Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
File: 3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: mNf6344WyoUMlMM3A+vFIk41rvMdofw5U8zb3GAPChQ=
Subject key identifier: 35:29:E3:1D:54:89:FB:DA:72:E7:7F:2F:80:9F:7C:33:9A:C8:59:B9
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 5901BFE30974A2988D109C21ED1DB0C80D8DEDB5
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28270
IP address blocks: 168.228.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:01:bf:e3:09:74:a2:98:8d:10:9c:21:ed:1d:b0:c8:0d:8d:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=3529E31D5489FBDA72E77F2F809F7C339AC859B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:6d:b1:ea:76:94:09:4f:e2:97:1b:28:58:
15:e8:13:f7:82:bd:18:e9:35:5a:af:81:42:47:09:
0c:74:f6:fd:80:1c:0c:96:4f:5c:d7:6f:29:9f:96:
19:1a:10:ea:f5:77:70:6e:d6:5b:d2:b7:d9:9e:32:
c6:24:6c:da:1a:73:1d:ae:ef:c4:20:df:7b:20:fc:
1a:f3:8f:34:38:a6:1b:d9:61:3d:d9:25:fa:99:2d:
2d:9e:37:73:be:d4:be:f5:d9:d0:8c:bb:f2:31:8a:
45:90:9a:24:de:18:60:f3:9b:63:5d:ec:a4:f3:ba:
fd:94:63:03:21:db:8b:90:cf:05:b1:54:cb:c1:14:
1d:e2:1d:9e:b1:4e:95:5c:2a:0e:1c:f3:49:74:3c:
79:6f:5f:74:25:12:8a:49:73:bb:d9:ea:57:f5:80:
98:55:23:69:3e:3b:79:42:d7:c3:92:ab:7b:7c:4e:
21:93:29:d2:99:cc:0b:a0:d2:42:31:a6:5d:83:09:
3e:26:e6:c7:35:4b:ea:87:ad:76:a7:ed:3d:9c:fa:
ae:69:79:c4:11:6b:08:ef:ec:08:8f:9b:cf:42:75:
ea:1c:c6:b0:db:0e:a7:6f:7a:4d:3e:6f:c9:73:98:
f9:37:49:86:f1:c4:9c:c4:ee:67:7b:e3:21:50:5f:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:29:E3:1D:54:89:FB:DA:72:E7:7F:2F:80:9F:7C:33:9A:C8:59:B9
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
38:5a:ee:e7:15:21:a9:0e:4e:fa:c6:09:5d:b4:29:84:57:cd:
26:59:ea:82:b2:50:0b:ea:bd:17:1e:2e:c3:66:a3:80:8d:c4:
51:fc:c7:64:0e:a4:d4:a6:c5:1f:86:4b:6c:bb:55:da:d1:32:
72:97:20:1c:3f:00:a3:b9:e7:f9:54:b7:df:2d:1b:f5:5d:98:
ce:69:c1:3b:8f:73:19:0b:a5:76:33:50:18:cd:e4:b5:45:f8:
bd:f2:b4:2c:5b:95:50:53:e9:79:23:cd:45:63:92:96:b0:19:
6e:77:29:4a:0a:d2:49:13:8e:94:2f:1d:dd:db:94:8f:3c:91:
13:91:9c:7b:a5:05:fb:58:f3:2e:b4:14:37:f5:85:7b:61:93:
20:49:97:09:c0:b9:ec:ee:aa:18:8e:d4:f3:4b:38:0f:c7:e5:
82:69:2d:35:fd:90:b1:47:d8:f3:d1:5a:ec:3c:54:8b:31:c9:
01:fb:23:df:d7:b9:c9:2a:b9:86:88:10:66:b7:1c:af:51:2f:
11:f5:91:a3:59:06:7b:0f:72:71:e9:e9:61:c2:4f:22:38:d1:
d0:9b:48:81:fb:0e:69:b7:2e:8c:9d:e6:52:fd:bf:f8:51:4c:
fb:4a:89:76:29:ed:b7:26:04:6f:f9:e2:37:51:39:7c:43:03:
ea:9a:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org