Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32312d3231203d3e203238323230.roa
File: 3138372e38362e39362e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: H7etjFxVh6g1YzRU0rsMs4SFMMPERZqwfVjPoxNaCuU=
Subject key identifier: AE:C3:EF:FA:A8:67:7C:EF:E9:A1:5E:CE:CD:EA:C0:02:10:F5:29:A2
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 766B68A43E4D6E15BE17C7304693D9FE3BCA9A66
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32312d3231203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:18 +0000
ROA not before: Tue 12 Mar 2024 19:46:18 +0000
ROA not after: Tue 11 Mar 2025 19:51:18 +0000
asID: 28220
IP address blocks: 187.86.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6b:68:a4:3e:4d:6e:15:be:17:c7:30:46:93:d9:fe:3b:ca:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:18 2024 GMT
Not After : Mar 11 19:51:18 2025 GMT
Subject: CN=AEC3EFFAA8677CEFE9A15ECECDEAC00210F529A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:57:43:52:ce:bb:f1:84:cf:38:39:d7:34:
ad:12:07:58:d6:41:e3:43:4e:4b:fb:98:2d:c8:a9:
85:da:41:7b:dc:a4:76:68:6c:14:2b:14:4f:83:b8:
06:4e:0b:35:fe:01:c6:c3:8f:13:b1:d6:01:be:55:
0f:ba:e0:1d:e6:ee:76:f2:dc:7e:71:5c:c1:cd:df:
4f:6f:bc:ad:60:25:41:ef:3d:40:a1:c5:de:fd:d0:
a9:10:0b:1d:ca:ea:22:38:38:ea:54:06:2d:18:65:
b3:48:fa:2c:09:fa:93:f0:fc:87:e1:85:6d:32:44:
10:dd:0f:2f:49:13:6c:f4:ca:68:fc:e6:96:40:71:
78:77:74:89:17:bd:a8:7d:be:19:de:48:4f:b0:ab:
f3:26:20:40:f9:c2:b1:95:1e:a5:e4:32:9c:d9:42:
d0:1c:85:c7:02:2b:e0:50:31:29:23:19:40:9f:db:
ca:5d:11:c4:9a:27:61:16:04:20:c0:1f:25:f7:4d:
d7:6c:cc:22:51:ef:0a:3d:34:9d:1d:da:44:76:62:
fa:de:9e:29:a1:26:e8:d2:c9:9a:e3:e0:fd:0e:46:
6f:6e:77:5f:e0:12:5b:78:de:01:a8:db:fb:8c:52:
e2:e7:8d:bf:14:12:21:d3:16:4a:8a:ad:6c:82:04:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C3:EF:FA:A8:67:7C:EF:E9:A1:5E:CE:CD:EA:C0:02:10:F5:29:A2
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:da:49:4f:4a:36:31:ca:3a:24:0d:ef:54:8c:52:dc:08:6a:
70:97:16:d6:77:a3:3c:93:31:d9:a6:e8:33:30:40:13:2f:a6:
24:4b:fd:22:8d:c1:47:ad:e3:5b:29:df:7a:21:98:f8:63:52:
7e:61:b7:ae:d1:d5:1a:5b:9f:1a:24:29:df:7e:3d:34:68:3e:
69:a7:d2:ad:e0:97:87:df:a5:fa:12:43:10:ea:c0:95:10:76:
cd:8a:6f:b5:79:9e:aa:dc:56:82:e4:93:67:f6:d6:19:41:a2:
7f:66:bb:97:8a:38:aa:5c:3f:af:d3:cf:88:82:0f:e6:fc:44:
63:d7:a1:ad:5b:20:d6:49:c3:28:ef:85:b0:ba:17:e4:52:dd:
d5:3f:6c:5b:7b:fb:70:76:ea:6f:48:0c:d8:ff:bd:3a:16:dc:
ae:16:82:23:a4:44:4e:b9:68:16:46:50:09:7b:dd:fb:d0:71:
48:19:ef:ba:d7:ab:bd:8d:2a:92:d0:e0:77:46:a0:8c:4b:48:
18:2e:d2:46:d5:ec:4c:ac:9e:a6:b4:e3:82:dd:18:87:5e:a4:
27:8c:24:af:14:8f:8a:dd:5f:10:eb:ac:6f:7b:53:db:e5:92:
99:fb:b2:99:4a:26:e4:63:a2:70:d4:12:da:da:1d:96:74:29:
6f:e1:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org