Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
File: 3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: LTmozbK4+ph/8uK7Zt2MzuNYM2oxncYvdv/hOuuqSK8=
Subject key identifier: 40:3D:F5:82:AF:66:6A:68:9C:53:80:F2:42:2B:F2:1E:3B:A1:52:95
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 6F4AC94C6932097C471576C2DC0314600A75E64D
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 168.232.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4a:c9:4c:69:32:09:7c:47:15:76:c2:dc:03:14:60:0a:75:e6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=403DF582AF666A689C5380F2422BF21E3BA15295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:76:fd:de:41:ac:3d:ab:d5:d8:1f:f7:bd:
a3:be:66:55:0c:d4:39:15:fd:1b:80:76:f1:31:cf:
d6:77:49:5a:e7:c4:b0:1f:5a:76:1a:ee:1f:4b:2b:
a6:f9:4c:0f:65:7f:e1:9e:d5:43:e8:4d:3d:e0:83:
67:c7:37:20:a5:b2:5a:01:4b:a2:e8:8c:43:34:a5:
2f:60:f2:dd:c4:a4:e4:38:db:da:e3:80:0e:cd:e6:
b2:33:da:70:cb:08:83:cc:50:6f:5d:23:91:00:4b:
d3:a5:70:33:e2:44:db:07:6e:14:3e:de:b6:7d:b4:
e8:59:0a:cb:0e:17:7d:33:f0:35:f0:f9:33:c7:90:
f6:02:b8:f1:5f:a7:2c:09:3a:ae:03:59:25:ab:62:
63:09:2b:22:f7:97:e3:ca:63:0e:41:8b:e9:61:6e:
74:1d:76:d6:0f:c6:d0:32:c2:ae:a2:e5:d9:7a:54:
76:b8:e3:aa:56:50:9e:99:c1:81:e1:94:b1:2a:11:
dc:84:e9:5e:80:70:1a:c9:34:00:18:75:52:6e:a1:
85:14:9d:85:6c:80:7e:f3:15:11:dd:51:d4:e0:f5:
cd:75:77:7e:fd:01:d2:6a:5d:b2:85:32:61:ac:45:
91:1e:e0:19:74:a7:38:68:9f:f8:2d:b7:6f:3c:ae:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:F5:82:AF:66:6A:68:9C:53:80:F2:42:2B:F2:1E:3B:A1:52:95
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:de:f5:48:c4:20:e2:c5:23:db:d2:73:3e:82:36:54:e3:af:
6e:c9:fc:6d:fe:22:d7:88:d9:e1:d4:a9:6a:63:55:09:7d:a9:
0a:2a:c7:24:5e:2e:8b:58:2a:ae:f0:f9:5a:c1:3a:f7:0d:95:
97:89:b4:b7:72:11:f0:73:9c:5a:55:e3:d0:60:56:9b:6c:89:
6b:99:78:12:5a:41:f8:d0:89:8d:a5:53:1f:77:32:27:0f:c9:
13:6f:53:dd:90:e8:d4:23:9a:11:17:af:63:14:67:a9:07:53:
8e:62:37:5b:4b:ad:7b:25:d5:3d:c2:8c:f5:08:a0:8b:bf:9d:
12:7e:ec:db:c3:d5:95:1a:22:96:d5:22:53:92:2b:2d:47:8a:
f0:5b:ba:11:17:d1:3a:45:f9:f1:d3:a0:c6:54:a4:88:fa:cd:
94:08:1f:4c:35:ce:14:5b:4a:70:f4:65:1b:ae:0b:97:80:56:
1b:51:af:fb:08:0e:04:b0:a7:56:bf:6b:dd:b1:fe:6b:1b:83:
c9:04:50:85:6c:ed:17:4c:91:1f:4e:e2:e1:19:fc:bd:6d:c8:
b2:f8:5c:01:31:c9:66:45:d9:c1:3f:58:f8:0b:56:73:14:ec:
ba:59:0b:c1:77:a3:22:d9:5a:69:a6:a1:c0:8d:c2:53:9a:47:
fa:2c:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org