Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138372e302e3137362e302f32302d3234203d3e203238323431.roa
File: 3138372e302e3137362e302f32302d3234203d3e203238323431.roa (raw, json)
Hash identifier: ZQm6gZ8glxKLbfuI3uSCCPENKKUJCjXgYKnHu3Zuv4E=
Subject key identifier: 6E:A7:03:BC:A2:2F:52:A1:14:20:90:E8:D0:70:6E:78:0A:BD:CF:9E
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 40A4214C7F78FE9B785C5D18F9B26E821173DA2E
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138372e302e3137362e302f32302d3234203d3e203238323431.roa
Signing time: Fri 03 May 2024 21:18:58 +0000
ROA not before: Fri 03 May 2024 21:13:58 +0000
ROA not after: Fri 02 May 2025 21:18:58 +0000
asID: 28241
IP address blocks: 187.0.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a4:21:4c:7f:78:fe:9b:78:5c:5d:18:f9:b2:6e:82:11:73:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:13:58 2024 GMT
Not After : May 2 21:18:58 2025 GMT
Subject: CN=6EA703BCA22F52A1142090E8D0706E780ABDCF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:a9:e5:19:4a:81:a5:48:11:f8:53:54:96:
bf:bd:57:91:14:59:e4:45:37:59:f8:3b:06:8c:b0:
82:f7:02:ca:24:08:0e:59:f8:77:f9:d1:5f:f9:3b:
25:c1:f4:b5:16:86:fc:48:eb:44:41:1e:fd:71:3b:
0f:a1:5a:a8:bc:9d:c2:ab:22:2c:1f:63:fc:2d:a3:
30:f5:3f:2e:f1:b8:2b:db:0d:b8:c8:f6:7e:9a:be:
de:d3:65:57:8c:36:44:d0:d0:70:72:aa:ec:b5:dd:
c1:43:da:4c:38:a4:91:2d:90:6a:4b:ff:6e:35:79:
57:fa:ad:a9:ee:c2:45:cd:77:35:9c:5e:5c:3b:4c:
05:c7:f8:8b:3b:7a:fa:58:fc:49:4c:5d:da:f7:0e:
22:b5:b6:45:79:ec:d9:4e:dc:e0:1a:6d:2f:44:ea:
64:a3:92:22:4e:a0:ac:00:1a:10:07:07:22:e0:d6:
69:94:1f:55:67:16:86:91:a5:e8:7f:f7:3f:bf:76:
a8:af:61:a6:f9:65:8f:7b:59:1a:1f:d9:fa:33:10:
fa:4a:3b:72:5e:8d:2b:20:07:b2:67:48:64:2e:7b:
60:d4:da:5e:67:13:61:ef:ef:5d:94:c4:70:79:65:
3e:0a:5f:90:a1:a3:12:ab:f3:64:a3:00:60:65:de:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A7:03:BC:A2:2F:52:A1:14:20:90:E8:D0:70:6E:78:0A:BD:CF:9E
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3138372e302e3137362e302f32302d3234203d3e203238323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.176.0/20
Signature Algorithm: sha256WithRSAEncryption
20:8c:c2:c6:a1:cc:87:b9:1c:e5:84:f0:3a:31:5b:24:08:0c:
00:60:cc:f7:32:97:91:80:25:37:d6:de:1d:69:dd:dd:3f:42:
39:d9:97:46:88:00:e4:fe:eb:00:91:8a:c5:81:28:18:bb:b2:
9b:ec:1b:ed:b6:86:7c:21:2a:dc:f2:ff:95:eb:c7:33:44:a9:
3c:b6:9e:2c:59:ce:82:f2:4f:8e:0e:59:5d:46:eb:28:84:f0:
b4:48:28:d2:5d:89:94:0c:fd:b6:7e:b7:10:ac:d0:39:30:50:
a9:1e:6a:0c:dc:d8:ff:d2:c7:47:54:0a:b6:ee:c3:f1:45:94:
3b:d2:36:86:15:73:91:c0:db:10:d0:0c:28:60:b3:9d:b1:84:
1a:69:96:74:2f:6f:b1:e1:30:ac:fd:67:a0:b4:ce:24:f0:52:
b5:1f:0c:12:f9:a9:33:5b:60:80:83:f0:d3:51:6b:30:1a:ba:
4a:35:eb:8d:f0:ca:64:5e:35:4b:1e:5d:e2:7e:24:d2:b2:ef:
a1:c1:50:3f:e7:f6:df:7c:bf:c9:93:51:c2:7a:20:a8:07:b5:
67:1f:45:92:d3:ac:bc:9e:8f:ad:6c:95:ee:5d:dd:d7:3a:cd:
e7:3a:8d:73:af:54:df:c7:e5:64:c8:f7:0f:e2:94:39:1b:b8:
1b:19:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org