Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
File: 3133312e3232312e36382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: X8eu+2NxhPh/nLSPBuP+uu/R+nS0iExyueX6Uiz1CF0=
Subject key identifier: B4:79:F5:33:ED:05:FA:01:FE:04:1E:FB:48:EF:FF:13:6C:3A:4E:43
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 3F1D0EF4E1E5FF2236341007E6463B95B99302D4
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:00 +0000
ROA not before: Mon 08 Apr 2024 20:02:00 +0000
ROA not after: Mon 07 Apr 2025 20:07:00 +0000
asID: 28270
IP address blocks: 131.221.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1d:0e:f4:e1:e5:ff:22:36:34:10:07:e6:46:3b:95:b9:93:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:00 2024 GMT
Not After : Apr 7 20:07:00 2025 GMT
Subject: CN=B479F533ED05FA01FE041EFB48EFFF136C3A4E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:a6:57:6c:96:69:ba:34:75:ea:b2:9f:1e:
b9:02:50:34:d8:1b:f5:e8:b5:0d:a2:f8:ad:e2:dc:
ee:a1:d2:d6:aa:95:32:5c:2c:00:0d:04:da:81:ca:
59:73:a4:5b:40:18:ce:33:8d:5b:c1:70:9e:cb:ca:
31:b6:4f:f2:63:3e:18:d8:49:df:13:cb:cf:40:a0:
ee:a6:a1:b6:a7:10:f8:bb:44:8c:b1:79:6c:f7:30:
34:63:a3:a7:56:dd:39:55:40:7b:4b:c2:a9:3f:fa:
ad:d5:30:80:80:54:b0:2e:ef:4e:54:aa:84:08:df:
f1:66:50:f1:3e:99:c3:6c:11:ac:1d:a2:e8:37:db:
27:2e:1c:1e:39:22:a3:93:43:d1:f6:e1:a6:b7:f7:
68:2c:e2:d0:3d:e1:8c:59:a9:1d:29:a9:c2:7a:83:
f2:61:38:ad:8f:1f:01:c9:d2:d6:40:4c:2b:0d:3a:
9e:07:f1:16:bd:66:07:99:7d:f1:68:b1:b9:7b:1b:
db:a5:22:fd:c8:2c:82:6c:c4:e6:46:a2:8a:53:7b:
60:0a:16:e1:1b:7b:0f:8d:8d:4f:be:db:5e:11:f4:
a3:08:13:de:b5:a5:02:4c:d4:54:6e:83:9c:bf:16:
64:a5:f9:aa:02:72:45:5f:a2:ee:d3:6a:2e:50:cc:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:F5:33:ED:05:FA:01:FE:04:1E:FB:48:EF:FF:13:6C:3A:4E:43
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
08:9f:b0:41:07:5f:cc:12:1c:91:9a:e4:62:cb:b2:02:3f:bd:
ff:77:b8:2f:4d:59:66:40:68:7e:f4:bf:0d:85:77:b9:fd:5a:
97:fd:3d:69:ee:a7:4b:55:0b:09:a8:03:02:d1:36:40:19:47:
01:72:74:c2:5f:cc:30:d8:01:46:31:c5:50:dd:65:65:9c:3b:
9a:19:16:bf:76:59:7c:40:c0:23:5d:81:c7:36:ed:48:67:64:
e4:e7:3f:3b:bd:13:83:59:92:49:8a:15:e5:3c:c1:c3:39:67:
a0:85:41:0a:59:3c:b4:79:ce:63:f3:0b:6e:63:e7:b9:76:bd:
56:ea:e2:49:bc:8d:ca:ef:ba:f7:bd:da:a1:6a:68:ce:10:ce:
ed:38:b0:7d:cd:bf:80:7a:b8:a0:fe:9e:04:b0:d8:29:fa:7b:
e0:ee:6f:f1:ec:6e:c0:9a:7c:8b:46:a6:b0:04:7a:9e:97:cf:
6c:06:30:e0:31:bd:9f:8e:5e:57:d0:26:87:44:45:52:d9:49:
e1:8f:2c:98:95:fa:02:7e:c2:bb:66:a3:0e:20:df:b6:7f:2a:
b2:21:d0:97:97:0b:c3:44:db:b3:a9:2d:1c:c8:ff:71:f9:b7:
f9:db:4f:23:e4:d1:e9:cf:92:17:65:5c:f7:f7:1c:b2:ee:01:
2e:d4:10:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org