Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35332e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: cKgl06qy31cdVrd8815IVKTO+9bfY8VLJ02cnvn0ycE=
Subject key identifier: 38:C1:15:D0:37:68:B8:56:62:3C:27:97:46:81:85:BA:62:73:BA:49
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 455664CA0C533DEC7619E65F70F1AB454B3E87DE
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 168.121.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:56:64:ca:0c:53:3d:ec:76:19:e6:5f:70:f1:ab:45:4b:3e:87:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=38C115D03768B856623C2797468185BA6273BA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:cf:22:46:4c:a7:11:eb:c9:f1:aa:01:54:
25:7f:f2:80:0c:65:04:52:ce:af:0e:15:54:e3:41:
60:07:eb:ed:63:98:b0:73:f9:e2:b7:db:75:9d:ae:
dd:77:9f:13:81:d7:56:66:5e:fc:c9:c5:1f:a9:79:
bb:1f:06:56:72:59:4c:f4:a6:cf:f5:30:ec:c5:0a:
44:39:02:0a:c2:f9:a3:07:2c:91:d1:b0:a3:64:ef:
20:33:c8:49:e7:1e:c3:98:a5:5d:22:36:b2:78:35:
ed:78:4e:31:38:c2:53:ee:02:b5:eb:a8:e3:63:8f:
f8:be:3d:d4:7c:de:03:9f:9a:97:87:96:e2:49:61:
27:39:ac:42:73:38:87:ec:8c:f6:33:0b:e2:fd:eb:
ac:68:e2:af:23:69:a9:3a:f5:15:bb:6b:ac:d3:cc:
7d:7c:2b:90:04:78:7d:f8:cf:49:b3:92:40:b3:ef:
f0:c2:20:41:59:b9:18:fa:c8:b0:d5:3e:24:78:9b:
5c:1c:54:aa:77:33:bd:b1:83:0a:01:84:2c:e8:98:
13:eb:82:49:48:5f:13:4b:29:18:32:cc:96:37:99:
7c:c4:6e:5c:9a:e7:5c:a8:42:04:f3:6e:6f:4c:f5:
31:3d:b4:7d:d3:05:d9:50:9e:bf:2d:1d:9b:1d:55:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:15:D0:37:68:B8:56:62:3C:27:97:46:81:85:BA:62:73:BA:49
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.53.0/24
Signature Algorithm: sha256WithRSAEncryption
60:93:65:c1:9d:3d:22:d7:eb:34:40:bf:5b:45:58:70:1b:3d:
0b:bc:b4:a0:3f:61:a9:a0:6f:c4:7b:2e:2f:ce:4c:3e:98:fd:
6f:85:af:e9:2f:bc:fa:ff:b0:11:14:db:96:65:f6:62:9d:17:
25:30:c2:d2:a7:29:ea:31:1d:93:2d:12:45:99:d6:61:43:97:
55:74:c2:50:f0:f8:3e:14:6f:74:01:89:7d:dd:b5:fb:d7:9b:
87:56:26:1c:81:12:02:15:e3:29:ef:87:8d:36:63:54:85:cf:
38:9a:c7:7d:18:f0:84:fb:8e:7b:a8:ac:22:44:0b:33:44:d1:
55:c7:b8:23:66:c8:98:0a:5c:f7:e6:42:ed:2e:b6:fa:78:4f:
b5:66:98:16:78:4c:f9:fc:96:66:4a:7c:89:23:86:67:5f:62:
18:e2:65:c7:54:bb:61:d4:1d:f4:0d:55:dd:41:82:34:ed:e6:
06:50:34:75:ac:40:cf:00:3c:34:5a:ba:9f:3b:67:cf:ee:b8:
0e:40:3e:9a:33:78:ae:87:18:39:b6:1d:30:61:f2:e9:1b:86:
5a:ef:3a:1b:4b:31:88:d0:25:81:5e:69:f1:dc:28:35:0d:10:
35:b5:79:55:fe:f9:2c:38:2d:72:79:eb:d5:58:8e:92:73:e2:
6e:f6:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org