Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32302d3230203d3e203533303539.roa
File: 3138372e38362e39362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier: EWuN35oWH27ze5eTrX995oMcOJ6R0IoMqyI83GuL6qI=
Subject key identifier: 9D:F7:66:CC:FE:0D:50:78:69:9F:8E:2B:44:11:9D:04:A7:5A:03:A0
Certificate issuer: /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial: 18DA66B8496AB47690818C9FF46957576979CE66
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32302d3230203d3e203533303539.roa
Signing time: Fri 03 Mar 2023 12:19:08 +0000
ROA not before: Fri 03 Mar 2023 12:14:08 +0000
ROA not after: Fri 01 Mar 2024 12:19:08 +0000
asID: 53059
IP address blocks: 187.86.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:da:66:b8:49:6a:b4:76:90:81:8c:9f:f4:69:57:57:69:79:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Validity
Not Before: Mar 3 12:14:08 2023 GMT
Not After : Mar 1 12:19:08 2024 GMT
Subject: CN=9DF766CCFE0D5078699F8E2B44119D04A75A03A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:6d:30:48:3b:e0:f7:37:a0:fc:5a:83:ed:
d7:f4:78:65:23:d4:d8:8d:fc:f1:5b:ff:8a:5a:81:
b2:e6:58:5e:84:62:a7:e3:60:d0:aa:1f:26:c9:ad:
bd:90:13:43:95:31:e0:08:5f:fd:9d:44:12:71:ec:
b7:a0:f1:fb:d3:50:7f:9d:64:48:a1:fd:bd:33:92:
45:1f:25:ca:28:71:01:a4:88:07:c1:25:f3:63:f8:
0b:be:15:05:89:1b:4b:66:87:64:3f:ae:b5:39:73:
2a:e7:42:30:b6:f2:5b:f0:d1:f9:a0:f6:78:b0:79:
27:41:a3:7b:f3:eb:4c:14:7a:55:3f:90:79:4f:a9:
d3:24:fa:6b:08:3c:ce:92:12:33:71:47:fd:81:a4:
91:bc:52:25:87:d4:15:cf:13:c3:74:c0:51:43:b3:
b8:9f:4f:46:98:6f:b7:73:f0:13:f7:88:af:b9:90:
e9:6e:68:23:dd:a5:a5:4d:0a:42:cc:07:45:4f:34:
26:ef:d4:3d:38:54:6b:44:11:13:50:32:df:31:11:
68:bd:48:98:7e:77:7d:30:63:79:37:de:9a:7b:5f:
ea:40:6d:3d:7c:8f:6f:7e:52:64:14:93:46:69:62:
59:d1:c8:5c:b1:12:11:d1:95:30:08:3f:2c:86:19:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:66:CC:FE:0D:50:78:69:9F:8E:2B:44:11:9D:04:A7:5A:03:A0
X509v3 Authority Key Identifier:
keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32302d3230203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/20
Signature Algorithm: sha256WithRSAEncryption
be:f6:aa:d6:06:0f:f4:5c:2e:7d:ee:5b:3e:eb:e1:d8:0a:9a:
9e:fe:3e:d3:c8:10:4c:03:c6:98:d4:30:49:0e:c3:bf:ed:57:
7c:51:e6:17:92:e5:97:4c:b6:6f:54:da:68:8e:69:ff:b3:37:
6f:24:54:df:0c:73:2b:f7:31:e4:eb:7d:33:18:8d:e7:24:6e:
8a:71:7e:f5:4b:92:95:38:b2:86:79:4b:8b:c5:73:4c:4d:0c:
2a:8b:b4:17:1d:24:24:c6:b9:c5:b1:c9:97:6c:6a:88:53:80:
f1:58:ec:00:f7:ec:98:6b:9d:2d:35:b8:71:c5:b1:cb:1b:99:
d8:49:54:fe:6a:c4:09:bd:91:49:59:3d:29:1c:7f:e8:9a:36:
75:84:27:65:d5:07:c0:09:3c:4f:80:6d:39:2c:19:18:1b:92:
51:e1:d1:10:f6:bf:62:12:6a:fe:24:2b:b2:91:70:2f:c0:ef:
c6:a9:44:95:dc:ea:2b:9f:41:76:39:0f:f4:a3:1a:17:e8:ea:
1c:6b:1c:98:50:a5:4a:fe:2a:2c:dd:e1:e9:89:5d:46:46:87:
e3:d5:3d:e0:3d:9c:36:fe:ca:ed:24:ec:fd:e1:df:46:a6:f7:
87:98:e3:cb:24:dd:45:b8:8d:da:c5:cd:82:56:20:2c:3c:d4:
09:94:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org