Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32322d3232203d3e20323635343036.roa
File: 3136382e3139352e342e302f32322d3232203d3e20323635343036.roa (raw, json)
Hash identifier: aisJIEYTM0/E4Z0c7CuEKBHV0kwJgb1gyKS+HxORzfE=
Subject key identifier: 8A:16:88:6D:DD:D4:98:93:99:FA:AA:AB:E2:CA:12:DF:12:C3:2B:E5
Certificate issuer: /CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Certificate serial: 2477D2B1BA7E814345F7C08C045A99F10020F29D
Authority key identifier: 20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32322d3232203d3e20323635343036.roa
Signing time: Fri 13 Jan 2023 15:36:10 +0000
ROA not before: Fri 13 Jan 2023 15:31:10 +0000
ROA not after: Fri 12 Jan 2024 15:36:10 +0000
asID: 265406
IP address blocks: 168.195.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:77:d2:b1:ba:7e:81:43:45:f7:c0:8c:04:5a:99:f1:00:20:f2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Validity
Not Before: Jan 13 15:31:10 2023 GMT
Not After : Jan 12 15:36:10 2024 GMT
Subject: CN=8A16886DDDD4989399FAAAABE2CA12DF12C32BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:92:78:21:cf:f5:30:3a:17:d0:11:6f:6e:
65:9b:4f:f9:62:c0:2e:dc:4c:aa:b8:08:27:29:74:
3e:b2:f0:5f:17:cf:cb:6c:c0:ce:2f:73:e9:f8:90:
c3:3d:b9:9d:a4:7b:85:4d:07:43:fb:78:97:a7:bf:
5d:a1:05:d9:4c:6a:07:03:a4:60:78:a5:89:55:e6:
b9:f5:a0:7b:41:5e:03:c4:23:72:02:51:97:de:21:
83:f4:fc:17:c4:da:87:9c:49:a5:2d:70:d1:76:df:
c4:0a:14:15:bc:b5:06:eb:8d:ee:b2:4c:1d:48:99:
2d:fa:b8:14:70:18:d2:ac:4f:d4:d2:d9:ec:b3:ad:
b7:fd:cd:4e:66:cd:88:c8:0e:e2:cb:8d:04:f9:44:
e8:48:c4:cb:40:a0:5d:31:26:ac:6f:94:b7:14:e6:
3e:64:2f:30:72:97:94:d3:51:d0:ab:de:b4:6a:5d:
1b:15:a4:20:86:c1:3a:64:f5:73:6b:d3:7c:73:89:
2a:db:06:e6:06:7a:a9:66:30:27:36:89:8c:46:a7:
bc:fa:79:2f:b0:72:cc:7a:db:8f:d9:2d:9b:ec:f2:
d1:06:67:98:b2:60:1f:41:b1:0c:12:82:68:ef:c7:
0c:ef:83:12:29:27:cb:98:f9:71:5e:06:20:a0:e8:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:88:6D:DD:D4:98:93:99:FA:AA:AB:E2:CA:12:DF:12:C3:2B:E5
X509v3 Authority Key Identifier:
keyid:20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32322d3232203d3e20323635343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.4.0/22
Signature Algorithm: sha256WithRSAEncryption
65:3e:6a:cd:0f:db:d8:2a:b7:6b:16:3f:e4:fd:cf:e5:8e:27:
48:d5:a5:46:17:b8:2b:56:af:7f:0f:52:ee:48:cc:3b:1c:83:
80:aa:ca:72:a2:11:16:c8:0c:06:bb:6b:6a:f9:97:d4:e0:e2:
47:fc:e5:d3:65:96:cc:36:01:6c:24:ce:7c:f4:a6:03:b8:32:
b8:d1:40:0f:25:53:42:bc:25:fa:86:cd:17:04:67:e3:cc:a2:
79:19:30:28:2c:1d:59:69:ff:75:59:20:21:8e:80:8b:34:78:
59:f3:3f:e6:ab:3d:2b:04:01:8c:ea:a2:ae:be:bf:f1:8a:9e:
cc:af:b9:6e:3a:02:7d:5c:ee:b8:b0:b8:59:7c:7f:f4:a4:8a:
42:39:ef:b1:1c:23:6a:e2:2d:21:ea:76:2f:51:e3:86:a5:82:
23:dc:f3:0d:90:37:42:99:81:93:09:8f:c9:2f:bc:68:20:b6:
8c:b9:e8:f6:7b:79:7a:ea:c4:12:40:05:53:19:d1:df:b3:79:
0b:9f:9f:c3:2b:af:b6:7d:16:41:29:cf:b1:0a:c5:16:6d:76:
da:29:41:5e:27:19:82:61:68:76:7d:92:f9:45:a9:77:fc:69:
d4:38:59:69:0f:67:5c:47:ef:9c:e1:54:a8:37:c3:e1:17:72:
d4:01:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org