Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137312e302f32342d3234203d3e20323634343337.roa
File: 3133312e3232312e3137312e302f32342d3234203d3e20323634343337.roa (raw, json)
Hash identifier: bsVJozI88pFfTH2h2dvyhlWdqsdSU4IzSJPUryhM/XQ=
Subject key identifier: B9:02:A9:DD:94:83:A6:19:AE:61:B2:AE:A7:C9:5D:96:17:85:33:6F
Certificate issuer: /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial: 12284B0EED708D12FD0B8549C0728369587AB4C0
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137312e302f32342d3234203d3e20323634343337.roa
Signing time: Thu 21 Sep 2023 11:25:37 +0000
ROA not before: Thu 21 Sep 2023 11:20:37 +0000
ROA not after: Thu 19 Sep 2024 11:25:37 +0000
asID: 264437
IP address blocks: 131.221.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:28:4b:0e:ed:70:8d:12:fd:0b:85:49:c0:72:83:69:58:7a:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Validity
Not Before: Sep 21 11:20:37 2023 GMT
Not After : Sep 19 11:25:37 2024 GMT
Subject: CN=B902A9DD9483A619AE61B2AEA7C95D961785336F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:07:cd:a9:8f:26:ce:51:b1:4f:77:90:9c:
1f:29:00:77:74:d7:b7:b4:90:af:25:c3:e9:1e:b6:
60:e3:dd:9f:66:7d:2a:04:1c:94:0f:b0:20:c9:5e:
9c:93:10:2e:75:23:c8:b5:b2:7d:1c:a9:39:f8:75:
14:40:61:33:a4:4b:b3:6f:db:10:f5:76:0b:02:db:
b3:a4:af:e3:9e:48:c0:89:08:7b:41:9e:1b:09:d9:
7e:dd:63:d9:34:f1:a2:bf:92:d9:39:41:d2:6b:22:
c5:ff:1d:37:07:87:be:32:25:dd:eb:31:be:31:f1:
f0:dc:dd:03:39:0e:ab:50:ba:5e:6e:af:ea:34:af:
35:f6:7a:e4:0a:ae:09:98:f8:24:81:81:76:8f:b8:
06:5e:d1:db:c6:8c:6a:14:d8:91:d3:0a:45:05:21:
21:6e:2c:95:27:db:7f:9d:fa:26:60:60:e7:21:e6:
02:47:7d:47:7b:c5:82:a3:50:49:0b:54:6b:e8:70:
bb:de:4c:89:97:25:d7:4c:9e:e0:2c:3d:a9:bb:91:
bb:77:be:85:cd:d0:f7:a2:06:f6:53:54:6c:01:ff:
c3:87:5b:a7:26:ac:a6:83:41:1f:47:46:12:e4:a8:
e1:c1:31:65:47:93:ef:a0:e3:90:3b:81:9c:b2:c0:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:A9:DD:94:83:A6:19:AE:61:B2:AE:A7:C9:5D:96:17:85:33:6F
X509v3 Authority Key Identifier:
keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137312e302f32342d3234203d3e20323634343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.171.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ff:6f:59:43:16:e9:b6:92:cb:c6:d9:27:c0:c5:a4:cf:20:
f3:b2:7e:46:fc:05:55:e7:cc:b8:7d:b0:89:99:f6:f1:62:3c:
f4:72:29:91:4e:16:8a:3f:9c:a9:54:86:ec:5b:0a:47:38:ac:
a5:47:fd:db:7f:b2:24:66:ed:8a:2e:a1:b2:9f:b1:80:f5:95:
fb:be:e0:f3:49:23:1b:af:e5:21:0a:db:00:79:a4:6a:a9:db:
8b:69:7d:41:e5:1c:4d:09:27:b1:b7:f5:6a:da:3a:f5:f4:97:
e1:1c:79:19:e7:73:95:0d:be:a9:28:5b:7b:ce:82:70:be:01:
0c:35:f2:4d:6f:e6:6d:f4:68:59:09:ea:88:63:6a:31:86:83:
22:bd:d1:e6:a0:53:98:e5:30:73:56:db:90:5a:5d:05:6c:69:
4b:c7:99:6f:40:9e:78:87:a1:f0:c0:92:7a:74:2d:e9:90:78:
e0:b0:21:1d:de:c3:ba:e0:11:87:54:85:f5:e5:8e:dc:0b:a8:
2f:39:df:24:13:f8:53:b1:7b:91:19:94:a9:60:e7:e4:82:ec:
99:79:1f:2b:f4:0d:24:bf:46:c5:8d:42:6a:88:a3:e5:fe:4e:
1d:22:0c:a5:2c:40:87:fa:6a:f7:26:f8:3b:b7:8d:66:e1:ec:
d0:9b:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org