Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/3133382e35392e3134342e302f32322d3234203d3e203533313037.roa
File: 3133382e35392e3134342e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier: eA+t6dnh+1otsd7VWSQhB24YQ3dWEtoM0OxNZrH+GRA=
Subject key identifier: 9D:54:28:47:D0:68:36:05:2C:73:3D:1C:2A:F0:6E:85:22:63:17:55
Certificate issuer: /CN=9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C
Certificate serial: 28B638F1759C5A0BA2D6DB901149014DACC852CF
Authority key identifier: 9F:2D:D0:DD:59:31:65:9D:4F:0F:20:C7:A3:EA:E5:B5:7F:C1:E7:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/3133382e35392e3134342e302f32322d3234203d3e203533313037.roa
Signing time: Wed 10 Jan 2024 12:54:12 +0000
ROA not before: Wed 10 Jan 2024 12:49:12 +0000
ROA not after: Wed 08 Jan 2025 12:54:12 +0000
asID: 53107
IP address blocks: 138.59.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b6:38:f1:75:9c:5a:0b:a2:d6:db:90:11:49:01:4d:ac:c8:52:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C
Validity
Not Before: Jan 10 12:49:12 2024 GMT
Not After : Jan 8 12:54:12 2025 GMT
Subject: CN=9D542847D06836052C733D1C2AF06E8522631755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:b3:ce:ca:ca:b8:b4:b2:f0:c8:9a:c5:69:
9b:3a:0e:7c:ca:fc:67:e5:03:fe:89:71:bb:21:97:
2a:00:9d:83:d5:3e:3d:5a:ca:e3:a7:f1:2c:45:55:
2d:0c:06:4c:91:bd:bc:a1:62:fb:06:f7:f1:8f:cd:
33:44:2e:72:c8:04:30:fc:21:49:cf:10:31:2b:69:
f3:d8:be:0d:f7:80:fa:22:5a:c6:a3:5d:08:a2:28:
e7:fb:a2:63:70:b1:2f:a6:43:c8:58:b2:2c:1a:9a:
25:64:c9:c1:5c:93:68:41:05:8f:5e:47:15:2a:07:
c5:e0:61:35:98:d3:55:8c:95:75:62:3b:80:21:a4:
79:d1:6d:f4:21:66:45:80:75:1f:87:99:db:fa:50:
72:93:29:fa:f9:94:0d:fc:b2:f8:91:06:41:a5:f2:
13:d6:d4:15:30:38:c1:53:22:a9:d7:0b:fb:48:56:
67:a3:5f:17:33:2c:20:8e:e0:9f:75:f8:8b:d9:f1:
9c:46:25:dc:86:1a:60:b7:64:5d:d4:fa:66:55:02:
ae:06:ee:39:44:1e:6e:38:ed:49:53:0e:cd:0b:0f:
69:d8:f5:0f:f9:ad:3a:08:25:c3:ef:99:8f:fb:1c:
02:28:d7:65:8e:23:91:1e:76:b7:43:28:14:5a:cc:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:28:47:D0:68:36:05:2C:73:3D:1C:2A:F0:6E:85:22:63:17:55
X509v3 Authority Key Identifier:
keyid:9F:2D:D0:DD:59:31:65:9D:4F:0F:20:C7:A3:EA:E5:B5:7F:C1:E7:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F2DD0DD5931659D4F0F20C7A3EAE5B57FC1E74C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/2/3133382e35392e3134342e302f32322d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.144.0/22
Signature Algorithm: sha256WithRSAEncryption
83:44:27:30:b6:e3:74:ab:99:3a:59:9b:17:e4:40:2d:0a:3a:
8c:8f:4e:69:30:d1:5f:29:b1:81:6a:c8:aa:a7:ae:0d:dd:f9:
7c:7b:cc:8d:29:69:2d:d6:8d:c2:14:f5:94:18:bd:69:92:a3:
c6:4a:45:2a:aa:42:04:e4:2a:d5:5c:0d:8a:bc:45:e6:5d:af:
17:7e:6f:6b:0a:d5:1b:9a:35:97:45:ed:94:9b:8f:e7:ec:26:
1d:82:76:3a:88:49:23:b7:b3:2f:65:9d:b3:5f:07:42:bf:f0:
4d:76:d6:1f:e2:c1:a2:ab:f2:cd:cd:39:5a:61:b5:16:7c:be:
e0:a8:24:8f:e7:42:08:8b:8a:14:66:7f:fa:bc:e6:9b:e8:93:
88:e0:72:61:f6:00:d9:e5:05:49:07:6c:b2:54:3e:62:ec:79:
af:27:90:9c:bb:d8:61:39:46:3c:a3:d9:78:73:22:1a:3d:c6:
6a:01:7b:26:c6:ec:1c:3e:8b:83:89:37:28:30:cd:21:6a:aa:
1f:1f:53:30:ad:13:04:a4:17:0e:85:25:b1:1d:a6:2c:9b:1b:
40:a1:e8:a7:03:eb:28:2b:00:2e:60:b1:4b:9d:fc:66:da:6c:
d3:c1:88:f4:aa:c2:d0:5b:cb:b3:43:32:47:5b:2f:18:e1:78:
2e:1b:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org