Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e203238323730.roa
File: 3133312e3139362e37382e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier: I/ODrU6KiKT5wtkG+0LQpocKtpJs6vumszZztKsYeU4=
Subject key identifier: 1F:E4:09:6F:E5:EC:91:CC:78:0F:8D:BE:BC:07:E6:AD:A8:AA:F9:62
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 100DB097D50A5E238B09EE36A648F64A78390878
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 131.196.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0d:b0:97:d5:0a:5e:23:8b:09:ee:36:a6:48:f6:4a:78:39:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=1FE4096FE5EC91CC780F8DBEBC07E6ADA8AAF962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:e4:c9:c2:bf:6e:e6:bf:6d:53:aa:51:89:
51:f8:57:2b:2f:e1:af:08:7d:a5:8f:7d:1a:5e:4f:
72:fa:a0:bb:55:c3:e1:7c:0c:75:dc:80:79:b8:54:
43:11:1d:9a:e6:f1:98:d3:e3:74:e8:88:51:f1:2e:
8b:a7:2f:56:3d:55:a9:96:e4:2c:49:5f:08:fa:aa:
c3:d9:7e:a8:7e:ab:51:c0:47:cc:c2:73:59:85:ee:
39:d2:1c:4f:26:e7:61:28:03:22:dd:22:64:15:37:
f1:40:04:5c:77:82:2e:db:19:fa:21:1e:e7:4a:0c:
ba:9e:61:7b:98:c6:a9:d3:2d:b4:55:07:50:73:3a:
c8:94:f7:26:4a:b9:0f:96:13:29:01:27:1c:36:0b:
c5:39:3c:1c:4a:c9:9a:6c:e1:a2:c4:0a:93:63:06:
a1:55:b5:b8:47:36:24:76:18:85:45:b2:47:31:b5:
c5:43:e7:41:e7:9c:7b:1c:a9:b6:46:31:0d:35:10:
4f:cc:06:36:41:eb:1d:93:dc:da:f0:73:0d:70:ae:
82:3e:52:c8:b0:f1:7a:82:c6:9b:8c:50:73:4e:47:
42:de:04:b8:9b:67:a1:4a:4d:9f:ee:f6:11:cb:33:
e9:b8:b4:ba:8f:71:68:eb:cb:0e:e1:b2:16:56:3d:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:09:6F:E5:EC:91:CC:78:0F:8D:BE:BC:07:E6:AD:A8:AA:F9:62
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.78.0/23
Signature Algorithm: sha256WithRSAEncryption
15:6d:59:b8:af:80:3c:05:47:ed:84:63:c3:f8:5f:c2:87:98:
64:f8:4d:94:c1:0b:1b:3b:12:d5:56:78:b7:fd:1e:c6:27:dd:
a7:58:62:49:c3:6a:53:31:98:86:55:c5:75:94:55:45:53:13:
26:b0:8a:72:3a:04:3e:68:f0:94:4e:5a:d8:5e:c7:4e:36:14:
c3:83:be:8e:50:46:80:cf:9f:d9:48:e5:cb:0b:2d:19:e9:5a:
d1:58:a1:23:d3:42:d1:3a:d9:fd:43:24:05:86:35:40:c0:bd:
47:1b:67:1c:68:a8:90:d1:f5:78:18:3b:39:fc:c1:31:b3:69:
aa:5e:ea:7d:19:15:49:ee:e2:8c:0f:05:58:5b:8c:e2:8e:ff:
f1:84:04:76:b1:28:4a:d9:a4:2f:34:b1:91:6e:41:ea:fc:b7:
02:32:e9:07:20:0c:57:2f:ef:56:3e:0f:a0:87:fb:e0:0a:92:
c4:bc:a5:1e:6c:5c:bd:01:73:7e:18:4b:f4:d6:53:b3:e0:01:
0d:21:15:68:1e:1a:2f:25:83:c2:f2:73:44:12:5d:ef:ec:21:
77:83:9f:de:e5:2e:21:2d:2d:22:1a:52:72:94:49:31:59:9c:
81:a0:64:45:85:2c:92:e5:f2:2f:13:5e:98:10:26:6f:a3:81:
c5:ce:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org