Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38372e3131322e302f32302d3230203d3e203238323230.roa
File: 3138372e38372e3131322e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier: JhQmL2LZabl6HAEC8VFNelOVKWf7US3Rmgmp4qBe53U=
Subject key identifier: 60:D6:6E:BE:5D:12:CE:A1:AE:CF:8D:8B:38:90:70:2A:72:B3:CB:AD
Certificate issuer: /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial: 6FE9C5228549D4ADD54B902E6113CC387E6F2CBA
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38372e3131322e302f32302d3230203d3e203238323230.roa
Signing time: Tue 12 Mar 2024 19:51:19 +0000
ROA not before: Tue 12 Mar 2024 19:46:19 +0000
ROA not after: Tue 11 Mar 2025 19:51:19 +0000
asID: 28220
IP address blocks: 187.87.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e9:c5:22:85:49:d4:ad:d5:4b:90:2e:61:13:cc:38:7e:6f:2c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Validity
Not Before: Mar 12 19:46:19 2024 GMT
Not After : Mar 11 19:51:19 2025 GMT
Subject: CN=60D66EBE5D12CEA1AECF8D8B3890702A72B3CBAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:2d:a3:9e:5e:62:19:b4:cf:c4:8b:fa:d8:
46:53:ed:cd:b3:ed:60:dc:55:99:8e:b8:6a:75:61:
cc:3f:51:78:26:31:15:fd:63:df:f0:3f:40:e4:13:
ca:18:69:5f:c6:3f:4f:1d:65:16:31:cf:2f:a4:3f:
4b:e3:3b:4c:35:78:02:1a:dc:13:55:0b:5b:9d:12:
27:ac:64:49:a3:61:8d:06:f9:60:06:2d:a2:12:b7:
96:c4:9a:64:a9:4d:cf:55:08:c4:fb:f0:5f:6d:46:
3d:bd:b9:ad:fa:3a:74:b3:ae:f9:15:e3:cb:a1:1d:
46:d8:8e:21:3a:f8:64:68:7c:81:cb:bb:ca:a5:65:
36:bc:ca:c1:65:e0:ca:75:b8:35:43:0d:42:e1:8c:
ac:ef:c0:6e:4c:9c:e2:42:70:1d:d9:ad:1b:6b:ff:
a0:4b:7d:20:58:25:ec:38:2a:b7:1c:f2:d8:d6:4c:
72:a1:b8:00:e8:6a:16:8b:08:db:f4:80:82:b3:72:
ff:54:3e:72:a7:10:8f:bb:b8:b0:f0:11:ef:eb:5f:
bd:dc:3e:81:97:07:76:aa:5e:48:8b:73:df:29:19:
2a:65:7d:eb:58:a8:07:c2:98:7a:cd:f6:5f:dd:44:
77:cc:9c:7b:36:30:11:38:91:7e:9d:ce:73:52:d5:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D6:6E:BE:5D:12:CE:A1:AE:CF:8D:8B:38:90:70:2A:72:B3:CB:AD
X509v3 Authority Key Identifier:
keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38372e3131322e302f32302d3230203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:1a:fb:dc:4f:0a:c1:3b:44:6d:de:12:19:b8:df:b2:d0:87:
c0:59:d2:71:f2:0e:f1:f8:44:58:52:df:72:62:45:3b:94:91:
e0:a7:b1:97:df:99:c2:5b:87:7d:21:c5:32:57:e4:ca:ab:29:
1e:1c:7e:d6:1c:32:41:1f:19:db:7f:c1:7b:78:a3:33:bd:b7:
d0:f3:43:de:83:0f:95:6a:fa:9c:42:ed:2f:dd:e2:55:76:da:
36:df:d7:80:47:f1:40:86:b2:bc:ab:84:df:40:33:1a:a8:e0:
3b:6e:fe:e7:92:03:5c:87:e3:0a:84:7b:4f:87:86:fc:6d:54:
3b:91:71:33:fb:02:cf:a5:45:a2:0d:1d:7e:04:41:74:5c:c5:
16:fd:89:9e:a0:35:5a:af:1a:fa:28:65:ad:50:6e:ab:25:8c:
19:72:6c:bf:92:4f:34:24:86:85:dd:75:4d:33:9f:66:a0:ed:
d3:62:91:3e:17:ef:8e:b9:d8:f7:8d:d3:c0:94:a4:98:6f:59:
56:b7:65:07:13:47:8e:77:d4:5c:7f:1b:84:f2:38:70:13:8b:
71:fe:68:3b:f8:99:c1:3a:16:a8:99:1a:a9:fe:b4:1b:84:ae:
31:61:e8:ac:f0:a9:27:03:47:a5:ec:c5:42:56:2f:92:9f:b1:
8f:c3:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org