Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32322d3234203d3e20323635343130.roa
File: 3136382e3139352e302e302f32322d3234203d3e20323635343130.roa (raw, json)
Hash identifier: GMTnvxU9lWFd7LTDXJNEDHIKCt/EcsgtTXBvf/UhIsw=
Subject key identifier: E6:20:40:39:03:06:D1:06:5A:A4:52:AB:E9:83:04:59:E8:25:1A:3E
Certificate issuer: /CN=64902D35F66E7AF02159D76F49B1F57C555C7B1A
Certificate serial: 562A720A9DB82AB6363B8B3EF43C0055DDF5EABB
Authority key identifier: 64:90:2D:35:F6:6E:7A:F0:21:59:D7:6F:49:B1:F5:7C:55:5C:7B:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32322d3234203d3e20323635343130.roa
Signing time: Sat 28 Jan 2023 19:00:00 +0000
ROA not before: Sat 28 Jan 2023 18:55:00 +0000
ROA not after: Sat 27 Jan 2024 19:00:00 +0000
asID: 265410
IP address blocks: 168.195.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2a:72:0a:9d:b8:2a:b6:36:3b:8b:3e:f4:3c:00:55:dd:f5:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64902D35F66E7AF02159D76F49B1F57C555C7B1A
Validity
Not Before: Jan 28 18:55:00 2023 GMT
Not After : Jan 27 19:00:00 2024 GMT
Subject: CN=E62040390306D1065AA452ABE9830459E8251A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:05:b0:42:eb:a7:2b:e3:42:82:77:3f:f1:
d5:2a:64:6a:e2:6b:54:82:bc:d3:75:d9:6d:cc:e4:
7a:ee:5c:17:45:2c:4a:b2:91:cb:19:c0:cf:ff:c6:
0c:4d:15:8b:79:d9:db:9a:6e:00:f9:66:db:a4:29:
b0:c8:19:df:de:c1:0d:a7:e6:d9:b6:c5:b1:9c:f7:
72:1c:a3:3c:12:48:29:80:b9:af:85:05:eb:ca:32:
b8:c5:08:06:1f:7a:e7:a8:59:b6:65:8a:b7:56:2e:
ea:f2:5a:32:56:88:16:86:73:c1:c4:48:5f:3d:62:
9b:14:a7:7e:6b:51:8b:26:5a:70:2f:2b:8e:1a:8e:
c9:f4:ef:b9:7b:70:3e:30:f4:fb:87:7e:86:0a:1b:
a8:d5:f7:06:4b:73:be:b4:03:72:a2:af:d3:dc:77:
69:b6:4e:34:45:d0:eb:40:b6:4e:72:9d:b1:2c:7f:
af:c6:d0:9e:9e:1f:9c:c6:8e:4d:0c:b9:af:df:d8:
e4:ca:6b:0a:11:2c:14:a3:f9:57:3d:10:77:f4:b9:
6a:de:50:56:c3:bd:cf:41:59:ea:9a:01:d8:92:d6:
83:3e:28:95:14:cd:f8:ef:22:c3:74:ac:ee:03:8e:
f2:51:3d:82:8f:94:9a:c8:71:f9:b5:e8:68:fa:de:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:40:39:03:06:D1:06:5A:A4:52:AB:E9:83:04:59:E8:25:1A:3E
X509v3 Authority Key Identifier:
keyid:64:90:2D:35:F6:6E:7A:F0:21:59:D7:6F:49:B1:F5:7C:55:5C:7B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64902D35F66E7AF02159D76F49B1F57C555C7B1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32322d3234203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:62:18:be:fc:82:fb:44:5f:50:90:e5:03:6e:e3:31:42:6c:
c1:eb:e5:9e:90:03:fe:2a:7f:9f:c0:32:fb:37:81:83:14:a4:
bf:a9:be:02:18:b0:84:72:25:73:a0:41:ad:60:0c:37:53:29:
3b:45:32:7c:7d:86:9f:60:91:ee:7c:86:f8:3a:91:2c:f2:fc:
8c:3f:3c:4e:ce:57:2b:cf:bc:76:b7:a7:a1:a1:73:ff:ad:e1:
bc:30:65:4a:b1:f5:a6:72:fe:e3:b9:fd:c9:78:3c:d9:ad:5f:
dd:c1:3e:39:09:f3:87:15:7b:61:0d:73:9e:bd:fe:07:13:26:
54:64:bc:56:62:80:eb:1c:43:8f:ef:2c:f4:e0:4b:31:16:56:
78:44:e1:7e:eb:a3:e3:d7:dc:ec:0d:42:37:53:ad:2d:f3:6a:
61:e1:f0:24:e8:02:a3:98:ba:16:8c:97:ec:54:14:c2:f0:c3:
51:5f:d7:4d:4f:04:68:5c:3c:5a:51:80:0a:9f:6e:e2:13:29:
10:0b:ee:15:30:f6:06:26:74:ff:94:ec:73:08:79:65:5f:af:
ce:7d:d3:e4:7c:21:54:28:96:5f:d0:af:03:9c:25:5e:c3:49:
cf:d7:3a:f5:c4:fd:06:3f:88:73:22:44:21:5a:4f:6c:3c:8d:
90:8a:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org