34:3a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:12 2023 GMT
Not After : Dec 20 20:25:12 2024 GMT
Subject: CN=9A14C1E7BDD82B249B829B572990B8C061DB058D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:c3:83:60:af:46:79:d8:38:f6:5d:7f:75:
0a:87:be:0e:08:f5:19:1d:29:d5:77:35:47:75:25:
9a:a7:d0:65:cb:c7:9e:42:6c:1b:10:f0:57:a2:91:
0f:d4:08:71:d6:01:e1:06:6a:7a:2b:24:4b:e5:b4:
b9:80:4b:ec:cc:b9:5e:98:0a:71:eb:9a:47:41:93:
59:6d:9d:7f:21:a5:79:2e:e1:b4:b4:02:a9:34:29:
8a:c5:84:65:5e:79:ec:5c:e5:76:0c:31:60:4e:fe:
2e:a7:37:73:ea:3b:3a:8a:6d:3d:9b:d0:62:20:a3:
e6:ff:98:b6:d1:c5:6b:cf:66:71:51:2e:93:71:5d:
0d:9c:72:b9:bb:aa:d5:5e:ec:aa:cb:57:34:e3:89:
60:82:ed:e7:48:18:6e:a0:26:67:a0:4d:ba:81:e1:
35:ea:1d:4f:c0:a2:98:06:24:3e:b8:f8:74:cf:25:
62:21:79:15:d5:35:02:14:c1:ff:3d:81:99:16:f1:
5d:5b:46:44:82:63:fd:41:0c:83:97:9e:b9:26:2b:
9b:8e:f0:c0:a5:1e:a9:f2:96:6f:6e:0d:ee:18:1c:
8e:c4:df:63:00:1a:80:c4:06:b8:56:6e:03:d7:e4:
98:37:05:26:61:f1:41:dc:ce:49:68:27:82:51:cb:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:C1:E7:BD:D8:2B:24:9B:82:9B:57:29:90:B8:C0:61:DB:05:8D
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3232203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.196.0/22
Signature Algorithm: sha256WithRSAEncryption
91:1b:09:4a:b7:56:d9:17:e8:cb:5b:42:39:fa:ba:07:26:c0:
7b:13:be:be:a4:8e:df:68:40:4e:63:b5:61:58:95:b9:d9:2d:
bb:b4:cb:c9:c3:bd:3f:4f:5c:2c:f9:19:91:bb:18:60:95:d4:
34:20:1a:a7:77:e9:4e:ef:f9:df:fa:2b:96:9e:5d:62:ab:4d:
ae:78:8c:06:98:97:c5:96:ee:74:1b:f2:09:10:88:db:65:ac:
5c:94:45:f0:cb:f2:b2:6f:b6:83:c0:c4:38:48:23:22:18:f1:
ba:7b:21:0a:2d:d6:47:5e:c8:7e:15:1a:4c:f0:a2:4e:68:69:
e8:4a:00:9d:dd:0f:5c:c9:a1:3b:f7:b4:17:16:56:c0:30:65:
a3:b3:91:79:52:ec:3e:14:2f:b9:2e:1f:75:64:48:a7:9d:22:
d0:97:d4:2c:08:19:4f:4a:30:90:36:a7:20:72:69:3f:5d:b1:
74:e9:e1:76:47:3f:f7:ab:1b:41:34:07:0f:fa:e9:23:1d:87:
04:27:8c:36:eb:c1:43:be:e7:d3:b9:b4:12:83:ae:18:fb:03:
52:23:2e:d0:72:55:5e:86:de:a7:a8:cb:b5:61:5e:6e:c2:e8:
6f:2a:e2:29:e5:e0:92:f7:84:22:ba:e4:6d:9d:03:76:9b:e0:
d2:dd:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org