Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e20323033.roa
File: 3133382e3230342e3232302e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier: txy7AqbIb2pDz6tA3wUQ+ccTCIK8IgYf3R2NdnRD3a4=
Subject key identifier: D1:25:02:3C:5E:AB:21:88:0A:B3:19:E7:3B:DA:53:2E:DE:83:64:D3
Certificate issuer: /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial: 27DC1C48CB8B0A101CE5E0BB2A54EC9ADD9EA467
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e20323033.roa
Signing time: Thu 23 Feb 2023 16:51:51 +0000
ROA not before: Thu 23 Feb 2023 16:46:51 +0000
ROA not after: Thu 22 Feb 2024 16:51:51 +0000
asID: 203
IP address blocks: 138.204.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:dc:1c:48:cb:8b:0a:10:1c:e5:e0:bb:2a:54:ec:9a:dd:9e:a4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Validity
Not Before: Feb 23 16:46:51 2023 GMT
Not After : Feb 22 16:51:51 2024 GMT
Subject: CN=D125023C5EAB21880AB319E73BDA532EDE8364D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:38:bc:f2:fa:a4:cf:8e:10:71:e6:ed:db:
77:3b:c1:53:b1:40:57:7a:5a:e6:fe:ec:ee:d2:b0:
f3:68:f4:2e:c7:4c:1f:7d:80:f8:ad:99:bd:f6:61:
ff:b9:44:aa:ce:d4:6e:97:a8:d5:82:55:f6:0c:77:
b6:bf:2e:59:cb:27:5d:f8:de:b5:be:b9:f3:54:68:
cf:50:87:4d:a2:47:31:8f:e9:f7:10:30:bb:05:dd:
21:1b:53:eb:9f:78:96:8b:c6:e8:aa:6a:90:46:c9:
90:f7:82:21:bf:f6:bf:27:ca:f5:94:d4:54:b6:8a:
09:69:cc:e3:d8:ba:35:c4:97:1e:2d:54:5d:09:22:
ba:4a:79:86:3e:ff:8d:02:7c:4a:39:80:e2:c8:dc:
71:66:a8:73:2a:cb:aa:c4:a4:64:5f:47:bf:5b:bc:
dd:85:f6:56:9e:19:44:f1:86:14:56:43:fd:63:38:
f3:d0:a5:a4:af:f5:3d:2b:f1:9e:f9:e3:33:f3:0e:
72:4b:a8:f2:8b:6b:91:7f:42:93:67:9a:ac:3a:d3:
61:96:07:bf:8a:4a:ff:df:7c:4e:6d:67:86:fd:7a:
4b:00:4d:19:45:d0:7a:5f:08:8e:05:c7:06:fe:49:
63:f2:4b:24:54:94:30:02:d2:64:91:b4:60:c2:98:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:02:3C:5E:AB:21:88:0A:B3:19:E7:3B:DA:53:2E:DE:83:64:D3
X509v3 Authority Key Identifier:
keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.220.0/22
Signature Algorithm: sha256WithRSAEncryption
66:09:d4:5b:fd:e9:cd:e4:2d:86:29:99:b5:0b:20:ac:90:fa:
6c:16:b3:f9:b7:2b:38:c5:d2:2e:14:14:c5:67:44:5c:97:43:
40:43:57:14:06:9b:3d:1f:78:3a:48:8e:57:e6:7e:b6:50:5b:
5a:6f:75:07:db:a9:c6:70:9a:aa:c7:b7:c5:10:6e:e7:69:51:
43:d1:31:72:f3:f3:fe:cf:b3:b8:9d:75:7d:ac:29:9c:78:71:
7c:19:c7:0c:7d:0b:5d:79:93:13:37:cc:bf:56:2a:fd:d1:a8:
e2:53:c0:91:ea:c6:76:ca:10:30:cb:1a:68:78:47:68:5e:e3:
ee:e3:bd:06:28:45:ba:3c:13:62:34:a5:6d:d3:95:99:8c:90:
75:6b:e2:29:57:b6:35:a7:f5:74:c8:ae:6b:df:0d:ca:9f:6e:
7f:d7:84:f4:be:a3:cb:e1:0d:5e:13:68:96:1c:e9:08:20:a5:
ec:18:cf:9d:32:0d:35:21:25:3f:7f:ed:db:b7:0e:28:69:61:
b6:f1:5f:c4:39:16:56:24:62:b6:1b:f1:1c:f0:17:ba:c3:13:
00:47:64:2a:e3:e2:a1:cb:df:ff:6f:be:ad:11:50:bd:f5:11:
0d:68:6a:e2:60:da:b1:4b:db:dc:e4:c5:7b:d6:8e:fd:b3:5b:
93:6e:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org