Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/3134332e302e32302e302f32322d3234203d3e20323633393835.roa
File: 3134332e302e32302e302f32322d3234203d3e20323633393835.roa (raw, json)
Hash identifier: ZtzWHw1GYBcZ34OCmvib4tzyqIxnIJRSe1JsroyW7B8=
Subject key identifier: 37:3F:A6:2E:B7:21:48:BE:86:01:07:5F:AE:92:FE:B4:25:82:03:EE
Certificate issuer: /CN=5CFE4D51D04B1EF3E546D622F53BC445A57D838A
Certificate serial: 4F103E727FFC059566033C4492144BE8BAFAC76E
Authority key identifier: 5C:FE:4D:51:D0:4B:1E:F3:E5:46:D6:22:F5:3B:C4:45:A5:7D:83:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/3134332e302e32302e302f32322d3234203d3e20323633393835.roa
Signing time: Thu 22 Feb 2024 17:45:46 +0000
ROA not before: Thu 22 Feb 2024 17:40:46 +0000
ROA not after: Thu 20 Feb 2025 17:45:46 +0000
asID: 263985
IP address blocks: 143.0.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:10:3e:72:7f:fc:05:95:66:03:3c:44:92:14:4b:e8:ba:fa:c7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CFE4D51D04B1EF3E546D622F53BC445A57D838A
Validity
Not Before: Feb 22 17:40:46 2024 GMT
Not After : Feb 20 17:45:46 2025 GMT
Subject: CN=373FA62EB72148BE8601075FAE92FEB4258203EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:35:a8:fe:0e:71:9a:8f:52:c1:c9:79:7e:
d5:df:15:56:f1:3c:7c:e8:3e:d8:e6:8e:a1:b8:39:
99:e4:ba:9a:1b:0d:fe:ef:18:b4:05:70:6f:c5:0f:
93:4a:b5:8f:df:6e:38:b6:4b:ec:9b:85:be:9b:c0:
04:01:04:1d:8d:9c:e3:c7:b7:be:e9:66:04:a7:75:
13:dc:5b:cf:71:3a:7a:d6:50:7f:c9:fb:88:58:d1:
61:22:8c:11:62:0c:06:85:53:37:12:aa:ef:94:b1:
f5:8f:ee:4c:4f:01:87:3e:a2:31:ee:de:d2:35:1b:
26:7f:a7:60:65:98:3c:11:29:8c:25:d4:b6:e8:72:
8b:ea:f6:00:cb:50:90:83:cb:64:30:3d:e6:e8:8f:
39:f4:62:45:e0:91:b4:c1:73:2b:c8:d2:d7:85:8b:
7a:e7:78:2d:f0:9d:63:f5:79:83:54:20:2f:74:1f:
c1:41:79:3b:25:ab:16:34:2e:55:b9:74:dd:9e:ec:
1a:49:ed:37:3a:ca:cf:53:41:70:8b:f6:36:c9:1b:
4e:70:bd:33:f7:44:5d:36:fb:65:ff:aa:7f:47:40:
89:45:e2:e8:5f:62:5c:08:59:ba:6b:8d:c6:21:47:
1e:10:cb:19:0e:21:c1:b0:61:1e:9c:f9:30:cc:86:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:A6:2E:B7:21:48:BE:86:01:07:5F:AE:92:FE:B4:25:82:03:EE
X509v3 Authority Key Identifier:
keyid:5C:FE:4D:51:D0:4B:1E:F3:E5:46:D6:22:F5:3B:C4:45:A5:7D:83:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/3134332e302e32302e302f32322d3234203d3e20323633393835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.20.0/22
Signature Algorithm: sha256WithRSAEncryption
13:11:b5:b4:32:fa:00:b3:8f:2d:32:4a:97:b5:36:36:66:c7:
27:81:c3:40:88:86:68:d3:e2:2b:ca:9d:60:a7:2c:68:be:86:
94:fa:f7:5f:27:62:94:5d:bf:4c:a4:4d:63:76:91:40:54:b8:
64:27:81:cb:7d:01:85:7a:92:ff:bf:d0:09:9c:b4:af:e2:0a:
6a:31:a2:79:8d:cc:7c:a4:b9:d3:10:16:a9:89:33:a9:cc:96:
5b:b9:6e:20:ff:b7:6b:5a:4c:1c:45:f0:c6:73:fa:39:72:3e:
22:bd:b2:de:31:82:8b:37:a1:86:a6:ef:25:c0:8f:24:9d:b8:
d9:03:8f:03:a5:49:fd:f1:e5:58:35:dc:07:3a:c9:07:da:6d:
7c:85:54:67:f7:ba:d1:a9:27:fd:cc:cc:72:72:98:da:31:c6:
51:fe:e7:30:61:ef:55:09:1a:88:39:60:65:1b:e9:e3:52:06:
25:f2:e2:a3:a2:64:ab:ac:13:e8:23:0e:43:90:b8:20:f1:64:
27:72:3f:e9:5d:28:43:68:26:6a:3d:5f:f1:13:e1:a1:75:00:
84:b5:ad:58:b7:43:e2:c4:9f:b0:d5:39:00:c0:64:07:6e:03:
53:30:65:4e:6b:f5:17:32:d4:15:78:43:65:a2:5f:16:ac:24:
f8:bc:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org