Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3138392e31342e3232342e302f32302d3234203d3e203238323833.roa
File: 3138392e31342e3232342e302f32302d3234203d3e203238323833.roa (raw, json)
Hash identifier: wYMDBP850vSlLqFtVQkTScxl82V5Cllb3cX9xadGKAs=
Subject key identifier: BC:A9:55:2D:C6:E3:5C:C7:B5:6B:23:AD:40:03:C7:26:83:B7:92:A0
Certificate issuer: /CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Certificate serial: 140214F5FDC8F5B8EC1ED33C4E1B75282414FC14
Authority key identifier: 40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3138392e31342e3232342e302f32302d3234203d3e203238323833.roa
Signing time: Wed 04 Oct 2023 14:00:00 +0000
ROA not before: Wed 04 Oct 2023 13:55:00 +0000
ROA not after: Fri 04 Oct 2024 14:00:00 +0000
asID: 28283
IP address blocks: 189.14.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:02:14:f5:fd:c8:f5:b8:ec:1e:d3:3c:4e:1b:75:28:24:14:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Validity
Not Before: Oct 4 13:55:00 2023 GMT
Not After : Oct 4 14:00:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:dd:57:a1:3c:9b:1f:9d:ff:e0:c5:e3:7c:
72:27:19:7f:c8:84:dd:bd:69:b1:c3:f8:ac:53:ed:
91:23:8f:f0:9d:53:d7:fd:d9:4a:3f:88:f5:74:bd:
9f:6a:f5:ac:8e:67:f3:c3:12:68:36:4e:26:dd:3f:
b5:98:88:91:2c:52:2e:d8:19:2b:da:9a:f6:0f:43:
b1:f2:1b:d4:cf:04:03:ba:8a:88:34:b8:1c:6a:4a:
0f:a8:4f:35:7d:43:ac:8e:ed:e8:19:8d:ac:ed:8e:
17:e3:a9:e8:7d:3d:fd:55:d5:8a:04:4d:8c:c6:d7:
ed:94:86:ba:aa:ce:12:ef:ae:2b:ba:ba:eb:cf:33:
f7:e0:03:cf:7e:24:b8:1a:06:44:82:70:ce:2f:05:
c3:fc:10:13:30:ae:6c:e9:71:5b:2f:ac:ab:38:81:
ed:7a:7e:8e:47:75:fb:65:70:06:be:88:1f:77:ed:
b6:56:65:ab:60:76:52:db:98:35:ae:e0:40:c8:d7:
90:c9:1d:58:d2:78:36:56:1b:43:cd:7a:e1:d4:1c:
0f:11:ac:d8:19:6a:d1:54:48:df:00:99:59:57:71:
4d:be:9c:81:ee:a7:14:22:8f:73:f1:da:d4:03:23:
a9:2c:2b:6e:06:3c:dd:b2:5a:a2:7c:7d:b7:06:da:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:55:2D:C6:E3:5C:C7:B5:6B:23:AD:40:03:C7:26:83:B7:92:A0
X509v3 Authority Key Identifier:
keyid:40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3138392e31342e3232342e302f32302d3234203d3e203238323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.224.0/20
Signature Algorithm: sha256WithRSAEncryption
31:e0:26:fa:26:03:f4:f7:b1:ca:dc:c1:af:00:1c:5a:78:2f:
96:f0:bc:56:65:ab:89:9d:88:62:91:9a:51:a7:89:96:55:02:
5d:13:a8:bc:8c:c4:96:7a:be:e4:bd:38:4c:98:6f:8a:00:72:
2b:15:1f:ed:73:f8:1e:e0:4b:47:be:84:e1:08:a0:28:c7:c1:
93:da:c4:ea:98:da:c6:63:bb:03:f5:a7:29:6e:ce:19:ca:26:
4e:aa:ab:fd:cc:1f:16:02:29:a0:de:fd:5c:4e:99:c9:ef:b0:
15:f7:da:21:d6:9e:50:f2:a8:f4:e5:f7:54:57:4c:10:e8:58:
9d:76:6f:89:75:ba:e2:91:0c:14:55:d1:5e:1a:d9:2c:8f:4d:
97:22:fd:92:38:80:c0:e0:26:8b:42:2a:c1:6b:91:fd:5e:83:
77:70:fe:0e:17:65:f3:c3:5c:0e:ed:21:ab:ee:82:1d:31:98:
58:13:46:ba:7d:c4:5c:d3:1a:82:14:1d:35:1c:30:f5:1a:a0:
ff:b2:1b:82:15:3c:4d:97:6a:23:ae:db:f0:fe:d7:13:70:8b:
a7:e9:f6:2d:95:08:0c:f6:6a:a6:cc:56:66:2a:1a:d2:12:8c:
9e:f7:c5:b0:4f:f9:d9:b8:48:2a:4e:35:cc:f5:95:53:70:5d:
22:97:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org