Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e332e302f32342d3234203d3e20323633393530.roa
File: 3133382e3235352e332e302f32342d3234203d3e20323633393530.roa (raw, json)
Hash identifier: /BGj8kuQ0VJfy2d7qTYSoZHR0bfAGVkAO1UOJNRuTVA=
Subject key identifier: 94:69:95:83:F6:EC:73:E7:F0:2C:05:AA:39:3A:84:3A:50:A4:CC:72
Certificate issuer: /CN=F541966412A9926340E8F10C31ABE0041F25A41F
Certificate serial: 2A4761EA84406317FABF47465A25240955783C11
Authority key identifier: F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e332e302f32342d3234203d3e20323633393530.roa
Signing time: Fri 09 Feb 2024 19:07:54 +0000
ROA not before: Fri 09 Feb 2024 19:02:54 +0000
ROA not after: Fri 07 Feb 2025 19:07:54 +0000
asID: 263950
IP address blocks: 138.255.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:47:61:ea:84:40:63:17:fa:bf:47:46:5a:25:24:09:55:78:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F541966412A9926340E8F10C31ABE0041F25A41F
Validity
Not Before: Feb 9 19:02:54 2024 GMT
Not After : Feb 7 19:07:54 2025 GMT
Subject: CN=94699583F6EC73E7F02C05AA393A843A50A4CC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:a5:67:8f:47:e4:d2:d9:09:52:5c:90:81:
09:1c:86:5a:47:62:19:a4:ed:4f:5c:33:ba:c2:57:
09:8b:bc:4e:63:c8:76:0a:0a:65:60:8d:4a:25:f0:
d7:ee:9a:03:48:94:cd:a5:8d:9b:ba:18:67:38:b5:
ed:c1:f1:7d:b3:20:69:dd:06:73:9a:23:02:bd:3c:
04:fa:05:09:ae:a9:26:4a:c6:05:9a:4b:22:02:30:
c1:b6:25:8e:ae:4c:cb:03:d1:28:8e:37:c3:9e:7a:
75:33:b6:27:1c:5f:28:da:46:de:cb:74:5c:8d:cc:
d2:4e:fc:02:f5:df:ef:be:e8:32:98:96:1e:ba:0e:
c7:37:8a:f8:fd:a1:26:94:65:26:ad:90:8b:0a:d5:
ce:05:e4:01:b2:0c:41:7d:30:95:fe:78:ca:e2:7a:
a6:6c:65:fc:e1:e2:c8:08:d4:e7:b0:5f:9a:db:fa:
45:47:a3:ce:91:c0:46:6f:1a:6b:a3:57:4e:6e:ed:
00:4a:a4:f4:d1:8e:79:8f:8c:68:78:14:1e:8d:49:
66:b5:41:53:a5:1f:b4:33:90:6f:c9:f6:9d:62:37:
2d:5e:ef:36:27:20:a0:54:d4:48:33:d8:92:3c:45:
e5:0d:a9:3f:b2:cb:ed:c3:31:a3:7b:89:a9:d7:91:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:95:83:F6:EC:73:E7:F0:2C:05:AA:39:3A:84:3A:50:A4:CC:72
X509v3 Authority Key Identifier:
keyid:F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e332e302f32342d3234203d3e20323633393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.3.0/24
Signature Algorithm: sha256WithRSAEncryption
94:18:f5:f5:64:40:71:ff:99:4c:1a:f2:b5:64:36:b6:80:78:
0e:75:52:e1:e4:21:9f:03:d9:aa:c1:0b:cf:0c:2b:67:62:42:
0f:fb:6f:64:c4:b1:17:10:34:82:90:f1:e7:4b:fd:c8:e2:57:
d4:2e:c9:5d:3e:b7:3b:de:f3:f6:34:22:0b:cf:58:9a:9a:62:
ef:73:3d:1e:84:b3:cc:bf:65:b2:a5:b4:0d:99:fa:7b:08:57:
8a:92:fc:57:5f:ba:f6:59:f5:31:20:6f:7f:5b:7b:d2:0c:44:
b2:a8:e4:93:97:a0:47:20:32:76:25:54:d1:b1:ed:a0:91:f8:
2c:78:71:3f:d1:47:bf:c0:39:9b:6b:bb:d4:14:57:49:62:27:
d4:cd:70:65:c2:1a:40:27:80:91:41:eb:21:d0:ba:bc:27:c3:
a5:21:b5:6b:ef:88:f7:31:1d:cc:7e:89:d2:f6:e6:99:b6:13:
0f:63:c9:e9:dc:88:87:99:19:08:e8:f0:67:c8:87:a1:d9:06:
5b:c2:12:9b:e2:85:c5:c8:4e:a5:d9:11:c6:57:01:5f:f1:ab:
e7:5c:8a:95:ec:90:d5:45:5a:e3:c6:fe:55:1b:f1:14:7e:50:
3f:bd:43:be:9e:b1:e8:8a:d4:d0:dc:2f:ca:a3:0f:e5:63:3d:
84:b2:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org