Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32302d3230203d3e203238323230.roa
File: 3138372e38362e39362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: h7pPoADkAACrgyizuRrCRdPiyKewhvaVnKWSGxv0ehs=
Subject key identifier: E7:10:F6:90:DC:CD:CB:39:A2:ED:2C:1F:47:54:68:0D:43:2D:55:8B
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 12B213F33837CA1E6437F5A6FBA0B66D44CD6DF0
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32302d3230203d3e203238323230.roa
Signing time: Wed 13 Mar 2024 00:22:54 +0000
ROA not before: Wed 13 Mar 2024 00:17:54 +0000
ROA not after: Wed 12 Mar 2025 00:22:54 +0000
asID: 28220
IP address blocks: 187.86.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b2:13:f3:38:37:ca:1e:64:37:f5:a6:fb:a0:b6:6d:44:cd:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 13 00:17:54 2024 GMT
Not After : Mar 12 00:22:54 2025 GMT
Subject: CN=E710F690DCCDCB39A2ED2C1F4754680D432D558B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:21:9a:da:e4:cc:37:c6:95:88:c1:33:c0:
12:55:16:59:0f:fe:7e:6d:70:ad:23:fb:21:c2:70:
6f:01:11:ff:84:67:cd:9e:52:b9:76:72:cd:c4:36:
33:1a:5c:7b:95:bd:52:9a:b4:db:e5:74:8c:3d:80:
a8:54:73:6f:0c:03:45:e3:fb:32:43:c0:33:15:3c:
b1:dc:cc:76:3e:b2:9f:2b:e6:2f:ea:05:d8:aa:4f:
67:a4:24:0e:5c:6d:b2:57:3b:43:aa:0b:f1:39:3d:
59:6f:60:39:e8:a3:62:a6:ec:57:56:8a:fe:f5:15:
9f:bb:fe:7c:40:9b:36:c6:5d:95:7d:11:5a:33:9d:
ff:cf:c7:d9:42:ff:d2:61:06:af:b8:c6:f1:04:7d:
3f:5c:85:f5:ae:dd:bb:f2:00:4a:61:c3:67:36:35:
e8:71:09:10:09:54:6e:3f:52:d9:bd:7a:02:db:2a:
b3:68:16:b8:4e:2a:ed:e2:65:97:e3:15:e5:b8:4b:
9d:8b:e6:c8:6f:fb:7b:3e:c1:cf:38:c2:11:9e:b0:
73:53:85:bb:7e:75:d1:9a:e1:2b:68:0c:f5:a5:63:
bf:9d:dc:7f:d6:ac:84:fa:19:7d:4a:2f:cc:ef:b4:
26:62:70:d4:f9:6f:2d:76:7d:a7:e7:72:e1:09:5b:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:F6:90:DC:CD:CB:39:A2:ED:2C:1F:47:54:68:0D:43:2D:55:8B
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/20
Signature Algorithm: sha256WithRSAEncryption
97:4e:41:a4:77:3a:b0:8f:c6:67:52:76:9c:a2:c8:55:0d:b2:
83:5d:68:50:8a:ff:5a:01:dc:e1:31:c6:61:34:67:40:d8:89:
eb:c1:95:b6:20:08:58:b8:c3:6f:82:c6:28:55:a9:cc:63:f6:
45:5f:3f:70:81:e9:3d:e4:ca:cb:13:bf:c6:ab:fa:09:84:14:
a5:c3:fa:d4:7b:5b:5e:90:85:e2:ec:e6:38:b5:5e:0d:2e:f3:
7f:5d:87:9a:83:39:66:e4:cf:7c:3e:a8:af:51:6c:96:d5:ee:
59:0a:18:43:df:5e:07:af:bf:02:f6:f9:87:b2:1b:f1:e0:d5:
f3:dd:01:5b:92:c7:77:b4:c2:cb:1b:dc:17:35:74:bf:4b:d5:
bd:b0:07:15:b0:46:5e:93:0e:29:84:0b:f5:2e:48:18:d4:c2:
9f:a8:3d:69:15:64:18:27:c3:51:bd:ad:8c:6a:e5:6e:25:40:
eb:dd:0f:3f:ae:26:c2:58:44:9d:c1:5e:4e:5d:92:32:d0:b4:
1d:5f:d7:e9:d1:11:95:50:ce:e8:8a:56:52:2a:c0:65:d7:98:
e6:86:80:d1:b3:89:a2:b4:84:19:f0:8f:54:e9:36:54:b9:1e:
7e:9b:98:a3:73:b7:1e:d9:1f:6e:17:6d:da:b5:e1:60:00:10:
7e:09:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org