Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e322e302f32342d3234203d3e20323633393530.roa
File: 3133382e3235352e322e302f32342d3234203d3e20323633393530.roa (raw, json)
Hash identifier: TI2TBxLVz08kZbR8QWPr+dGN4fq8NRVL07XQ3aoOwFI=
Subject key identifier: 9A:80:93:64:F0:3E:79:A9:E7:94:3F:4C:C4:5E:EF:15:F2:D4:85:E8
Certificate issuer: /CN=F541966412A9926340E8F10C31ABE0041F25A41F
Certificate serial: 082CDDDC949845437CA03FA481F5C977270D9502
Authority key identifier: F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e322e302f32342d3234203d3e20323633393530.roa
Signing time: Fri 09 Feb 2024 19:07:53 +0000
ROA not before: Fri 09 Feb 2024 19:02:53 +0000
ROA not after: Fri 07 Feb 2025 19:07:53 +0000
asID: 263950
IP address blocks: 138.255.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2c:dd:dc:94:98:45:43:7c:a0:3f:a4:81:f5:c9:77:27:0d:95:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F541966412A9926340E8F10C31ABE0041F25A41F
Validity
Not Before: Feb 9 19:02:53 2024 GMT
Not After : Feb 7 19:07:53 2025 GMT
Subject: CN=9A809364F03E79A9E7943F4CC45EEF15F2D485E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:0a:78:d0:a2:e9:b8:9c:6d:cf:37:11:d0:
1e:36:e4:0f:15:2c:de:c0:71:21:4a:9c:d5:5c:79:
af:41:5f:08:59:d3:bf:a8:c2:8f:ed:87:48:d5:b1:
ee:a5:0e:62:88:b0:e1:cb:7c:7a:7a:74:34:e8:c9:
5a:b7:f2:dc:97:98:8b:b8:d8:77:b4:3c:bc:e0:00:
02:b2:4d:4f:5f:d7:6f:26:0d:30:63:52:a7:ea:7e:
42:86:28:0a:0b:15:33:ed:a9:73:be:49:71:51:32:
d8:a9:99:0a:f3:df:a8:91:80:76:e5:59:17:64:72:
14:54:8c:ed:5f:6f:f3:ed:b2:ec:d6:cd:f7:ec:df:
08:c2:b7:e6:d8:29:c3:f8:d6:0f:d3:a1:c2:b1:bc:
e6:e5:b9:5d:3c:27:f2:d4:00:66:b9:b4:ae:f9:de:
fb:04:1a:48:34:ea:a1:7c:2b:74:1a:fb:14:dc:8c:
98:a4:42:06:a9:f2:36:4f:c4:57:78:69:68:09:9a:
7e:9c:3d:d4:8e:50:2e:c9:4e:85:c0:30:9d:91:24:
6f:b3:f2:05:c0:0e:9a:11:78:61:07:47:88:44:bb:
cf:d5:46:06:21:1e:91:bc:9b:4d:71:20:1f:09:ff:
27:d2:3e:07:79:cd:1a:06:7b:d0:4f:af:20:dd:6f:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:93:64:F0:3E:79:A9:E7:94:3F:4C:C4:5E:EF:15:F2:D4:85:E8
X509v3 Authority Key Identifier:
keyid:F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e322e302f32342d3234203d3e20323633393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2a:4c:2d:91:3d:b2:ae:42:6f:b5:39:5a:cd:c3:a2:91:43:
36:58:2c:4a:7a:bd:6a:40:c5:88:06:67:e6:db:0c:eb:8e:56:
35:49:17:50:4a:81:7b:2e:70:41:9a:8a:25:53:99:63:0c:a4:
dc:17:7a:8d:4d:9a:87:c7:75:a3:a6:67:0b:e2:c7:79:47:74:
3b:3d:40:67:cb:3d:7b:4d:f8:2d:ab:32:19:e6:b4:1f:7d:ef:
f0:0f:f4:59:11:bd:8d:59:a2:4c:8c:4a:c2:32:eb:6c:01:c3:
8e:77:aa:57:e4:c5:b5:1c:a6:e5:b7:8c:e3:f0:83:82:68:7e:
ef:ab:c4:31:d9:64:5d:ce:b1:c6:79:79:ca:4c:c4:2b:23:f1:
52:67:05:2f:45:fe:4d:99:e0:d1:49:74:a5:72:04:06:18:a6:
fb:b5:a9:f6:6f:72:05:7f:2f:2c:d3:37:d3:33:ac:f5:fe:d7:
46:52:41:4d:18:e4:de:61:24:42:6e:5e:9c:c6:c8:a3:4a:49:
53:77:d2:47:80:c9:02:62:aa:22:37:47:42:a0:b7:e8:60:3c:
e6:59:4e:a7:39:f0:06:ac:73:a1:d0:df:9f:28:8c:98:74:39:
e4:df:1b:6c:d7:45:50:15:76:db:87:c7:a3:aa:64:01:88:30:
d5:e9:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org