Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
File: 3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier: VAqQJ9lkRoGpxfSAg88GHXBn+GCL5SU0s40SSIqV+Nw=
Subject key identifier: CE:79:0E:03:6D:49:A2:C7:1F:A6:9F:E9:E2:30:97:9E:A2:45:DC:B6
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 4B388B5935693B175F0EBCBA7F94850D91A08BA4
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:07:04 +0000
ROA not before: Mon 08 Apr 2024 20:02:04 +0000
ROA not after: Mon 07 Apr 2025 20:07:04 +0000
asID: 28220
IP address blocks: 187.110.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:38:8b:59:35:69:3b:17:5f:0e:bc:ba:7f:94:85:0d:91:a0:8b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:04 2024 GMT
Not After : Apr 7 20:07:04 2025 GMT
Subject: CN=CE790E036D49A2C71FA69FE9E230979EA245DCB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:9b:d7:50:b3:91:d6:09:e8:88:67:3a:78:
82:89:f2:92:9f:a9:b0:7d:dc:c5:9c:d0:78:16:b9:
3e:28:a6:93:c5:9e:12:c2:bd:e2:ad:e2:55:fa:d9:
69:07:34:87:ed:54:9d:49:c7:b8:5e:e7:35:ad:74:
21:54:19:3a:5a:3d:b9:06:68:35:0a:21:8b:a8:35:
b7:b5:3d:71:3a:08:d1:60:12:18:fc:f6:04:b5:b6:
0f:58:dd:bf:16:db:a2:2d:a2:c9:e1:b5:c4:0d:d9:
0e:30:82:65:2f:1e:b7:a6:45:47:1d:03:ba:70:c8:
95:bc:43:60:26:8d:1e:4e:56:f1:cc:6f:db:28:a9:
7d:d3:12:7e:c0:aa:02:05:25:22:2c:8b:6a:03:2a:
dc:9b:36:6f:87:8e:54:ec:94:f8:98:64:3f:b8:bd:
77:19:88:ff:86:61:d2:c5:f6:45:5d:5b:c1:fe:2a:
39:2e:fc:a4:52:2d:74:68:09:00:48:8f:7f:3f:4b:
03:6d:33:98:b0:71:4f:bd:a5:21:fb:ab:54:b8:8a:
3d:43:7f:a6:82:8a:2a:51:dd:a9:d1:5c:e8:cf:32:
c9:07:37:68:cc:a2:a5:7a:44:46:81:1b:c4:28:05:
99:89:8a:5a:f8:5b:c3:97:62:3f:c3:36:f9:b6:58:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:79:0E:03:6D:49:A2:C7:1F:A6:9F:E9:E2:30:97:9E:A2:45:DC:B6
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230392e302f32342d3234203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.110.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a2:5b:18:6f:b4:3f:c8:42:46:53:3d:ba:5c:86:5b:34:f5:
78:56:6c:e0:f6:40:99:a1:d7:a5:b6:48:4d:bc:2b:cf:09:5f:
8e:24:b0:bb:18:45:cc:c4:89:03:8b:40:4e:6b:f2:01:e0:94:
68:cb:51:9b:85:f4:45:31:69:cb:2e:52:10:92:e7:83:a5:8b:
f7:a0:a0:38:d0:49:2c:c4:d1:28:54:02:07:53:96:ad:51:33:
ed:82:96:d6:cb:c2:1b:b3:26:82:21:38:5d:53:5d:b1:1e:4e:
f0:57:17:9d:dc:dd:08:61:18:c3:70:79:94:65:84:48:e7:3d:
32:2a:6b:d5:c2:09:3d:50:e1:f9:13:6f:63:a6:7c:eb:ea:6b:
73:15:71:61:8f:4a:5e:a2:56:3e:b7:7b:a0:c8:57:e1:d0:d1:
88:f9:81:7a:93:36:6e:1a:1f:d6:f5:45:9e:25:92:bb:ca:6e:
0f:cf:4d:7d:34:c5:e3:58:08:58:94:c5:02:3c:d2:b9:d9:ca:
2c:f9:1d:c2:75:c4:34:7c:0b:a5:ce:18:99:1b:da:fb:05:04:
40:c7:67:fc:3f:2d:fc:df:ae:4c:9d:d6:af:7f:e8:07:09:0c:
f7:75:ca:04:84:e8:b2:79:9b:6a:d5:f6:ac:23:70:70:f1:24:
48:25:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org