Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
File: 3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: MDLy/2bQ7j7EQTvP/SLNd0JXy2X3FkzKx40bjdwNiNU=
Subject key identifier: 3C:C9:AB:C9:3F:C3:DD:0A:72:1B:6C:65:B5:93:57:06:04:F8:B6:DC
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 592A424A89918FFB10E2F6BFE91FB5D8478A1660
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 271724
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:42:4a:89:91:8f:fb:10:e2:f6:bf:e9:1f:b5:d8:47:8a:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=3CC9ABC93FC3DD0A721B6C65B593570604F8B6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:4c:fd:1a:41:ca:b7:5b:e1:c1:fa:c0:48:
3a:86:69:41:17:5b:77:1e:27:a8:d1:8b:12:fd:d3:
83:71:ef:0f:a5:01:1f:84:e9:ce:83:fb:cf:f8:aa:
2e:d0:6f:95:5a:8e:90:55:5e:20:c2:75:b9:b0:d3:
a2:d5:06:23:3f:a7:fd:48:ce:cc:a6:b9:6e:a7:94:
ad:15:62:92:47:67:0e:40:d1:ef:11:a4:2e:fb:d1:
0a:bb:14:2f:25:9c:68:03:65:65:7a:88:c4:4e:8f:
b8:03:21:4d:1e:4a:cf:4f:a9:28:78:9f:25:46:18:
6d:24:59:72:05:65:1f:63:af:7c:e5:67:9c:09:c8:
b1:5b:9a:12:93:97:7c:be:40:d2:c6:1d:54:29:2f:
aa:04:ef:e1:ec:69:99:cc:eb:32:90:5e:86:65:33:
06:dd:93:f7:79:d4:86:af:aa:01:c3:12:02:41:5c:
56:8d:ce:88:12:3b:fd:8c:e2:86:5e:df:ed:8e:ee:
df:dc:dc:e8:34:44:12:76:0b:05:29:66:e9:cb:61:
c5:e2:fa:fd:2d:c3:ce:47:3a:a5:12:7e:8d:0f:87:
52:a1:18:4e:c4:a8:e4:54:b3:37:df:61:eb:eb:c5:
84:04:82:65:68:f8:21:25:c7:be:98:4b:0a:97:f8:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:AB:C9:3F:C3:DD:0A:72:1B:6C:65:B5:93:57:06:04:F8:B6:DC
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:35:2f:cb:20:ef:d5:c4:5c:48:98:3b:5b:7c:8d:be:0b:b2:
bd:ce:f4:64:12:49:94:6c:a6:a5:14:a8:27:4b:24:a8:8d:60:
f2:e9:20:97:98:40:eb:46:e0:6a:e7:ad:0e:ca:db:ad:4b:ec:
57:8d:c6:65:3f:74:d4:00:b1:7c:06:73:7f:fb:30:ae:37:5b:
09:13:c3:de:4e:10:8b:f0:88:1a:86:39:41:32:0d:45:92:b3:
fc:26:8d:c2:ae:d2:33:fe:56:18:04:76:4b:28:2b:db:f2:fa:
e2:ec:b2:9b:3c:5a:35:65:5a:38:9a:2b:37:86:61:cb:66:05:
ff:b8:87:fc:85:ee:8a:f5:ab:28:66:0c:86:bc:9a:44:13:1b:
00:90:2f:51:39:c8:1f:6a:9a:86:96:70:35:84:f6:bf:07:33:
e7:ed:eb:39:81:1e:22:dc:18:0c:2e:e5:9e:27:ff:09:b5:14:
f5:b7:a7:12:3e:ce:76:44:e0:a7:b7:70:76:30:46:52:b1:e9:
1f:b8:6d:6c:83:20:17:d7:08:e8:75:f4:7c:2a:3d:d6:d8:d7:
6b:b5:36:fb:27:a9:c3:5c:02:24:dc:84:a3:64:40:a4:fd:98:
2d:c5:20:e9:c1:f3:fa:94:cf:d0:e8:b1:db:c9:ed:da:4a:5c:
a4:d3:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org