Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa
File: 3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: PXKMhI3bQGVNhP73lZbv66InBbcEa/+IQT70qnjFYU4=
Subject key identifier: 43:0E:06:68:FC:8D:C9:C6:A3:5F:E7:31:D4:90:02:11:23:66:B7:45
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 58E8211AD02F9836396E5A9754E5DF6D93EAA13D
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:07 +0000
ROA not before: Mon 08 Apr 2024 20:02:07 +0000
ROA not after: Mon 07 Apr 2025 20:07:07 +0000
asID: 28270
IP address blocks: 138.121.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e8:21:1a:d0:2f:98:36:39:6e:5a:97:54:e5:df:6d:93:ea:a1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:07 2024 GMT
Not After : Apr 7 20:07:07 2025 GMT
Subject: CN=430E0668FC8DC9C6A35FE731D49002112366B745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:a9:e5:b8:ff:41:01:84:fd:8a:aa:be:63:
a2:f7:5a:1b:d1:6d:c9:6e:01:ad:ae:43:1a:77:cc:
82:60:4d:35:68:9d:fa:e3:6b:d5:ae:d3:35:54:81:
74:46:0a:a1:84:63:1c:84:ef:c9:7a:5e:c4:4f:46:
b7:e9:79:5b:76:96:69:b7:ce:05:6c:0b:b1:60:83:
57:61:85:cf:1e:d1:7d:34:bb:fc:07:be:0f:56:37:
40:69:20:f2:47:d6:04:24:ca:81:4e:ed:b1:e5:25:
27:82:68:5a:d5:8d:fe:3a:0c:65:da:cd:ec:a9:3d:
95:d9:4a:67:0e:a3:04:72:c0:a8:87:08:a8:06:dd:
ab:ec:41:b0:a3:57:f0:6c:76:77:6e:66:ec:e0:39:
ea:97:34:d7:c3:17:35:f3:fd:a0:eb:e9:be:6f:e2:
41:2c:a1:3e:19:14:61:12:13:3e:23:47:27:30:37:
b4:31:23:f2:c4:85:7f:57:65:17:c6:04:44:11:26:
81:97:8c:79:07:d2:f4:f4:8a:c3:b5:0b:03:15:98:
61:22:54:32:2d:eb:4a:c5:eb:61:85:e5:60:da:60:
d6:56:78:e1:e6:06:24:a7:64:52:8c:c8:7c:80:f5:
10:19:3a:2f:b1:9e:85:01:2c:eb:7b:5c:49:dc:c2:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0E:06:68:FC:8D:C9:C6:A3:5F:E7:31:D4:90:02:11:23:66:B7:45
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:78:3b:41:ee:34:c9:d6:f4:68:f8:31:e9:37:b1:ac:05:27:
55:a1:5b:ac:0f:f2:6c:58:a4:8f:bb:94:15:34:45:22:7a:63:
f9:3f:97:a2:b2:4c:21:60:8e:06:00:71:c1:38:95:ea:1c:bd:
ea:3f:1a:27:b0:34:bf:c9:d5:ff:e9:ea:ad:83:5c:90:d2:77:
80:7c:22:d5:93:e3:32:49:cd:7f:74:e9:e7:14:c2:1e:a1:a1:
79:63:6d:a8:c5:23:75:e0:fd:06:ff:79:46:20:9d:50:fb:67:
6a:01:75:73:a4:48:38:94:d6:c2:7a:e6:52:f1:aa:20:00:7d:
69:a0:3d:96:8e:06:f7:f4:45:97:af:47:f8:be:ed:91:13:42:
68:89:4e:44:fd:d2:9c:66:da:7b:97:11:c8:75:4c:a2:16:1d:
b1:85:ca:8f:3e:58:56:3a:40:77:19:d1:ed:89:4a:a6:90:e6:
cb:12:61:81:22:e8:ff:00:6b:01:70:4b:e2:0e:e2:62:91:76:
07:bd:a4:8d:2f:e3:c5:93:66:50:5d:64:10:aa:1b:5d:ca:0d:
c8:d7:bb:40:f4:3f:7e:8b:2d:b1:c1:90:01:e9:31:b4:16:21:
1e:42:eb:9a:09:c3:0e:42:13:02:37:5d:16:80:a0:bb:d1:70:
bf:5e:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org