Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa
File: 3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier: SXYDJ/PWRZEfUqkEVkpQYGRbUSWUMo0Owd3JEq2qFXA=
Subject key identifier: 94:D0:B9:77:20:A0:57:3F:8B:4A:08:42:1A:2F:68:6E:BE:19:0E:BF
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 276FFC0094BD227F168767A0954B5AEBFAA4D826
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa
Signing time: Wed 31 Jan 2024 14:31:14 +0000
ROA not before: Wed 31 Jan 2024 14:26:14 +0000
ROA not after: Wed 29 Jan 2025 14:31:14 +0000
asID: 271724
IP address blocks: 131.221.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6f:fc:00:94:bd:22:7f:16:87:67:a0:95:4b:5a:eb:fa:a4:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Jan 31 14:26:14 2024 GMT
Not After : Jan 29 14:31:14 2025 GMT
Subject: CN=94D0B97720A0573F8B4A08421A2F686EBE190EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:f7:19:71:54:52:ec:f2:8e:28:fc:7b:07:
a1:34:db:78:97:1c:e6:46:6b:7d:d6:b9:d4:ad:c4:
c6:47:99:73:3d:83:cc:64:ba:be:74:6f:f6:8b:b8:
8a:7a:9d:85:f7:a3:d7:a2:a6:7f:11:62:fd:f0:d7:
30:1a:83:e5:a5:c4:03:b2:0c:04:52:07:a5:91:a3:
96:c6:9d:5f:e9:ee:3d:ab:8a:3a:5c:7d:7e:ad:8f:
44:6f:2e:cf:56:c6:04:a8:42:ab:91:3a:ef:ad:d9:
02:5c:4a:d8:d8:b3:82:71:13:ca:cc:ab:e4:a7:5c:
c6:ea:8f:d0:63:c1:18:eb:04:81:40:44:df:b5:a0:
8e:65:e3:a5:67:8b:b5:b0:c1:e3:97:33:99:24:f0:
06:a1:ca:03:03:a4:1a:d8:e9:3f:a2:bc:fb:e3:0b:
9b:14:de:ef:f5:ae:ea:9d:4e:0e:5e:75:b2:44:72:
9f:79:5f:22:5a:63:fd:6e:4f:17:01:1e:1e:32:5a:
dd:a6:aa:42:3e:d2:a4:68:2f:e3:bd:b0:7f:96:b7:
2f:c2:8a:9e:98:0b:99:30:5e:d9:3c:20:c0:66:29:
ca:96:3f:b4:15:96:42:c0:93:36:9c:db:5d:06:a2:
cd:51:0b:0b:1c:2c:59:f8:4e:9d:70:ae:39:2e:13:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:B9:77:20:A0:57:3F:8B:4A:08:42:1A:2F:68:6E:BE:19:0E:BF
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3232312e36382e302f32322d3234203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:68:27:4b:9b:de:4d:2b:51:d5:33:a2:52:16:3b:15:3f:d9:
55:c8:7e:59:3a:30:f9:33:00:68:c1:dd:0a:d8:22:2f:1b:37:
0a:01:fe:bf:75:92:08:f7:9b:95:a8:8b:5e:7a:30:83:28:ca:
5c:1b:8f:bc:6a:3c:f0:dc:f4:ff:01:f6:61:05:f9:f4:29:bc:
d8:88:22:a3:a8:b2:38:48:96:36:e9:d3:8d:c2:5b:9e:e9:e9:
47:28:79:7f:ec:5b:2b:11:b7:8c:91:04:f6:4c:3c:d8:56:6d:
fb:48:ed:7b:89:6e:f1:86:47:db:58:7e:f9:60:52:14:62:a4:
62:3c:74:2c:75:d1:fb:63:52:41:ad:f6:24:ea:45:15:f4:ef:
47:67:e8:27:b0:3b:42:32:ad:de:3a:1c:1a:e1:44:17:26:0d:
fa:1d:fd:d1:86:cb:8c:19:9c:a5:8b:98:ac:2f:83:e0:70:c6:
0a:0b:7d:9f:b2:7f:e0:d1:05:5d:2b:ef:26:39:ba:10:b6:ae:
5d:41:f5:1f:a3:c4:16:67:6e:90:35:98:9a:41:00:4b:59:33:
a9:50:a0:c6:01:4b:d8:9c:00:f1:e2:ab:0e:e8:a3:cf:57:30:
82:f8:c8:a6:d1:35:51:05:04:3b:d9:16:4e:06:4d:42:54:44:
ec:f7:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org