Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35322e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: neRB5a9YczvehkOu30NELHhgAKhl1oSalB96UM83Tt4=
Subject key identifier: 17:0E:34:53:C9:D8:72:16:92:B8:88:DB:82:6F:14:68:1C:C8:F0:89
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 242C85ACAEB8F73B0377F89D0D902C7FD4E39047
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:56 +0000
ROA not before: Mon 08 Apr 2024 20:01:56 +0000
ROA not after: Mon 07 Apr 2025 20:06:56 +0000
asID: 28270
IP address blocks: 168.121.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:2c:85:ac:ae:b8:f7:3b:03:77:f8:9d:0d:90:2c:7f:d4:e3:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:56 2024 GMT
Not After : Apr 7 20:06:56 2025 GMT
Subject: CN=170E3453C9D8721692B888DB826F14681CC8F089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:16:be:1e:e2:ff:ef:06:74:62:ad:cf:6c:
6f:ae:67:e5:20:0a:ef:a1:e4:22:e5:ec:31:db:c3:
c3:48:fd:78:6c:43:c5:a7:d4:83:58:b2:21:00:e1:
36:89:25:45:a4:8b:f8:5e:48:07:bf:ad:48:15:e7:
18:14:ab:4b:93:10:0c:17:7b:8e:9d:ca:e6:3c:13:
18:48:47:74:11:59:cd:2b:b2:18:d7:40:27:9a:a0:
9b:39:44:b1:32:67:eb:8b:c2:77:5c:d7:f6:5a:18:
60:e3:7c:56:3a:19:8b:94:8b:76:d2:b2:ee:fb:9c:
3a:a4:bc:d8:a7:31:6c:e3:54:70:aa:ea:12:39:4d:
30:2d:2e:ec:57:30:a2:40:10:ab:bb:f4:bd:dc:47:
ca:bf:59:e7:82:86:96:30:03:98:5c:43:41:ec:0f:
4a:a0:b8:a0:5f:d9:b9:ca:be:4e:38:c3:34:74:91:
99:b2:a5:59:c5:94:5c:2a:7e:31:f0:ac:ab:90:93:
58:55:5c:1d:cc:6d:76:eb:74:6e:6b:e0:9b:97:c8:
bc:69:7d:b7:9f:5c:16:40:f0:e5:44:ad:d8:92:64:
69:34:24:3f:e0:68:8c:e3:01:51:72:d1:dd:98:3b:
ff:c6:83:aa:9b:ad:33:76:ef:7c:af:d5:58:78:fc:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:34:53:C9:D8:72:16:92:B8:88:DB:82:6F:14:68:1C:C8:F0:89
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:07:ff:1c:d2:89:2f:d6:12:de:15:f5:7b:4f:bb:64:6b:e0:
88:ad:78:b1:2f:f2:74:8d:52:7c:1b:c2:ff:71:48:20:a4:e8:
d8:0f:cd:fe:6e:fd:cf:79:f5:cc:f5:92:07:86:f9:ab:3e:e4:
45:aa:ab:3a:9e:1d:dd:84:38:95:42:37:09:e7:83:1d:f2:d5:
3b:55:f4:e0:d7:67:24:ce:e6:d6:e1:9c:13:e0:13:40:70:56:
25:4d:c4:b7:08:36:fd:d1:4d:d8:d7:cd:86:45:46:ab:1e:95:
8d:50:bd:d8:74:be:4f:a3:db:20:95:b0:01:e8:68:04:42:cf:
d1:fd:7f:bc:a8:1b:c8:d1:26:e5:bc:02:9a:50:05:6b:26:e3:
b6:52:eb:a6:f6:ba:17:bb:1e:00:d2:36:c4:47:73:23:de:4b:
d1:14:5a:2c:e2:44:61:ab:d5:5c:e1:aa:90:e7:8c:a4:04:c1:
5e:39:f7:86:4a:6b:81:cf:8f:ab:80:b6:1b:cd:20:12:81:ec:
ff:58:69:c6:3c:47:e7:cb:d2:43:66:f7:61:e4:b1:4b:ea:45:
67:18:f9:f2:bd:57:71:86:ff:21:5c:77:3e:f7:26:1c:b5:0d:
4e:81:91:b1:c2:30:90:09:14:a6:68:37:59:aa:b0:13:70:01:
44:c2:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org