Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa
File: 3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: duOILpH3iu24kPFDuVyPag6LTt1SBf3EIRV9eAD4Ls8=
Subject key identifier: 83:0B:9E:23:BE:FF:99:A4:54:99:70:19:50:AB:F8:3E:9B:FC:3A:FB
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 141112E3CEFA483A3D3DFC7510315D825930451A
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 160.238.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:11:12:e3:ce:fa:48:3a:3d:3d:fc:75:10:31:5d:82:59:30:45:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=830B9E23BEFF99A45499701950ABF83E9BFC3AFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:7d:ae:c7:0f:8c:5c:1b:11:8b:5a:27:39:
34:3e:2b:d8:41:2f:3c:52:7b:60:98:fa:0b:54:9c:
ac:ce:a4:20:06:c6:60:1b:22:b2:b0:6c:c0:e5:86:
7d:2a:7e:bb:b5:19:96:6b:6b:1b:2f:06:fc:f4:e1:
4f:49:e2:1d:88:a1:b1:50:e7:10:f4:79:c6:1b:4e:
b2:6a:51:cb:33:eb:f3:31:7d:af:17:37:ec:0e:45:
b2:7a:60:40:ad:ff:66:d7:b8:84:ca:ca:df:bb:7b:
86:ad:fd:f0:66:54:b1:79:f6:6a:63:86:00:30:7b:
95:62:0e:ef:4e:8c:ad:49:0c:d9:a8:93:0b:e4:d2:
c9:49:40:06:95:5e:3c:f2:f0:3e:df:eb:89:0f:ce:
62:da:f0:f6:06:2a:f7:1f:dc:ec:a4:ac:50:dc:9a:
da:85:30:a8:ff:92:c8:d7:63:9d:81:ab:5a:eb:7d:
35:d6:62:3d:3c:bc:29:0c:7a:cf:2e:60:3e:31:ea:
91:6f:26:e0:14:3d:f0:75:59:c6:8b:f9:94:47:4f:
e8:82:a7:dc:39:2f:af:5d:23:43:a7:a5:84:be:82:
a4:92:e2:26:6e:4e:dc:73:ae:c6:14:2b:85:7a:b1:
25:cd:12:0b:7d:39:e2:bc:93:5b:2a:ca:06:e0:59:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:9E:23:BE:FF:99:A4:54:99:70:19:50:AB:F8:3E:9B:FC:3A:FB
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d9:23:4d:7f:ed:c0:c8:c7:c8:21:82:3f:fc:ca:56:99:ff:
90:4e:65:18:e9:00:ee:72:12:e6:70:f6:93:b4:88:6a:56:4e:
1f:98:84:d8:ad:14:bd:fc:3c:a9:f3:24:fd:09:8d:26:73:1b:
da:b8:47:b2:5a:3d:06:b5:dc:76:53:fb:11:20:ca:6b:6b:69:
27:6a:ec:e7:de:b3:d2:a5:05:6f:4e:32:ce:89:02:3a:fd:f4:
9e:93:2b:0b:21:53:ce:15:b7:da:ce:a2:53:94:24:fd:d1:29:
82:7a:3f:3e:da:25:55:e2:ce:49:fd:04:cd:a6:b0:53:96:5f:
83:ff:11:34:41:e0:e6:02:08:0c:6e:7b:9d:a0:99:d5:d4:7d:
27:52:f1:6f:10:6b:a8:d5:fc:97:02:f1:b6:1c:ce:0f:7a:4e:
87:3d:78:a4:f4:9c:1e:f1:6d:e0:aa:e2:24:35:23:70:eb:48:
dd:c4:f1:7e:e4:e7:18:9f:9f:1c:1f:6e:bd:75:e7:93:ed:91:
31:a8:0d:dd:2e:5b:8d:54:48:13:f4:fa:a4:ca:1f:7a:2a:ef:
01:b9:23:d1:21:f5:91:13:d0:0a:f1:ec:b8:96:d9:82:e1:85:
fb:29:a8:b5:d6:fa:3a:ce:b2:cc:2d:cd:9a:87:9f:21:15:a7:
4c:1a:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org