Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
File: 3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: WA49Ey9WSSbOCV1EgR2wOLE3hJzyHLKDLmVSfg9Q4+k=
Subject key identifier: 32:77:3D:96:A7:2B:93:EA:33:1D:63:FC:96:6D:20:02:94:71:80:FA
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 13B77578A23741341A5F0446103241A4110ABAED
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:06:53 +0000
ROA not before: Mon 08 Apr 2024 20:01:53 +0000
ROA not after: Mon 07 Apr 2025 20:06:53 +0000
asID: 28270
IP address blocks: 168.228.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b7:75:78:a2:37:41:34:1a:5f:04:46:10:32:41:a4:11:0a:ba:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:53 2024 GMT
Not After : Apr 7 20:06:53 2025 GMT
Subject: CN=32773D96A72B93EA331D63FC966D2002947180FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:9b:38:dc:b4:56:76:c9:6e:58:f8:16:e9:
19:9e:16:a7:10:5c:61:c8:cf:47:bc:96:8d:d3:b9:
5e:93:2d:9d:d2:22:64:8c:3f:76:82:73:fd:be:26:
88:0f:88:94:2c:4e:6a:77:f0:75:1f:7f:fe:8e:8e:
02:29:6e:76:ef:2c:f3:6f:d2:88:20:dd:4e:70:13:
51:3c:ba:2b:5f:ff:55:cf:b1:ff:9b:22:4f:f1:f9:
13:d5:f9:c6:f2:58:36:ca:33:25:64:bf:5b:05:5c:
a8:e3:d5:14:79:73:fb:46:20:ff:66:a2:49:9e:30:
54:db:61:7d:4e:0a:13:1f:04:c3:2b:f5:c4:23:fd:
bd:86:77:e8:36:09:6b:ce:c6:c7:61:f7:78:82:48:
80:ed:ca:78:67:4d:13:96:2d:1f:7b:96:04:a9:04:
4c:ac:fc:e5:ea:eb:1f:c4:cb:bb:fb:a1:27:3a:37:
61:63:9f:6b:60:bc:4d:5a:9a:7e:81:b7:5b:aa:17:
ee:d8:d4:58:2c:15:52:60:a0:f7:28:14:4c:06:ca:
03:c6:82:1c:5d:47:a5:bd:9a:6c:dd:c9:3d:df:76:
48:1b:8e:fd:fc:b3:e3:a0:0e:4a:6d:68:11:8d:f0:
7e:ea:96:0e:02:fa:58:ed:e8:7c:31:50:c1:13:82:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:3D:96:A7:2B:93:EA:33:1D:63:FC:96:6D:20:02:94:71:80:FA
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
11:52:05:ce:a4:03:55:f1:db:fa:21:ea:29:cc:d8:7f:60:77:
34:07:b4:51:0b:7f:5b:f8:12:71:0f:28:dc:23:11:7a:db:70:
fb:89:3f:09:cd:82:00:f5:a6:f6:16:1e:ec:f8:f9:3e:c5:fd:
1b:c6:8b:7b:40:3d:90:41:e7:ab:60:91:e3:70:f2:a4:91:c2:
eb:f9:5f:ba:be:d3:27:ed:45:2a:2c:92:a3:00:5b:68:b6:d8:
9f:c7:54:05:3e:25:1d:cc:27:c1:33:b5:9e:d9:a9:1a:b4:c8:
b9:23:03:b5:5d:10:74:7a:41:79:a4:e4:b8:df:6e:91:76:db:
fc:96:40:44:ef:5f:14:a4:ca:97:d3:53:cb:0c:90:1c:d2:d2:
83:c0:37:d3:7f:99:07:13:63:12:5c:2c:92:52:7f:71:c7:bb:
ce:10:dc:a5:16:d6:cb:76:e7:58:e4:d1:bb:07:76:52:3f:7d:
7b:49:7a:ab:8f:a4:5c:ad:8d:50:b1:f4:0c:2e:6f:64:0b:a7:
19:d5:48:70:7b:c7:d0:23:4f:53:3d:ad:c4:4d:ba:98:82:a1:
cc:69:f7:9d:5e:56:7f:49:93:e4:25:b9:4d:9f:10:3d:34:1b:
24:b3:d6:d4:c7:4c:a6:78:6d:21:5b:ad:2f:20:50:d1:ef:51:
25:56:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org