Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
File: 3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: U00ZQE5lgdM11FBT/iyx0/s3Dwq13hUROcZA589iiGc=
Subject key identifier: 65:42:57:49:CD:99:55:C8:A9:24:C2:B0:D3:E3:C0:BF:1D:7F:C0:74
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 2B6FE72C5FD0AF761A323287B150134D85BA9B3E
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 08 Apr 2024 20:07:05 +0000
ROA not before: Mon 08 Apr 2024 20:02:05 +0000
ROA not after: Mon 07 Apr 2025 20:07:05 +0000
asID: 271724
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6f:e7:2c:5f:d0:af:76:1a:32:32:87:b1:50:13:4d:85:ba:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:05 2024 GMT
Not After : Apr 7 20:07:05 2025 GMT
Subject: CN=65425749CD9955C8A924C2B0D3E3C0BF1D7FC074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:21:59:5d:3c:22:37:bb:8d:1c:fd:2c:8b:
92:cd:61:c0:f1:ec:02:29:5c:c7:28:c1:d3:95:6b:
93:d3:ba:b3:1f:d3:71:3c:ef:9d:6c:ae:f9:1c:85:
c0:44:ff:31:f7:6a:c5:a8:e7:f0:26:dc:a1:53:9e:
be:4c:93:88:39:65:dc:2b:06:9d:21:d9:da:e8:fd:
01:0d:b3:5b:3f:0a:04:0d:18:e5:e3:44:42:16:b7:
82:64:79:31:3f:b5:a4:36:1f:d4:d0:94:1e:86:e5:
64:bb:e8:7d:f9:ab:37:5d:33:b9:6e:81:ec:bb:b0:
83:41:5c:0d:b0:cc:52:c7:b7:03:9f:a6:23:91:69:
c7:3f:7f:77:d6:98:fe:9d:16:a3:f1:66:0f:dd:98:
ec:a4:1b:92:be:db:10:32:ca:ed:69:8e:63:09:01:
00:7c:50:d3:2c:d6:b2:f4:14:85:e1:15:f4:0f:af:
81:f4:3e:cd:74:fc:61:7b:63:c3:6b:d5:f1:e6:92:
30:cd:9d:99:d8:71:e9:ad:cc:38:ca:99:02:c2:11:
a2:3f:17:f8:68:c4:72:c1:80:3c:c4:c1:b7:a9:ec:
34:90:3e:2a:1b:d2:53:8b:87:01:c5:96:1f:d9:e2:
9a:44:69:28:b7:29:66:e8:d6:0f:3c:ff:bc:d4:35:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:57:49:CD:99:55:C8:A9:24:C2:B0:D3:E3:C0:BF:1D:7F:C0:74
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:0f:e1:0a:c1:23:8f:fa:5c:33:22:96:76:2e:ff:f4:7e:d3:
ad:18:f3:eb:24:7b:14:98:01:6c:b4:5f:1a:c1:d2:37:65:c1:
ac:22:01:f8:42:6c:6b:d0:60:a7:85:2d:b3:8a:74:b3:fc:d8:
e7:d3:f9:1b:b7:df:25:15:5f:2a:6d:19:ba:6f:32:da:4e:53:
b2:a3:ce:f7:f1:08:70:81:d3:35:3f:ec:ff:a2:c9:23:3a:b5:
76:be:9d:d0:13:66:7b:e9:83:ef:3a:0b:d1:60:19:35:72:0d:
14:5f:fa:0e:b6:70:3e:56:1a:87:bb:91:b1:3e:a4:cc:0d:0c:
57:29:ae:12:30:de:66:e3:48:04:c9:32:3a:1b:a5:fd:6c:06:
5f:1a:6d:7a:4d:bc:83:09:bc:d2:22:77:3f:77:7e:53:92:10:
26:69:2c:9f:2c:e8:ee:64:bc:c2:21:b8:80:62:63:b1:25:ed:
ce:5f:3f:7d:39:a1:8f:7a:40:4c:b5:4d:5c:92:4b:c7:90:d2:
17:ce:4a:26:db:c7:a6:cf:c2:7c:38:9c:a8:ea:bb:cf:5f:6b:
35:0a:1d:f2:a7:89:70:96:02:37:26:08:90:32:5f:e4:11:85:
a9:28:e7:f6:51:e0:0e:7d:87:e9:39:20:af:08:e5:ef:5b:f0:
ab:92:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org