Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
File: 3138362e3139322e31362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: GsMtGjK2Ajx2YUrKcTrgx5JZF7Q1MMK0b+p4Tk/2S2Q=
Subject key identifier: E8:C2:E8:0C:8A:49:FD:05:08:8D:14:83:60:95:8C:A9:89:A6:E5:AE
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 1383C147F7D51FD1D4FB58A8AE8642D46C627B05
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:25 +0000
ROA not before: Tue 12 Mar 2024 19:46:25 +0000
ROA not after: Tue 11 Mar 2025 19:51:25 +0000
asID: 28220
IP address blocks: 186.192.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:83:c1:47:f7:d5:1f:d1:d4:fb:58:a8:ae:86:42:d4:6c:62:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:25 2024 GMT
Not After : Mar 11 19:51:25 2025 GMT
Subject: CN=E8C2E80C8A49FD05088D148360958CA989A6E5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:49:e0:6d:70:48:6b:f4:04:65:b7:3d:48:
da:ce:fe:ba:89:5f:67:1e:75:1e:20:c4:a1:48:1e:
32:15:e5:0c:07:a1:93:c3:6f:66:8f:0c:ea:1d:7d:
f5:90:fa:16:a7:8f:34:fe:ab:e0:aa:e0:24:c5:72:
82:fd:ca:b7:44:40:03:56:4f:5f:cc:32:97:73:36:
92:14:b5:14:ad:e7:a9:ba:31:3a:24:4a:29:78:8f:
21:de:bc:fc:49:5c:14:ca:34:9b:00:78:01:35:e9:
d9:5b:07:cd:b7:0b:cd:9f:b9:6e:34:d3:69:ea:af:
2b:8f:fc:77:52:ff:27:1b:e5:12:e6:cc:40:94:71:
52:8d:17:47:e0:0d:0b:1b:89:24:95:de:37:7a:1e:
51:83:33:d3:f4:d0:dd:33:e9:7d:64:d2:a3:f7:f6:
d9:59:4b:c7:8b:04:77:09:35:63:1e:7b:9d:f8:d0:
96:e9:6b:27:23:07:b0:e8:b0:bb:48:9b:1b:da:08:
15:9b:78:48:80:3e:2a:72:45:37:fe:90:6f:7b:88:
15:a7:1b:d8:ca:8f:68:95:53:2f:31:65:2e:7c:36:
45:94:06:57:81:a2:eb:91:e6:dc:9a:a1:df:27:a4:
26:60:94:fc:87:f5:24:66:7f:b3:72:83:bb:ee:9c:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:E8:0C:8A:49:FD:05:08:8D:14:83:60:95:8C:A9:89:A6:E5:AE
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.192.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:e7:f1:23:6d:da:97:09:b0:9c:f1:29:e2:98:b3:0e:f4:26:
55:e2:33:52:ee:a2:64:a2:4a:3b:63:70:5f:ff:96:d4:b7:ad:
a0:54:f0:a5:77:71:81:57:89:03:cd:0c:81:5c:6d:9d:c4:b8:
2d:b6:23:28:e2:c5:03:39:35:66:78:14:be:70:93:19:ba:99:
b7:ad:26:51:57:64:41:58:da:80:14:52:86:31:02:4f:74:69:
20:be:08:36:3f:47:e2:9f:51:00:f7:36:3d:17:23:03:38:12:
72:8e:29:18:66:70:82:75:ee:a2:eb:35:42:a7:ef:77:7e:f4:
de:ca:85:7a:39:ef:81:11:c1:d1:d7:23:2d:7d:1f:25:32:d1:
f4:1f:b8:d5:69:6e:cd:79:e6:8a:3a:21:f3:f3:4a:e1:dc:11:
99:9b:3c:5e:e9:be:93:6e:10:e3:ca:6e:7f:34:7f:8e:fc:7e:
df:7c:72:f1:a7:c5:a2:7f:d5:e0:b0:91:94:c3:80:c1:a9:14:
0b:65:12:8c:49:ee:73:b7:85:f6:b9:a2:68:29:fc:5a:c4:36:
70:61:35:a2:49:b1:bb:b3:9f:a5:61:37:b3:ac:88:99:af:17:
35:1b:01:70:7e:6f:5a:a0:0b:f9:d4:a3:8a:ba:54:93:21:b9:
e2:27:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org