Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa
File: 3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier: PpY+BCVjTxis1d6h4+XwqCBuw0Orzu7QbPSwQYFSKTk=
Subject key identifier: 61:AF:77:E0:36:F2:30:01:49:61:FF:C8:27:50:57:5B:5D:44:52:CE
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 62634ACB7D0BDB0ED13A88446D4BD1DEC221DAB7
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:04 +0000
ROA not before: Fri 22 Dec 2023 20:20:04 +0000
ROA not after: Fri 20 Dec 2024 20:25:04 +0000
asID: 263073
IP address blocks: 138.219.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:63:4a:cb:7d:0b:db:0e:d1:3a:88:44:6d:4b:d1:de:c2:21:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:04 2023 GMT
Not After : Dec 20 20:25:04 2024 GMT
Subject: CN=61AF77E036F230014961FFC82750575B5D4452CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:9c:8d:84:3b:24:22:a4:a3:3a:a5:6c:5a:
23:d5:ff:82:fd:ee:e6:d0:22:e7:d0:96:e5:76:3b:
63:1d:34:f2:26:24:12:e5:23:48:9c:df:8a:59:d7:
cc:43:7a:f3:6e:6f:ed:38:6c:5c:79:cd:05:86:0a:
92:c6:02:77:e8:74:69:92:c5:05:d5:56:3d:f7:a9:
43:c3:68:07:51:1b:65:c8:ad:b7:25:43:d5:d7:26:
d7:84:08:98:8e:ac:5c:cd:72:27:6d:3e:e6:42:69:
0f:81:d6:9f:a8:71:a5:70:1b:a7:76:40:51:16:f8:
c9:34:70:52:d3:bf:b2:e8:a2:85:fa:f2:40:ca:ce:
c3:e5:6e:84:3d:70:79:15:61:22:fd:75:14:1a:cb:
84:63:bf:88:3c:c6:9d:9c:c5:f8:89:34:1e:b8:d7:
37:e8:43:14:8b:7f:4f:2e:41:1e:98:66:aa:6f:1a:
56:53:97:29:f0:db:2a:14:d6:16:77:62:73:cd:6c:
8e:2b:8f:ee:a0:2b:60:ae:06:8c:1c:22:93:87:d5:
5b:5b:76:43:c6:c8:72:c6:9b:96:0a:8c:2f:92:d7:
9d:92:84:6b:84:5f:66:86:3e:3b:3b:10:ef:c5:13:
a8:a9:45:40:6d:78:13:be:72:ef:5c:90:08:69:b6:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:77:E0:36:F2:30:01:49:61:FF:C8:27:50:57:5B:5D:44:52:CE
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:33:b1:f3:43:07:e5:9e:39:fa:55:98:e9:2d:ba:5a:93:3a:
f6:b5:3e:51:82:73:a9:82:0d:34:04:09:f6:11:4e:f8:10:b8:
72:f0:b5:80:d0:f9:da:65:83:8c:94:f2:2f:09:ef:a4:be:9f:
8d:e4:55:1f:f7:26:76:15:ad:c9:11:be:5a:c6:a2:26:90:85:
7d:be:19:24:5c:da:d5:ec:ba:bb:62:53:fd:5a:8d:0b:dc:b1:
75:06:5c:d7:56:0f:67:1d:24:87:ec:0a:96:3f:85:56:bb:eb:
f2:64:df:3d:6e:51:ad:1e:3e:f1:1f:9c:df:6d:c1:c4:c9:46:
1a:f0:bb:e3:0d:08:df:08:36:ac:85:3c:c5:7d:17:7f:68:52:
eb:46:9d:7c:4b:0d:ac:f2:bc:4a:4b:ba:cf:36:6d:a4:41:2f:
07:9c:82:8c:73:66:f6:7f:3a:82:67:de:69:fb:dc:bd:0f:c2:
56:25:1f:9c:e0:60:85:cc:ed:09:58:e9:bb:ec:dc:ea:32:c3:
31:ef:b2:1d:c3:b6:46:f8:b9:eb:8d:c4:c9:a8:2c:51:8c:44:
12:21:a8:c7:cc:fe:82:ce:8e:4b:86:96:51:c0:db:20:80:56:
86:48:a2:dd:01:b2:3a:77:04:a6:d3:bb:ac:30:35:87:1d:93:
d8:22:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org