Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3230302e3233332e38382e302f32312d3231203d3e203238323230.roa
File: 3230302e3233332e38382e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: KTfAjqgUG1MVpYnjHrTLI/g64L1iA03yN+jj4Kds0xA=
Subject key identifier: 11:2A:FA:DC:30:16:D7:F2:75:EF:F1:3C:D1:6E:13:1C:16:18:2C:73
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 3F385BD53F2B9D1FD7C532F5AF8256E480FA5513
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3230302e3233332e38382e302f32312d3231203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:16 +0000
ROA not before: Mon 08 Apr 2024 20:00:16 +0000
ROA not after: Mon 07 Apr 2025 20:05:16 +0000
asID: 28220
IP address blocks: 200.233.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:38:5b:d5:3f:2b:9d:1f:d7:c5:32:f5:af:82:56:e4:80:fa:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:16 2024 GMT
Not After : Apr 7 20:05:16 2025 GMT
Subject: CN=112AFADC3016D7F275EFF13CD16E131C16182C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:cd:d7:a4:6f:6c:15:2c:a8:d4:71:bb:5b:
cb:4d:ed:43:ed:33:1e:6c:b8:2e:82:7b:75:3c:10:
db:d6:0e:7a:b5:4e:c0:a0:dc:15:5e:79:ae:e0:4b:
9a:e7:8c:9e:94:0a:55:37:24:03:7d:cf:c3:61:9d:
5f:ba:71:63:f1:a9:d6:99:a4:d6:59:bc:51:e9:4b:
ee:51:34:cb:a4:6b:18:c2:59:44:d6:c5:a0:5c:1c:
e5:56:99:df:77:2e:63:bb:a6:ca:ee:e4:9e:77:c5:
78:1d:f4:c2:40:5e:5f:26:c4:9f:08:02:8f:74:f6:
df:4b:df:6a:3c:39:53:e9:ea:90:6a:69:83:af:76:
ee:c0:2b:20:6a:61:e3:f4:93:62:a4:90:30:0c:8d:
2e:28:3c:ad:5d:41:3b:d7:d9:e2:c2:f9:45:ab:fe:
b5:aa:68:a0:16:50:f2:a4:54:04:20:f5:96:a0:a0:
80:92:d6:78:2b:63:64:f7:51:83:34:0d:a9:b5:b2:
92:db:d3:5a:0d:54:57:59:d4:8e:db:0e:ec:d1:db:
65:a8:df:f6:64:c3:82:21:98:35:aa:47:49:76:28:
ab:b4:41:7c:6a:da:af:8d:5e:29:1a:79:3a:91:e8:
7d:64:f2:ca:88:ba:40:49:97:a5:fc:bf:a8:79:54:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:FA:DC:30:16:D7:F2:75:EF:F1:3C:D1:6E:13:1C:16:18:2C:73
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3230302e3233332e38382e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:68:5d:4e:6b:83:83:0e:72:11:23:7c:2b:11:c4:ff:92:79:
68:4b:08:f7:7e:4b:cd:fc:7e:86:11:da:60:d4:be:b8:a9:19:
b5:23:d0:96:b1:08:1f:cf:3e:14:a9:54:61:d3:2f:d9:6e:5b:
c3:f1:bd:9b:51:03:71:5c:41:42:ae:e7:d6:f4:58:f1:f2:fa:
17:7f:a6:26:43:59:23:d0:dd:af:1c:ff:55:dd:d0:44:55:5c:
b2:35:69:e1:6b:c0:48:a4:06:42:d4:9a:9b:99:79:d4:87:7d:
b1:b4:21:c4:6e:73:d9:3e:cb:74:c4:fb:94:ee:4d:1b:01:f3:
27:3c:88:8d:e7:1e:4c:2a:65:d8:14:c6:8e:e0:83:04:f4:9e:
ee:46:4f:db:f7:78:e7:5f:c4:fc:b4:eb:be:4d:a6:92:ac:4c:
28:80:30:46:27:5f:d4:0c:95:53:a3:59:33:84:50:26:d0:b6:
5b:d4:c2:af:95:87:27:18:e9:ec:03:49:cc:68:6d:ee:c8:0c:
39:95:8d:69:29:c5:89:7f:2d:37:91:2b:14:ce:de:a9:b3:e9:
16:b7:0d:a4:51:a9:a9:92:f5:4a:c7:5d:2b:88:2c:31:5e:26:
24:26:3c:b4:f2:c3:06:e5:f1:e3:35:58:e8:26:b2:e1:17:c2:
7d:15:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org