Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa
File: 3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: Kj+U9V4r9NET2X4aT5yQ/hsqty4ZEdFY317hDdIexAg=
Subject key identifier: 08:03:08:30:AF:E9:6C:0B:2A:DA:2E:27:3D:37:45:43:5E:23:38:D4
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 1CFD2AD507CA70F7F88352355FEC71E0D709D6F4
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:59 +0000
ROA not before: Mon 08 Apr 2024 20:01:59 +0000
ROA not after: Mon 07 Apr 2025 20:06:59 +0000
asID: 28270
IP address blocks: 160.238.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fd:2a:d5:07:ca:70:f7:f8:83:52:35:5f:ec:71:e0:d7:09:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:59 2024 GMT
Not After : Apr 7 20:06:59 2025 GMT
Subject: CN=08030830AFE96C0B2ADA2E273D3745435E2338D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:46:1d:e8:85:13:7a:6d:a8:be:f6:17:d4:
74:d8:c7:c0:49:a8:96:ad:15:f7:1b:ce:b7:36:f4:
11:ee:3f:60:d7:24:ed:56:f4:cc:aa:4c:07:58:0b:
0c:a5:3e:60:b7:62:0a:e2:9e:2b:69:97:c5:d0:b4:
67:fa:e6:42:9c:db:b4:f7:07:b5:9c:1f:b9:38:19:
f2:40:89:96:04:5c:4f:c8:66:d5:c3:77:f6:14:e9:
dd:11:e9:e9:67:8b:17:8c:fe:4a:98:6e:a7:76:b8:
1e:ba:7a:b0:a4:11:3d:51:3b:a6:52:39:89:a6:59:
2b:5f:3b:5f:27:01:62:e7:aa:76:1a:e5:cd:2d:54:
2f:35:c8:ed:fc:ac:fc:4b:da:8b:ab:3c:e7:c9:67:
94:0e:7e:53:c1:eb:c8:a2:b8:cf:d3:04:b4:35:73:
11:8d:f7:89:3f:8f:72:1e:7f:a1:ef:e0:84:d5:b9:
68:6f:99:6d:90:11:d6:4e:f1:30:77:71:c0:3c:5a:
b3:3e:d5:4f:e2:38:68:38:f0:94:57:17:b9:d2:a8:
d1:a6:1e:63:c1:ce:20:ea:74:c4:1c:c0:3b:9b:f6:
47:d7:09:e1:30:83:d2:1e:80:c6:5e:79:bc:21:52:
c0:de:26:99:78:6e:72:ea:32:17:21:37:f1:e0:dd:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:03:08:30:AF:E9:6C:0B:2A:DA:2E:27:3D:37:45:43:5E:23:38:D4
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136302e3233382e3232302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:dd:cf:0c:3e:ab:c9:4a:08:b9:d9:3f:17:6a:98:d5:5b:01:
03:98:85:6f:78:ae:43:13:ce:3d:33:03:1d:a4:d7:60:42:79:
93:dc:80:ed:d2:b5:7d:46:5f:43:fc:94:a5:6c:a8:a6:ed:34:
29:3e:72:26:a0:a6:90:de:1d:8b:9d:82:34:df:d7:85:57:ae:
1b:65:27:df:3d:82:a2:ac:98:c0:60:98:01:d5:e1:40:5e:ef:
58:44:3d:f0:32:40:25:83:3c:3d:7b:5e:e5:5c:68:fc:a8:7c:
cf:da:55:53:80:97:53:6f:c7:e6:50:83:7b:58:58:83:6e:16:
81:04:9f:f7:48:3a:fd:aa:05:df:cf:b2:95:bb:57:d5:29:d2:
2a:99:b2:3e:45:83:b7:26:5b:23:bb:c9:ad:74:3e:10:1d:e7:
33:9e:00:bc:12:7e:f8:59:3c:b8:77:d8:fa:0e:78:83:c0:8f:
d5:b7:e7:5a:4d:00:1e:71:d1:cb:30:8e:e2:76:c6:1c:b8:9f:
00:c7:4c:aa:bf:1d:95:21:55:56:49:9d:f4:f4:fa:b9:98:3a:
29:a7:cb:3f:88:43:2d:c0:a6:2e:4c:ff:a1:a2:93:fb:fa:b9:
28:6e:eb:1b:d3:27:ff:75:39:ce:84:76:04:64:9d:3e:e1:fe:
18:bb:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org