Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3234203d3e203238323730.roa
File: 3133382e3132312e3232302e302f32322d3234203d3e203238323730.roa (raw, json)
Hash identifier: a3rMcHQqs5hQaBW3Sd71U8CpcNel00qm/DrIGPe7ShA=
Subject key identifier: B2:6B:0C:58:7D:21:59:1F:B0:F8:C7:EB:0C:0D:49:57:FE:F4:18:1C
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 5823DF86C3B51476C6E994D3ADF76CDB8FE87D38
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3234203d3e203238323730.roa
Signing time: Thu 22 Feb 2024 04:16:47 +0000
ROA not before: Thu 22 Feb 2024 04:11:47 +0000
ROA not after: Thu 20 Feb 2025 04:16:47 +0000
asID: 28270
IP address blocks: 138.121.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:23:df:86:c3:b5:14:76:c6:e9:94:d3:ad:f7:6c:db:8f:e8:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Feb 22 04:11:47 2024 GMT
Not After : Feb 20 04:16:47 2025 GMT
Subject: CN=B26B0C587D21591FB0F8C7EB0C0D4957FEF4181C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:94:aa:d7:5e:22:ae:9a:6b:e1:3c:a1:eb:
dd:91:39:5b:1b:89:a6:25:46:f6:9e:28:e5:7d:1a:
38:2a:d1:4d:0b:80:f1:91:76:ad:04:12:fa:36:e6:
70:3a:f6:43:d8:5d:5f:e6:c6:fd:18:0a:eb:eb:0b:
05:b1:8d:64:9a:27:25:c5:97:80:0c:68:7a:1c:c8:
cc:37:c1:0e:a4:48:a0:4b:63:94:16:50:01:aa:cb:
54:87:dc:82:32:69:97:d0:11:07:02:02:74:ec:1d:
4f:1c:b1:69:cb:4c:a5:0d:d7:d1:53:7c:dc:ea:12:
e2:60:8d:df:76:81:df:b0:dd:c2:bf:99:99:4b:e1:
8d:82:c2:3a:a2:4c:b4:e8:b9:39:a2:d8:ca:e9:e3:
78:12:8a:10:28:79:9d:91:b8:d2:ec:95:a8:75:47:
20:23:15:e7:da:0b:ea:31:f1:05:dc:3d:16:70:4c:
02:53:62:55:c4:c5:f0:9c:22:0c:25:98:5b:8e:7b:
18:8c:db:49:de:f7:b9:5a:8c:0f:aa:7c:a4:59:16:
d3:3f:2c:f7:5c:25:13:f1:f6:d8:e4:a0:13:c1:4e:
0d:99:64:21:e0:29:04:28:b4:5d:20:58:70:ab:96:
90:68:de:96:77:b0:ee:03:81:13:9f:25:5a:d6:b6:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:0C:58:7D:21:59:1F:B0:F8:C7:EB:0C:0D:49:57:FE:F4:18:1C
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32322d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:2f:27:6d:f2:d3:9b:23:63:3e:8c:22:8f:a9:6f:7a:0e:56:
fa:a5:44:cb:55:e1:4e:c6:3b:1b:bb:e5:02:f4:aa:5a:f6:83:
c1:36:bf:9a:1e:bf:7a:39:49:36:39:9c:be:49:0a:92:be:3c:
29:16:57:f3:31:d8:cc:f0:d5:e9:d1:61:6a:41:7d:ab:68:6b:
dd:82:99:b4:d9:d1:38:ed:ed:04:db:dd:65:db:7d:0a:10:60:
ee:b0:b4:46:3e:a2:b2:10:ca:25:ac:51:f4:51:0d:69:8c:d5:
db:0e:cc:6f:ec:1c:5b:6b:eb:f1:38:5b:2e:ed:98:65:c0:39:
94:67:0c:aa:84:45:04:da:cc:60:d5:7c:f8:d3:76:d9:1a:7c:
cb:50:f1:e8:56:05:1a:b0:5c:5a:11:65:41:6c:d4:c6:1d:88:
b9:24:17:9c:8e:cd:e7:3f:62:98:26:29:e3:28:80:ad:ff:9a:
29:e9:4c:86:aa:12:ce:df:aa:2b:2c:ec:d6:11:dd:e3:d0:34:
31:c7:37:67:8f:fb:fa:45:3d:36:d8:29:60:00:f5:98:b1:e1:
68:fb:35:58:e4:7e:d3:3c:d0:f0:fb:41:a3:11:2a:3f:b0:3d:
77:f7:53:61:38:28:f5:c3:27:44:7a:f5:bb:a2:ac:92:fb:f0:
a3:3f:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org