Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
File: 3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (raw, json)
Hash identifier: kJDU1gSH1iM3XtTlOqUjz2EYE2BQ95n6oFfmPgXhIMA=
Subject key identifier: 72:21:79:D9:43:03:07:36:21:52:01:AB:A9:75:3A:30:8A:56:A2:C7
Certificate issuer: /CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
Certificate serial: 1469209930AFEAEA5E2506DFCEF92CC615C0EAF5
Authority key identifier: 8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
Signing time: Mon 18 Sep 2023 16:00:00 +0000
ROA not before: Mon 18 Sep 2023 15:55:00 +0000
ROA not after: Mon 16 Sep 2024 16:00:00 +0000
asID: 271330
IP address blocks: 207.248.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:69:20:99:30:af:ea:ea:5e:25:06:df:ce:f9:2c:c6:15:c0:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
Validity
Not Before: Sep 18 15:55:00 2023 GMT
Not After : Sep 16 16:00:00 2024 GMT
Subject: CN=3082010A0282010100AC4B0BF9D9B9A55BAE6ED6F7EC5CCFE8E6B83465F1AA4F6FC5483FDF7A186FE7DA08996C3789124327977CE956FF6E56B8839343548EA7C2E92275BE898CF5C48F54C5AA55FBADE93EB17CE0DCF46F6D2498E7C862CEC6C1ECA924618361492A54A126B21CCF239D845A77EC489397229DA5D5CE08926080CE4CC31F708903A79A0F9F7A807F7FB014DE41C0C73CAC941AAFE0C8BA34A5A6407E246C30FA6C8473A9636BC4EE06701472DE47B0533329D5BDB29B3DFB74BAAF2C5413705B8885A04CC0119FB72853D342BCD831C6362AFE080262FC94D5B1AE7C4D54EBC8AF1775B7A542F22FCB212F84C6B4E4AAF4532AEAA59669BF71A6AF2FEA7FA895F25B0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:0b:f9:d9:b9:a5:5b:ae:6e:d6:f7:ec:5c:
cf:e8:e6:b8:34:65:f1:aa:4f:6f:c5:48:3f:df:7a:
18:6f:e7:da:08:99:6c:37:89:12:43:27:97:7c:e9:
56:ff:6e:56:b8:83:93:43:54:8e:a7:c2:e9:22:75:
be:89:8c:f5:c4:8f:54:c5:aa:55:fb:ad:e9:3e:b1:
7c:e0:dc:f4:6f:6d:24:98:e7:c8:62:ce:c6:c1:ec:
a9:24:61:83:61:49:2a:54:a1:26:b2:1c:cf:23:9d:
84:5a:77:ec:48:93:97:22:9d:a5:d5:ce:08:92:60:
80:ce:4c:c3:1f:70:89:03:a7:9a:0f:9f:7a:80:7f:
7f:b0:14:de:41:c0:c7:3c:ac:94:1a:af:e0:c8:ba:
34:a5:a6:40:7e:24:6c:30:fa:6c:84:73:a9:63:6b:
c4:ee:06:70:14:72:de:47:b0:53:33:29:d5:bd:b2:
9b:3d:fb:74:ba:af:2c:54:13:70:5b:88:85:a0:4c:
c0:11:9f:b7:28:53:d3:42:bc:d8:31:c6:36:2a:fe:
08:02:62:fc:94:d5:b1:ae:7c:4d:54:eb:c8:af:17:
75:b7:a5:42:f2:2f:cb:21:2f:84:c6:b4:e4:aa:f4:
53:2a:ea:a5:96:69:bf:71:a6:af:2f:ea:7f:a8:95:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:79:D9:43:03:07:36:21:52:01:AB:A9:75:3A:30:8A:56:A2:C7
X509v3 Authority Key Identifier:
keyid:8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.4.0/22
Signature Algorithm: sha256WithRSAEncryption
75:d9:06:f6:14:b9:b5:4f:a0:6b:3f:9c:ea:e7:2f:e9:1f:07:
b7:4a:00:f3:10:fd:30:de:44:6a:a2:c6:8a:80:0d:a2:60:c1:
ca:a1:0b:95:e1:37:8d:d1:c8:2a:58:41:47:f5:46:5f:53:ec:
8c:73:66:39:33:47:6d:51:3b:63:1d:a6:ce:9b:50:3c:8d:dd:
cf:88:8c:9d:3e:ca:02:00:e1:86:95:45:ca:03:60:3e:9f:10:
59:1a:23:95:7c:b2:74:54:c9:e4:11:34:26:7f:04:de:ff:56:
c7:e1:38:a1:2c:73:3f:a2:cf:6c:0c:80:15:c7:87:73:d8:b3:
5d:b0:d3:50:1b:cf:bd:55:7b:e4:b9:54:48:cc:35:4b:2e:45:
8f:e6:5d:48:8a:b3:16:82:7f:e7:b6:a5:09:04:cc:71:17:dc:
c5:08:67:d5:e4:2e:02:03:e4:7d:1d:a3:b0:db:fe:5d:5d:fc:
d8:07:81:20:c8:56:4a:ca:1a:4d:fd:e0:92:ac:95:76:ce:ee:
6f:c1:40:38:7d:b1:a7:55:cf:ce:a9:80:e0:8a:56:63:c4:16:
2d:e7:f8:85:1d:aa:13:b0:da:33:24:b8:a3:fb:23:65:31:01:
f9:70:a3:2b:04:51:c6:e9:8e:9b:94:f4:3e:be:2b:98:33:eb:
4c:86:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org