Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232382e36382e302f32322d3232203d3e203238323230.roa
File: 3136382e3232382e36382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: BPJp7ZPo8rB5KOaYYU2ya9wm64ZwbYmURtHTmKdQ9To=
Subject key identifier: DC:2E:46:58:73:2F:1D:21:30:14:3C:28:F5:37:A6:62:8B:42:E0:26
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 24EE7D32571C8414B28831F37F926BFDD6EF94A0
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232382e36382e302f32322d3232203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:23 +0000
ROA not before: Tue 12 Mar 2024 19:46:23 +0000
ROA not after: Tue 11 Mar 2025 19:51:23 +0000
asID: 28220
IP address blocks: 168.228.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ee:7d:32:57:1c:84:14:b2:88:31:f3:7f:92:6b:fd:d6:ef:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:23 2024 GMT
Not After : Mar 11 19:51:23 2025 GMT
Subject: CN=DC2E4658732F1D2130143C28F537A6628B42E026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:8e:03:bd:a2:e4:01:a9:c4:cd:20:8c:65:
47:1f:94:57:ba:d5:50:81:ff:f4:d6:b4:b6:6f:09:
25:f4:e1:9c:97:4a:1b:d8:25:b7:76:39:a7:9a:0f:
70:b0:eb:0d:d3:b8:bf:40:85:2a:5b:37:11:8c:a4:
d7:bf:e1:34:32:41:65:2a:c8:f6:65:1a:b7:8d:30:
7a:2b:ad:5c:0a:a8:49:9d:2f:5c:95:0c:46:5e:57:
45:11:28:d6:6c:17:4d:6f:d5:1e:f4:a7:c5:d3:3d:
54:18:43:8d:71:44:d9:a5:b9:83:b7:eb:6e:2b:2d:
45:a4:d2:24:c6:a9:44:9a:b8:07:4f:ec:2b:2d:ca:
41:59:05:44:99:b5:65:a6:66:fe:a7:fb:ff:68:30:
d4:92:a4:25:1c:14:9a:1f:68:1e:5c:0b:c5:57:11:
8e:5c:88:4f:64:6c:3a:c7:02:f2:20:56:0c:a5:ed:
c7:b3:b9:2e:14:97:a1:de:71:c7:24:5e:83:8a:ff:
e6:0c:50:2a:0d:ed:cb:40:de:19:a3:ee:74:eb:fe:
63:8e:5e:5e:c2:c7:33:7c:40:02:17:c2:0d:05:2f:
dc:05:97:78:59:d5:31:fc:2d:1a:6b:b4:70:70:b0:
95:53:cd:3c:8b:28:1a:a5:07:36:d9:b4:04:a8:6f:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:46:58:73:2F:1D:21:30:14:3C:28:F5:37:A6:62:8B:42:E0:26
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232382e36382e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:89:d5:84:6c:14:15:86:08:82:11:f4:f8:8b:7b:24:cb:6f:
86:d5:8f:87:61:09:93:4a:44:5a:af:97:a9:59:e6:09:bf:2b:
f8:7e:4c:50:75:45:be:d4:03:f2:a8:d3:e0:f3:d8:5b:fc:a4:
3a:29:55:40:79:85:74:73:a2:d7:3a:64:c0:ea:f7:b3:b0:12:
90:ec:06:dd:b7:42:f2:16:78:a8:9c:63:91:f7:44:6e:86:06:
fb:10:64:3f:c8:9f:ef:02:0a:33:c3:ce:17:46:c3:7c:83:7e:
66:90:97:63:e1:22:ce:11:87:7a:2f:c3:bb:ee:79:8e:d4:fa:
e0:42:05:8c:21:72:9a:ff:dd:0e:5f:7c:0c:13:57:3c:df:ea:
1e:66:e9:c1:e7:10:d9:fb:37:4b:b0:2d:cd:31:4c:f1:a5:3e:
49:0a:51:84:57:48:53:48:87:2f:70:8f:2e:4d:10:bf:82:70:
84:79:7a:66:75:c5:96:b2:f8:3a:bc:74:36:ca:24:02:5e:48:
16:24:01:e4:07:e6:6e:c5:af:7d:42:f7:86:c5:c8:df:ed:2a:
43:90:70:be:9f:8a:7e:24:5d:1f:27:22:af:d0:f0:3b:6c:ec:
e4:d2:6d:b8:6c:33:ed:bf:4e:6d:8c:c2:94:67:9f:a4:fe:9a:
ad:2a:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org