Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3234203d3e20323731363730.roa
File: 3230302e3135302e3235322e302f32342d3234203d3e20323731363730.roa (raw, json)
Hash identifier: UkQ7YnxD9bc8Y0MG+9AT8Yo79nQs0lN8OtMTxFGeZFo=
Subject key identifier: 2A:C8:83:64:D1:13:2D:A0:A9:A3:43:D2:BE:DA:00:6B:EC:53:BD:32
Certificate issuer: /CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Certificate serial: 757563CB5E50289DC095985BD17A1D2D593D7997
Authority key identifier: 86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3234203d3e20323731363730.roa
Signing time: Tue 10 Oct 2023 17:56:26 +0000
ROA not before: Tue 10 Oct 2023 17:51:26 +0000
ROA not after: Tue 08 Oct 2024 17:56:26 +0000
asID: 271670
IP address blocks: 200.150.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:75:63:cb:5e:50:28:9d:c0:95:98:5b:d1:7a:1d:2d:59:3d:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Validity
Not Before: Oct 10 17:51:26 2023 GMT
Not After : Oct 8 17:56:26 2024 GMT
Subject: CN=2AC88364D1132DA0A9A343D2BEDA006BEC53BD32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:ce:64:fd:14:5d:b6:4b:2f:be:a7:cb:ff:
3c:79:04:97:08:dc:ae:22:7c:75:80:cb:99:37:5f:
2c:0d:d5:7e:d7:60:c2:b9:94:8a:53:4a:35:1b:1c:
50:1c:b5:26:e4:fe:6a:b8:08:6d:b5:2f:f7:a2:67:
21:42:4f:3b:03:07:9e:b6:dd:0a:b1:cb:aa:66:51:
3a:70:f5:56:14:b0:33:63:5d:8c:99:3a:d0:18:01:
ef:ab:b3:dc:6d:75:39:5c:e3:b8:8f:74:19:09:20:
0c:fc:a2:8f:b1:b9:81:a5:c3:37:db:17:37:c6:a6:
30:55:f3:d6:5c:98:18:5a:29:ea:11:30:34:27:f1:
6e:6b:07:67:bc:35:f3:a4:16:ce:fb:1d:53:8d:79:
cd:d7:04:1d:fc:cf:de:0c:97:d9:8a:09:13:d1:1e:
d5:e2:70:0b:45:3f:8f:7b:32:c3:1a:e6:f7:4f:b5:
44:b5:67:78:a8:bc:aa:d5:c2:fd:83:3a:2b:75:81:
f9:94:8f:98:81:c0:94:0a:3a:17:0e:b8:24:a7:8d:
b2:07:9c:d0:6f:29:77:0c:eb:1c:02:1e:96:97:b1:
48:02:23:16:da:41:7d:88:ed:c7:5b:dd:21:ad:d3:
94:63:ef:15:75:d7:4b:e0:b0:8a:97:43:cc:c5:cc:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:83:64:D1:13:2D:A0:A9:A3:43:D2:BE:DA:00:6B:EC:53:BD:32
X509v3 Authority Key Identifier:
keyid:86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32342d3234203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.150.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a9:f9:aa:55:2a:20:2e:6d:16:15:96:b8:1f:5f:6f:9d:22:
f4:17:2a:61:55:b3:4f:67:f1:45:00:b1:c5:b2:86:7c:73:fd:
ef:6f:5b:fb:07:c9:94:10:62:a2:fa:b1:ba:65:05:49:ef:ea:
16:4a:1f:a1:19:95:3e:31:d1:aa:c4:84:19:43:0a:f9:4d:d7:
97:7c:55:88:12:cf:ac:cd:f7:3e:53:c9:12:a2:13:7a:d0:88:
dd:4d:bf:84:7f:50:f0:8f:c4:40:28:32:07:25:9f:52:0e:79:
cb:3d:cb:49:34:19:b8:aa:91:31:34:50:d2:bc:a6:63:0d:2e:
56:dc:ce:f1:bb:94:63:b7:4d:94:8f:76:62:47:c8:b6:df:e6:
13:f5:27:ad:3f:96:2f:00:aa:12:89:a6:3f:31:17:e5:57:ee:
d8:fc:79:98:60:e4:6c:93:c1:e8:79:22:04:13:00:17:6d:43:
94:3d:71:ed:70:2a:57:a6:57:32:65:9d:e8:69:a0:bf:a2:ee:
f0:15:b2:35:52:97:e1:b1:f2:9a:2c:ae:8f:7e:5e:a3:63:bc:
86:8e:ec:c4:98:fe:e9:fc:28:c1:1a:5e:92:b8:30:23:f6:56:
7d:47:a0:9c:9e:9c:78:8a:45:de:0e:ec:a4:e1:70:70:88:01:
fb:9f:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org