Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35332e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: YJxELMzuYvsMQMDoMjCVXg9/TrNZ9paMhvwZfetbziA=
Subject key identifier: 13:AB:41:82:35:57:48:5C:FF:F9:0B:AD:82:22:FC:A8:29:AC:15:06
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 08FBF288C198120BBABA5005BDE32E72462EA7AF
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:53 +0000
ROA not before: Mon 08 Apr 2024 20:01:53 +0000
ROA not after: Mon 07 Apr 2025 20:06:53 +0000
asID: 28270
IP address blocks: 168.121.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fb:f2:88:c1:98:12:0b:ba:ba:50:05:bd:e3:2e:72:46:2e:a7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:53 2024 GMT
Not After : Apr 7 20:06:53 2025 GMT
Subject: CN=13AB41823557485CFFF90BAD8222FCA829AC1506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:19:ed:41:2a:8e:4a:59:e3:03:3b:35:a4:
ce:a3:65:41:e9:41:71:79:1d:96:f7:43:7e:e0:15:
f8:73:22:bc:81:26:b3:2e:68:2f:0a:e0:d3:46:40:
a0:87:b6:b3:04:bc:dd:a8:8e:21:fd:84:91:f7:87:
05:c9:fa:86:45:9e:9e:ac:ab:8a:27:58:7e:38:7b:
30:54:b7:06:66:0b:4a:4f:b3:e8:87:f6:db:fd:78:
eb:70:91:a1:b2:45:28:da:e2:33:e9:ad:cb:46:22:
fe:1b:35:31:92:59:2e:47:3f:36:73:9f:84:3c:e2:
97:da:9d:fc:e2:f9:1e:03:8d:fe:f1:9e:76:dd:fa:
d5:00:02:06:cc:c7:62:5c:76:34:59:e8:1f:39:42:
66:df:d0:3d:99:4f:d3:0d:1e:3e:f7:9d:2c:3c:b9:
a7:10:7d:ea:9d:1d:4a:97:cd:31:72:bf:0b:ac:18:
d9:54:43:59:77:9b:89:84:38:f7:fc:4d:9e:9e:50:
22:73:c7:e0:68:6e:f6:30:14:8d:1f:89:f2:b3:ad:
68:25:02:36:36:57:cb:b3:61:14:35:6e:74:0c:9d:
0e:9b:26:63:b6:6c:11:c1:c9:4a:70:df:22:ce:53:
d3:8d:50:a8:4c:90:7e:82:48:93:ac:e7:aa:66:24:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:41:82:35:57:48:5C:FF:F9:0B:AD:82:22:FC:A8:29:AC:15:06
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35332e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:bb:c3:33:4e:ab:b1:ce:28:47:f0:25:d4:f4:75:25:96:1a:
f5:9b:aa:70:f7:4a:c1:11:d8:4e:9a:46:2a:99:57:56:0e:31:
d2:47:15:dd:12:ed:b9:b9:a7:13:07:57:6e:5e:a7:23:f1:ae:
da:c2:97:6c:88:3a:d0:93:54:b9:cd:84:75:ba:57:ee:b6:51:
eb:47:07:c6:0f:1d:6c:a6:2a:2e:ed:12:54:1c:67:16:10:5d:
9f:5d:cb:1d:16:8a:84:81:b1:68:84:8e:68:e3:94:3a:9e:00:
c9:f9:e9:22:4e:d9:5f:ad:36:6c:fa:b3:85:2c:72:00:fd:87:
b6:00:b4:c1:e2:73:95:dc:36:4d:e1:98:b1:00:d4:58:38:78:
76:d5:0b:ae:73:c0:c3:36:4b:5b:a1:5b:51:7f:f8:b9:90:28:
3f:b5:75:d5:0f:89:ad:6c:6f:8c:86:77:da:4d:56:17:5a:8f:
4c:04:82:c5:a4:6f:de:16:61:b2:fc:ae:a8:7d:0c:5c:8c:a2:
d1:48:e8:4c:e0:64:5f:f9:3b:6e:a5:33:5a:a0:f6:35:b7:e2:
3c:fd:22:7c:8a:c7:d2:04:79:04:c7:4f:46:b7:94:0c:14:92:
09:fa:ef:1a:95:91:65:72:28:33:72:a6:66:4b:c3:66:0c:04:
fc:28:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org