Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36302e36342e302f31392d3139203d3e203238323230.roa
File: 3138372e36302e36342e302f31392d3139203d3e203238323230.roa (raw, json)
Hash identifier: KUMpPce19HStn/zxHdNYpK1RjBedJx4e8DWk3vDyxPI=
Subject key identifier: D7:32:8C:A4:DC:0E:83:95:0C:B0:6F:36:D3:EC:30:59:7E:EE:74:89
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 2F5E8EC9D622AC08D2ECAADAA03E0C58545D45FF
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36302e36342e302f31392d3139203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:18 +0000
ROA not before: Tue 12 Mar 2024 19:46:18 +0000
ROA not after: Tue 11 Mar 2025 19:51:18 +0000
asID: 28220
IP address blocks: 187.60.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5e:8e:c9:d6:22:ac:08:d2:ec:aa:da:a0:3e:0c:58:54:5d:45:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:18 2024 GMT
Not After : Mar 11 19:51:18 2025 GMT
Subject: CN=D7328CA4DC0E83950CB06F36D3EC30597EEE7489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:80:09:16:78:50:6c:ed:f6:ac:c4:22:21:50:
7b:d3:0a:4d:05:c5:85:14:2b:14:79:b4:2d:92:f4:
ae:d8:50:6e:d7:f3:aa:ed:32:ad:28:1d:fc:be:d8:
71:ba:06:68:4c:1a:ae:1f:dc:85:f8:e3:0c:0f:a8:
52:8d:a1:bf:c1:be:a2:ce:7e:12:38:bb:f3:82:c1:
a5:67:65:7c:71:b7:c4:51:d5:21:7c:e4:24:ab:e9:
74:7a:17:81:d6:43:d8:60:e0:c7:12:a8:b3:74:30:
2d:a9:20:bf:4a:14:87:f9:db:e7:f0:e6:54:1c:8a:
8d:79:46:28:8a:0f:10:49:ba:e3:de:b7:6e:0a:38:
0b:0c:7f:1a:b0:b5:25:22:8a:be:80:c6:0b:8a:74:
7b:8a:2c:7d:14:92:ed:47:ff:1e:45:fd:b7:c6:f4:
d6:a8:c1:b5:ff:f5:82:8d:c7:22:c4:39:1e:30:05:
2f:10:92:f5:a5:52:19:5a:ad:31:26:30:5c:8d:94:
52:47:c9:9e:a9:33:a1:35:bd:da:a9:1f:fb:c5:aa:
12:68:3a:d2:69:6c:63:5a:35:d7:c0:00:93:de:f5:
7f:4d:9d:7c:01:b0:5a:fc:e3:e5:a8:53:54:37:95:
bd:47:d6:34:bd:56:04:df:c9:ca:9a:65:90:19:55:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:8C:A4:DC:0E:83:95:0C:B0:6F:36:D3:EC:30:59:7E:EE:74:89
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36302e36342e302f31392d3139203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.60.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:d6:b7:3b:16:59:38:17:7d:9f:5c:5b:e4:2e:fa:05:31:a5:
22:2a:c4:13:60:d0:51:eb:f0:65:ad:c8:89:30:cd:71:de:03:
35:c0:c6:a4:d4:3a:f0:5c:a0:46:bc:fc:8f:37:4d:f5:d5:e9:
c7:f7:be:99:16:c9:03:71:84:8f:15:c6:f0:4c:54:a1:76:0d:
47:3e:a6:16:0b:0a:fc:91:d7:b8:1b:9b:b2:63:d9:93:c2:4c:
20:47:b1:f1:1e:4d:29:75:c1:b1:01:4b:a4:69:67:c4:8c:fb:
40:96:d6:9f:1d:ed:c3:47:25:88:a0:f7:25:f2:a2:0d:8b:f6:
ef:8d:4b:78:27:7f:80:1b:1c:82:67:62:74:6a:9f:60:41:6e:
fd:45:79:a9:4d:e6:f2:9d:37:0a:05:94:d3:c4:d3:e8:9d:1d:
b6:7c:44:37:ef:46:ba:ac:29:f4:28:78:9c:2d:50:9c:48:9b:
38:e4:f4:c1:3a:fe:41:4d:db:ff:c3:c7:b0:d8:de:23:59:bc:
04:56:79:06:39:56:a4:37:e9:fa:18:f3:05:2e:be:53:2d:20:
31:1d:20:b0:f0:8a:cf:ba:4a:c3:55:ba:fb:e1:a1:a4:2b:59:
9c:1d:31:91:14:75:4e:47:27:2e:80:f3:fd:13:b8:67:9c:2e:
f3:c3:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org