Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e322e302f32332d3233203d3e20323633393530.roa
File: 3133382e3235352e322e302f32332d3233203d3e20323633393530.roa (raw, json)
Hash identifier: tB2wXkY76i71iuWyQmHo6w+ZqpViibxRQovkn7o+0BI=
Subject key identifier: CC:20:43:6C:F9:91:E0:41:83:6B:2B:16:51:93:56:6D:F4:9E:D9:00
Certificate issuer: /CN=F541966412A9926340E8F10C31ABE0041F25A41F
Certificate serial: 6E0D0F487EF4F987135C0778FB124EDE86F4FCA5
Authority key identifier: F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e322e302f32332d3233203d3e20323633393530.roa
Signing time: Fri 09 Feb 2024 19:07:53 +0000
ROA not before: Fri 09 Feb 2024 19:02:53 +0000
ROA not after: Fri 07 Feb 2025 19:07:53 +0000
asID: 263950
IP address blocks: 138.255.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0d:0f:48:7e:f4:f9:87:13:5c:07:78:fb:12:4e:de:86:f4:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F541966412A9926340E8F10C31ABE0041F25A41F
Validity
Not Before: Feb 9 19:02:53 2024 GMT
Not After : Feb 7 19:07:53 2025 GMT
Subject: CN=CC20436CF991E041836B2B165193566DF49ED900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:f9:86:eb:af:e2:d2:5c:08:09:31:ac:e7:
d9:b4:f9:78:c9:5c:bc:9a:ef:d9:df:5b:4c:e7:1c:
5d:cd:3a:79:c3:5b:07:96:ca:b2:d5:f6:ff:92:3a:
97:56:95:a2:da:fb:e9:ef:a7:76:8c:74:af:7f:b4:
2e:09:e7:3f:1d:dd:97:35:2c:16:0b:23:46:68:b3:
83:25:b6:3f:f2:41:8a:cf:3a:7c:9b:90:08:f7:e3:
2b:eb:e6:dc:80:86:d0:d4:9a:c9:f3:53:91:3d:3e:
03:66:12:1d:ff:c8:93:66:1e:13:98:76:98:8e:c9:
da:97:5f:91:f3:df:41:ce:cc:78:bd:b9:78:d1:f6:
21:1f:c9:06:fb:7f:e8:37:bf:9b:d5:34:e7:9c:c2:
6d:d6:3d:b7:f6:81:9d:f2:ec:c7:b0:5b:81:12:31:
e7:43:2f:e7:75:e8:29:2b:56:1a:ae:f3:16:83:6f:
22:75:f4:36:00:d5:a4:86:01:86:43:ce:62:73:57:
fd:7a:e0:ac:93:28:ef:cc:6d:ed:ae:21:dc:91:ba:
4b:e5:98:48:ab:21:38:37:18:f4:cd:60:77:b6:a1:
0e:2c:ff:30:bd:72:18:92:be:9a:df:20:d2:f0:ad:
43:c6:d7:6a:02:57:54:f3:86:fd:4c:e5:ed:67:58:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:43:6C:F9:91:E0:41:83:6B:2B:16:51:93:56:6D:F4:9E:D9:00
X509v3 Authority Key Identifier:
keyid:F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e322e302f32332d3233203d3e20323633393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
17:88:29:d2:af:5e:70:69:a1:65:c0:78:a3:13:35:b9:19:6f:
12:15:67:e8:5e:26:24:0e:cc:bb:0a:8b:c3:88:73:f2:99:81:
07:54:66:fb:2c:02:d4:53:93:9c:87:c5:2a:56:6c:bc:55:d9:
45:4e:c4:8b:c2:2b:a0:34:8a:3f:99:34:9b:af:40:65:a7:ca:
06:79:c7:3c:58:18:8d:b2:70:f6:ea:71:12:b9:0b:ae:38:aa:
e9:5f:0a:15:77:d5:30:91:64:14:d1:08:16:8c:48:76:2a:9d:
df:4c:6f:e9:91:c9:fd:03:39:7e:e8:7a:ce:ac:e0:83:0c:a9:
00:28:ed:a3:cf:3d:d9:a3:27:5d:62:c8:a3:5b:d7:71:7a:79:
e9:13:79:a0:57:32:f7:c3:a5:5c:ec:5b:98:51:12:a6:65:d3:
18:5b:2f:ce:b5:d3:9d:9d:40:40:5f:52:d5:fe:cf:d3:a7:84:
70:96:0e:97:7c:da:8d:f3:f9:c6:69:4a:5b:7a:b4:c2:71:7f:
07:99:60:55:81:f2:93:de:59:f7:69:cf:86:32:18:e3:38:d9:
bb:eb:53:59:d9:2e:ac:82:cc:8e:5d:d2:c4:44:07:17:eb:6d:
7e:85:d7:09:a1:60:e4:79:a4:a8:f8:00:a2:3a:c1:9d:56:f8:
69:cd:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org