Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/0/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
File: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (raw, json)
Hash identifier: eAvTlK5fL74jrh/NpRnhwHR1u/rimrx+gKdbXVWA4ak=
Subject key identifier: 90:20:00:05:3F:63:E5:D9:52:9B:00:44:80:92:1C:15:2E:79:82:0D
Certificate issuer: /CN=B51BF1DEFF172B265AF9CC7ABB757C8D760A358C
Certificate serial: 201FAFDDFB41E8DDEE32521610BFBD3AA9ACF590
Authority key identifier: B5:1B:F1:DE:FF:17:2B:26:5A:F9:CC:7A:BB:75:7C:8D:76:0A:35:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B51BF1DEFF172B265AF9CC7ABB757C8D760A358C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/0/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
Signing time: Wed 03 Jan 2024 18:49:17 +0000
ROA not before: Wed 03 Jan 2024 18:44:17 +0000
ROA not after: Wed 01 Jan 2025 18:49:17 +0000
asID: 264120
IP address blocks: 138.97.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1f:af:dd:fb:41:e8:dd:ee:32:52:16:10:bf:bd:3a:a9:ac:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B51BF1DEFF172B265AF9CC7ABB757C8D760A358C
Validity
Not Before: Jan 3 18:44:17 2024 GMT
Not After : Jan 1 18:49:17 2025 GMT
Subject: CN=902000053F63E5D9529B004480921C152E79820D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:8b:09:36:b7:b2:7e:b6:fa:c8:ab:ba:da:
26:1a:86:3e:00:40:b3:22:b2:12:94:8c:29:e3:3c:
6c:80:0d:2d:81:f7:7a:b7:41:30:3f:1f:9c:93:bc:
ec:ff:ff:d2:bc:3d:d8:b8:ab:28:b8:7d:fc:94:c9:
f5:4e:82:38:cc:25:54:87:a3:7d:6f:0a:64:ee:33:
fc:f7:73:6a:a5:4f:55:51:b5:58:27:56:43:ca:ee:
61:2c:8e:a1:e2:d6:aa:ac:6f:7f:b5:8b:9a:4c:79:
2f:c3:c3:b6:08:27:fc:09:eb:b8:d0:22:78:b0:d4:
be:cb:47:95:58:5c:3e:02:32:78:fb:62:6b:36:0d:
09:b1:7f:1d:d3:94:e1:30:5e:4f:0c:de:12:83:17:
2d:2a:b5:bd:3e:50:05:84:55:28:95:a6:4a:a5:14:
25:3d:83:09:1d:8e:b7:92:4e:8d:7b:59:bb:19:85:
b8:2d:25:d8:bb:64:09:99:36:f8:b5:41:8c:71:c2:
7b:c6:c7:8d:c5:54:2b:14:0e:52:90:59:13:12:ba:
e5:47:df:3d:0e:0b:5a:cd:d6:2b:4a:69:b2:32:51:
c5:2a:48:4d:86:c3:10:78:0f:b8:38:7a:e4:ff:c5:
33:e4:dd:5b:88:1f:e7:35:c2:89:b2:7b:40:56:90:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:00:05:3F:63:E5:D9:52:9B:00:44:80:92:1C:15:2E:79:82:0D
X509v3 Authority Key Identifier:
keyid:B5:1B:F1:DE:FF:17:2B:26:5A:F9:CC:7A:BB:75:7C:8D:76:0A:35:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/0/B51BF1DEFF172B265AF9CC7ABB757C8D760A358C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B51BF1DEFF172B265AF9CC7ABB757C8D760A358C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/0/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.40.0/22
Signature Algorithm: sha256WithRSAEncryption
87:b6:cc:7d:91:e1:2e:87:b5:ad:5c:55:e9:a1:5b:f6:c2:ad:
7d:73:c0:d1:12:1b:46:e0:e5:9f:e7:23:f3:ac:e0:50:66:42:
5e:42:0b:ef:af:2b:e0:3b:52:ee:1f:41:5b:25:85:2d:0c:c1:
51:33:94:4f:e5:1e:90:74:8f:cf:6a:46:d4:ad:dd:6a:ae:ab:
1e:a1:68:c0:ad:dd:f8:bb:78:a2:63:45:51:6b:c1:04:43:86:
75:92:52:93:e0:a9:1c:c6:ad:77:8e:9a:59:98:15:de:7f:7b:
42:4e:93:80:a8:7c:3b:f9:2f:38:58:9f:09:31:b3:bf:94:8b:
06:db:c0:65:e8:c5:1a:c3:ed:5f:c2:8c:94:63:2a:6b:bd:03:
2c:4a:f2:63:e3:39:2a:b4:e1:b4:60:af:bb:d5:09:76:1d:0c:
5c:f0:80:c8:34:0e:30:a3:fd:07:05:f2:29:36:8e:89:f7:af:
19:f0:b8:63:c2:e1:10:3b:62:03:14:37:e0:0b:37:45:95:a4:
38:c2:a5:75:1c:9d:66:79:a8:08:94:3f:96:f1:b4:2c:2a:3e:
06:40:1b:1b:2e:83:04:f0:6e:70:17:2d:44:ed:66:9d:19:c3:
1d:a0:a5:21:25:6d:9a:c0:af:33:08:a8:93:38:3c:d6:e9:a1:
96:76:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org