Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
File: 3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: fVti+p5Ea58lk2SrpMMhXA+2cFPohL0KPb/nKDtfLQg=
Subject key identifier: 20:DD:FF:7E:8A:FF:35:6D:3C:A7:2F:4A:F9:61:48:88:DE:6D:13:E1
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 262519B51FB74C8633CD6E06D71D58403F094002
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:57:11 +0000
ROA not before: Mon 08 Apr 2024 20:52:11 +0000
ROA not after: Mon 07 Apr 2025 20:57:11 +0000
asID: 28270
IP address blocks: 138.121.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:25:19:b5:1f:b7:4c:86:33:cd:6e:06:d7:1d:58:40:3f:09:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:52:11 2024 GMT
Not After : Apr 7 20:57:11 2025 GMT
Subject: CN=20DDFF7E8AFF356D3CA72F4AF9614888DE6D13E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:57:fe:57:40:9b:4f:a4:f6:40:5a:fb:42:
72:bf:eb:00:e7:26:d9:df:f5:bb:1a:d9:9f:ba:33:
ee:76:d5:6e:dd:e6:60:62:e9:3e:8b:b5:89:e3:d3:
ef:39:b5:e2:e0:63:5d:e3:96:06:f7:56:69:d9:2c:
ae:9d:83:89:6b:f9:51:05:06:ea:c9:69:eb:a0:6f:
76:58:31:fa:04:a8:40:71:60:cb:5c:8f:13:73:eb:
7b:16:6c:fe:a2:7d:c0:47:a8:30:40:9b:97:c8:84:
b6:b4:88:3b:c9:77:c5:80:94:dc:24:fc:71:84:d2:
79:24:67:ba:73:35:c4:91:c8:62:fe:5c:4c:50:ce:
45:91:83:74:49:b4:c3:ce:37:5b:e5:37:88:38:f4:
07:a1:0f:3e:b5:03:5c:82:16:76:57:94:13:c1:41:
62:d6:8c:fa:f9:34:e2:68:c8:42:aa:98:7b:5e:da:
22:cd:e2:e8:00:87:9d:54:d1:3a:11:26:7c:69:13:
21:3f:d9:80:86:2d:a3:a0:4f:7e:0f:c7:4f:b6:3f:
9a:2c:66:ff:f9:11:f2:eb:3a:f5:e5:dc:6b:f6:7f:
30:16:b5:12:b5:99:8a:e7:03:68:7e:03:6c:88:04:
bf:f3:c2:69:1e:45:73:1f:3e:8b:c2:04:cc:c3:a6:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:FF:7E:8A:FF:35:6D:3C:A7:2F:4A:F9:61:48:88:DE:6D:13:E1
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:57:52:66:e0:88:8c:52:64:56:7d:22:4d:b6:83:9d:fd:ba:
63:9b:91:05:d0:e4:69:87:81:bc:cd:4d:ff:f0:77:69:e6:cc:
81:e1:bb:fc:d6:26:89:65:c7:8a:9f:c0:5a:6d:2b:9c:30:43:
40:35:4d:d3:ee:43:24:ad:bd:46:6a:6d:8d:be:aa:1b:8f:07:
ba:71:f1:60:21:ae:df:38:e4:d0:a9:da:1a:28:49:8f:a0:ed:
b1:89:bf:d6:b8:11:1c:7c:20:35:6b:75:31:72:1d:6d:37:34:
38:3a:45:cb:8e:b4:5a:c5:07:3d:57:83:7d:67:90:14:eb:0e:
ea:ba:ef:30:6a:c0:ae:58:9a:19:f0:d4:eb:af:85:56:14:2b:
fa:fc:22:47:2b:a4:55:bb:04:70:a6:2f:12:f1:0f:ed:00:ca:
e3:b3:69:4d:ab:d7:fe:98:c4:bd:a0:20:1c:2c:23:43:80:3c:
b3:45:88:b6:da:d7:81:8c:21:7f:8c:79:40:96:71:3f:36:21:
46:c0:a6:7c:e4:e1:5e:5d:02:af:9a:2e:9a:18:17:4c:53:8b:
e3:b2:1c:81:65:b9:2f:23:a2:ad:ed:af:b4:a5:56:e5:ce:45:
a8:a2:fd:44:d0:d7:44:dd:02:30:1a:9f:f1:34:66:67:59:4d:
c1:36:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org