Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/1/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
File: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (raw, json)
Hash identifier: IGg0MrOyE/MSlmplGrX7q9ZMnPDwmA1JWl0c5OSxj/E=
Subject key identifier: 1B:28:5E:25:31:C0:8C:52:B3:87:49:3C:E9:4D:7A:CD:66:83:4A:9A
Certificate issuer: /CN=E4249BF3881CD1EC50FE414602698AB945EA113C
Certificate serial: 7285A061A28D5EA08783A1785710E3670FA5C24B
Authority key identifier: E4:24:9B:F3:88:1C:D1:EC:50:FE:41:46:02:69:8A:B9:45:EA:11:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4249BF3881CD1EC50FE414602698AB945EA113C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/1/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
Signing time: Thu 04 Apr 2024 17:07:10 +0000
ROA not before: Thu 04 Apr 2024 17:02:10 +0000
ROA not after: Thu 03 Apr 2025 17:07:10 +0000
asID: 265242
IP address blocks: 168.0.20.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:85:a0:61:a2:8d:5e:a0:87:83:a1:78:57:10:e3:67:0f:a5:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4249BF3881CD1EC50FE414602698AB945EA113C
Validity
Not Before: Apr 4 17:02:10 2024 GMT
Not After : Apr 3 17:07:10 2025 GMT
Subject: CN=1B285E2531C08C52B387493CE94D7ACD66834A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:0b:78:63:7f:77:58:1c:47:50:53:a6:67:
0d:ae:48:55:90:08:56:37:be:fe:2f:8c:36:de:57:
a8:59:ca:35:2b:da:7d:ee:43:a2:2f:b2:f5:1b:df:
30:1b:6c:14:2f:2e:7e:37:34:28:db:56:46:f4:c0:
e1:37:a6:3c:8e:25:ec:ef:da:09:aa:07:ad:8e:ed:
61:55:0c:1b:06:4a:14:df:a5:06:84:4c:a3:3b:12:
0d:47:a9:9f:e8:7f:71:f3:b4:df:e9:0f:7c:22:ea:
e6:42:8c:f4:2f:a7:25:ed:cd:58:16:05:fb:76:bf:
84:32:57:73:56:87:73:07:a0:30:d7:16:cf:c0:ca:
04:b2:2a:c5:f6:e5:92:b2:be:b6:19:f4:9d:d7:10:
47:09:9d:c7:20:54:b5:b7:96:55:01:fe:3f:a1:ae:
40:18:78:f4:69:3d:ec:c0:9b:0e:df:b1:9c:aa:22:
af:2f:88:88:ef:23:d8:62:5d:7c:a9:bb:aa:13:97:
4b:6f:45:00:39:c2:11:c5:d3:e9:a8:e1:58:87:8f:
85:23:be:1b:27:52:df:57:31:30:80:ed:97:75:07:
8d:46:91:3c:a1:c3:4d:bf:9a:fb:1e:21:fa:c2:8b:
66:c4:af:da:3c:30:d8:bd:d6:bd:9a:d0:9b:a6:46:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:5E:25:31:C0:8C:52:B3:87:49:3C:E9:4D:7A:CD:66:83:4A:9A
X509v3 Authority Key Identifier:
keyid:E4:24:9B:F3:88:1C:D1:EC:50:FE:41:46:02:69:8A:B9:45:EA:11:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/1/E4249BF3881CD1EC50FE414602698AB945EA113C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4249BF3881CD1EC50FE414602698AB945EA113C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/1/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.20.0/22
Signature Algorithm: sha256WithRSAEncryption
02:31:bb:f5:9e:99:77:ca:3f:ac:c4:22:c8:23:57:fb:3f:6e:
ca:59:b9:a3:42:7d:24:3c:c5:a6:55:47:bd:fc:00:73:72:86:
e2:42:a8:38:e0:8e:88:9f:ba:05:9c:bf:5c:93:fc:fb:a4:6c:
c5:1c:af:15:bf:81:9f:16:e9:0a:93:18:d9:d9:22:05:fd:ed:
a6:16:11:9a:0d:f4:ed:21:b0:d4:53:d2:e2:ec:2e:1e:70:41:
76:4d:fa:e1:82:6d:35:f4:93:14:2e:a6:37:45:d8:49:8e:e9:
7c:89:b4:f5:7d:7e:73:a5:8f:46:46:8b:1e:ce:ed:5f:d6:66:
d5:ae:6c:53:b9:14:a3:15:66:e1:f4:9b:08:e1:07:d5:69:e3:
21:f4:e4:b2:e1:ff:48:e0:10:e3:db:df:d4:ca:f2:70:48:48:
b2:90:71:0a:bb:74:89:3f:46:48:ab:64:ba:ca:5f:d9:b2:21:
d2:e2:05:31:74:2b:2d:59:17:3c:b8:72:5a:64:22:92:5b:dc:
c7:2b:a9:72:33:9b:a5:b9:87:8e:8f:b0:f6:a4:e8:4f:13:1c:
23:09:4d:ba:2a:2f:36:bf:8c:f4:0e:4b:66:06:e3:cf:52:b5:
10:3a:4b:4d:0d:72:49:e4:04:34:6d:0d:3f:6e:ce:47:fe:b7:
5b:c1:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org