Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa
File: 3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier: ke1MV9XqMuVZ/64D7qr4HuJObDrk96cL1RYPkjyEmjI=
Subject key identifier: 70:0D:0A:72:9E:2F:8B:57:28:39:66:46:B2:03:22:EA:EA:AE:C7:7A
Certificate issuer: /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial: 22C48FC27212DC4DE52DB9BEC5C0167C140520F9
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa
Signing time: Wed 31 Jan 2024 14:31:15 +0000
ROA not before: Wed 31 Jan 2024 14:26:15 +0000
ROA not after: Wed 29 Jan 2025 14:31:15 +0000
asID: 262992
IP address blocks: 160.238.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c4:8f:c2:72:12:dc:4d:e5:2d:b9:be:c5:c0:16:7c:14:05:20:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Validity
Not Before: Jan 31 14:26:15 2024 GMT
Not After : Jan 29 14:31:15 2025 GMT
Subject: CN=700D0A729E2F8B5728396646B20322EAEAAEC77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:3d:3a:9d:9e:f2:b1:42:80:4d:5b:c9:b6:
8a:2d:02:cf:ff:bb:54:ab:b9:bb:1c:6c:40:e0:48:
4b:ed:45:9e:b7:1d:8c:a5:45:3b:81:3d:c5:49:a7:
42:ac:5e:5c:cc:35:45:5a:01:ed:1d:b0:05:ce:35:
70:e4:e2:21:1c:d9:be:35:db:c8:e6:b7:5e:ed:ce:
b4:71:2b:72:64:0f:55:2a:6f:e4:71:08:2d:88:7f:
63:a0:de:f3:75:9c:d4:f3:84:bb:74:83:aa:b8:fa:
50:54:87:44:d6:b2:0b:b1:b9:c0:c4:6a:c1:a3:79:
df:57:2f:4d:c8:4f:e3:92:1a:03:79:47:e8:30:0b:
39:48:03:78:08:6f:db:db:b1:89:45:bd:ff:73:eb:
2c:88:eb:0a:dd:89:48:c4:a8:6d:24:53:f0:6b:bf:
d5:6b:f1:40:15:77:94:79:f2:ef:57:a2:74:0f:77:
2b:e3:9e:6a:2a:cb:61:38:a6:52:3e:cf:9c:13:a4:
89:f3:33:6b:19:87:02:ec:01:56:df:67:23:dd:4b:
3f:c7:a0:0d:37:90:dd:b2:ce:fe:a2:7e:93:e7:09:
38:60:d4:f1:2a:cd:b5:46:22:2a:dd:75:46:41:c2:
67:7e:84:08:4e:c0:7b:9e:6f:86:31:c3:51:5a:ff:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:0A:72:9E:2F:8B:57:28:39:66:46:B2:03:22:EA:EA:AE:C7:7A
X509v3 Authority Key Identifier:
keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:55:ad:0d:2f:26:c7:1c:56:dd:93:75:dd:bd:ee:c9:3d:dc:
8d:55:20:32:e0:5a:3b:19:4e:3a:67:56:d3:8a:5f:92:1a:d6:
5f:80:bd:91:0a:15:89:b8:bd:7b:86:19:29:42:75:73:b8:94:
62:4c:27:68:35:6b:6a:66:ed:14:c0:85:3a:1b:8d:3a:bf:df:
fc:14:9e:1b:98:2d:bc:44:b1:b4:43:6b:b6:8f:89:c3:99:66:
ba:af:5e:ed:be:c7:94:c0:d1:63:70:65:67:e6:bc:69:b7:08:
2e:61:c8:e4:8e:07:f6:cd:11:9d:bd:f2:a2:b7:60:5e:9d:9f:
fc:b1:c3:eb:0b:ea:1b:d1:c8:30:9e:43:c8:23:38:1e:54:fc:
85:b5:ec:62:85:77:e3:05:db:0a:63:22:d6:0e:3d:15:be:00:
4a:32:b2:32:7d:8b:b4:35:46:7f:a7:8d:6a:49:71:d5:e9:d2:
fe:9f:2c:dd:4e:3d:85:f8:2f:e6:78:ce:70:10:50:b2:30:d5:
dc:1c:e7:d8:a8:23:9f:c3:01:1a:68:c6:f8:c5:f6:fe:9e:a0:
60:b2:78:78:e6:f8:72:36:f7:d2:93:6c:62:19:de:c7:93:01:
d6:fa:b1:a1:dc:59:1e:8c:31:6f:3d:7a:cc:ee:3c:1b:06:83:
26:e1:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org