Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32322d3232203d3e20323633393530.roa
File: 3133382e3235352e302e302f32322d3232203d3e20323633393530.roa (raw, json)
Hash identifier: zjfVkoRrQbFvEzZOp6QjxtOqftGpRM2gzI2IsAwj9Xw=
Subject key identifier: D5:BA:85:30:F5:CF:E7:7A:B3:32:A9:57:9F:6D:AC:DD:7D:18:9E:C2
Certificate issuer: /CN=F541966412A9926340E8F10C31ABE0041F25A41F
Certificate serial: 4C8C2205FDF70D1BBB8D942618C8F2AF77C8523D
Authority key identifier: F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32322d3232203d3e20323633393530.roa
Signing time: Fri 09 Feb 2024 19:07:52 +0000
ROA not before: Fri 09 Feb 2024 19:02:52 +0000
ROA not after: Fri 07 Feb 2025 19:07:52 +0000
asID: 263950
IP address blocks: 138.255.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8c:22:05:fd:f7:0d:1b:bb:8d:94:26:18:c8:f2:af:77:c8:52:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F541966412A9926340E8F10C31ABE0041F25A41F
Validity
Not Before: Feb 9 19:02:52 2024 GMT
Not After : Feb 7 19:07:52 2025 GMT
Subject: CN=D5BA8530F5CFE77AB332A9579F6DACDD7D189EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9c:ac:91:3e:32:bd:fe:04:da:53:a4:0b:c2:
b2:c1:bc:38:6d:c9:b1:d3:fe:db:64:1d:c4:16:3d:
94:4f:98:5e:40:10:8a:9f:d3:db:44:65:08:ec:27:
1a:58:03:32:a5:50:34:35:fa:1e:99:13:a3:83:77:
7e:83:fa:26:d5:6d:79:db:05:d3:b2:72:45:b7:a9:
41:59:e1:97:f3:e7:a1:d0:b2:67:00:64:c8:19:7c:
b9:e9:7a:2b:32:39:b0:a7:ab:15:5d:73:cb:86:65:
07:84:63:67:70:5c:0b:ad:f7:2b:e0:26:d8:64:62:
62:b4:63:85:d8:a6:d4:1a:05:8a:19:38:37:75:1a:
fd:08:18:1c:27:c9:29:99:43:fb:38:5d:2c:26:54:
9c:1c:eb:60:95:7b:29:8a:bd:69:92:75:68:86:3c:
31:3c:30:cc:a5:14:80:11:9c:58:c5:9a:98:71:44:
c3:d7:82:79:c3:b7:7c:b0:51:77:a4:50:c9:d7:c6:
39:80:33:8c:27:57:0a:15:dc:43:4b:8e:40:4f:d3:
e9:fa:3b:11:2b:ef:eb:7b:7d:d9:f5:93:8e:ac:17:
fc:df:07:a8:3e:af:4b:30:a9:72:30:72:29:f3:3c:
73:fa:92:86:63:4b:9a:8f:3f:9e:a7:03:a9:77:ba:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:85:30:F5:CF:E7:7A:B3:32:A9:57:9F:6D:AC:DD:7D:18:9E:C2
X509v3 Authority Key Identifier:
keyid:F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32322d3232203d3e20323633393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:c8:3e:a8:31:de:ef:11:26:76:57:48:cc:7a:b6:33:13:e6:
18:06:30:08:3c:70:71:d9:60:7c:b2:87:51:fe:c1:58:00:da:
91:c5:b0:bb:27:bb:ae:db:8c:f0:ce:80:5f:a8:fe:53:b0:e4:
60:38:d5:37:c8:e6:d9:7d:36:3e:40:5f:b1:b7:14:99:02:b4:
78:f5:71:cb:aa:9c:00:e7:62:cf:a2:c5:26:bd:04:e4:4c:93:
cd:51:d5:09:cd:cc:39:1f:61:ac:78:4c:7b:a0:40:03:91:79:
0f:5e:93:79:6d:c8:15:ad:fa:c7:55:dd:d5:b2:2b:9f:6c:27:
bd:55:9e:f1:45:68:69:e4:5d:73:3c:61:0e:84:bd:c0:64:bd:
7b:f6:98:16:14:4a:fe:d3:20:2b:c8:ef:88:6a:ef:f7:77:05:
f4:44:c3:17:03:59:c6:c5:4f:4d:de:bf:ec:ad:dd:08:fe:d8:
f4:46:f0:a9:de:33:9b:aa:42:90:a0:63:bd:98:1e:e8:c4:64:
cf:e6:64:0f:c1:46:87:b4:79:98:8f:f6:a5:4f:52:2a:88:ab:
54:a8:ef:e2:eb:a1:90:40:cd:18:f5:1c:66:14:f9:70:a6:c4:
6f:83:01:0d:99:83:ee:dc:08:bb:08:19:87:74:95:ec:07:1c:
6e:97:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org