Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/3133312e3235352e3133312e302f32342d3234203d3e20323731363538.roa
File: 3133312e3235352e3133312e302f32342d3234203d3e20323731363538.roa (raw, json)
Hash identifier: I1vqQrMmkRcLr8xec2HYOlMs9ZOm+4imttyFAshSyrI=
Subject key identifier: 48:3F:9D:F8:DB:E4:E5:F0:5D:D9:EC:4A:A2:87:94:DA:A6:91:1F:B1
Certificate issuer: /CN=161ABBC320A5379368876CB238330293202E742A
Certificate serial: 412FFCE22752388D67CD0A3B4D7775CB960207E3
Authority key identifier: 16:1A:BB:C3:20:A5:37:93:68:87:6C:B2:38:33:02:93:20:2E:74:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/161ABBC320A5379368876CB238330293202E742A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/3133312e3235352e3133312e302f32342d3234203d3e20323731363538.roa
Signing time: Fri 15 Mar 2024 17:41:54 +0000
ROA not before: Fri 15 Mar 2024 17:36:54 +0000
ROA not after: Fri 14 Mar 2025 17:41:54 +0000
asID: 271658
IP address blocks: 131.255.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2f:fc:e2:27:52:38:8d:67:cd:0a:3b:4d:77:75:cb:96:02:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161ABBC320A5379368876CB238330293202E742A
Validity
Not Before: Mar 15 17:36:54 2024 GMT
Not After : Mar 14 17:41:54 2025 GMT
Subject: CN=483F9DF8DBE4E5F05DD9EC4AA28794DAA6911FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:b6:49:0f:7d:43:cb:68:40:40:83:08:15:
e5:5c:06:c0:ac:05:e8:2f:0f:69:e3:b8:8b:e7:b3:
f5:55:52:bc:02:65:7b:5a:f4:8b:41:18:7b:37:56:
fc:19:db:8d:15:26:64:8b:9c:c8:13:0a:92:e9:7a:
ce:f0:96:76:15:b9:6b:64:35:d4:51:b4:fc:1d:0e:
d3:c7:d8:1a:5b:39:b3:06:3b:57:2b:d0:7c:3e:0b:
15:8f:09:3b:f3:f3:d1:47:c4:d0:82:f2:90:24:20:
14:58:54:a7:62:c7:a2:1b:28:8b:91:a5:da:3e:50:
1d:8e:3c:19:11:1d:f6:d6:9a:0b:e7:30:ed:32:33:
dc:78:e9:57:6b:d4:51:88:94:9f:a7:ab:12:43:c7:
be:04:e5:11:dc:14:7c:3b:13:12:aa:f3:a2:62:f9:
d1:aa:67:03:9a:50:b1:63:b8:1c:d2:2b:20:33:ff:
16:a4:9f:c6:41:82:4e:13:8e:e2:90:b4:ff:d2:be:
2d:b6:5b:83:40:db:49:81:9f:09:a3:cd:42:5b:3d:
08:54:43:71:42:03:c3:c4:24:07:a1:1f:93:82:6e:
d3:9b:a6:4f:74:a4:b2:d9:c2:b4:09:47:b8:cf:26:
1f:a7:16:67:4c:df:da:ef:58:14:f9:be:1b:84:2e:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:9D:F8:DB:E4:E5:F0:5D:D9:EC:4A:A2:87:94:DA:A6:91:1F:B1
X509v3 Authority Key Identifier:
keyid:16:1A:BB:C3:20:A5:37:93:68:87:6C:B2:38:33:02:93:20:2E:74:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/161ABBC320A5379368876CB238330293202E742A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/161ABBC320A5379368876CB238330293202E742A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/3133312e3235352e3133312e302f32342d3234203d3e20323731363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:49:52:ff:d2:85:22:ed:30:f0:87:6e:23:bd:ac:86:92:8e:
dd:96:41:b0:55:4a:ad:15:14:6c:5b:43:77:8a:17:88:2d:59:
b1:e9:94:63:86:4b:5a:c9:d1:fc:e5:52:0f:a5:c8:f1:cc:85:
65:4c:d5:6b:f5:c5:d6:bb:6b:a6:b3:7d:a6:c2:53:03:d2:9a:
48:50:b4:29:3c:b1:aa:6d:a3:4d:12:e3:c0:92:2d:8c:bb:ff:
e0:de:61:ab:e2:d5:7d:85:2d:89:26:58:a5:91:b4:52:5e:e5:
e3:5e:08:b6:ee:57:cd:5a:a6:28:e5:2a:e7:31:d0:d5:76:3a:
79:07:63:81:0b:ef:16:71:fb:b3:ac:0f:cd:fb:ca:9f:ff:1f:
85:d3:19:83:8e:ac:8a:63:a0:24:d1:09:e0:86:a3:a0:e3:88:
19:2e:2e:23:a8:d5:28:b8:91:e0:50:76:d1:b2:b4:9f:e3:21:
f6:a1:75:70:d1:2b:ca:f9:8f:8f:e2:10:ce:9b:c0:d8:54:ea:
37:4d:de:be:e2:79:2d:e1:cf:64:96:f1:a2:78:41:f0:e1:80:
67:57:68:8b:33:d6:83:e0:30:cd:96:20:44:6e:da:f8:b7:07:
29:e2:96:b7:a4:db:ae:d1:5a:51:b7:ed:1d:13:ed:af:f8:92:
38:14:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org