Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235342e302f32342d3234203d3e20323634383932.roa
File: 3136382e3230352e3235342e302f32342d3234203d3e20323634383932.roa (raw, json)
Hash identifier: fPYIzBvq2r69p9ACmG6Q0XoWXqxES9mcjxA+hK8ZOhg=
Subject key identifier: 10:A2:A6:C0:88:1B:41:61:97:98:C6:D6:3F:13:37:17:68:87:B4:D4
Certificate issuer: /CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Certificate serial: 34707E81F83F8A314FDD19C1606966928F4E187B
Authority key identifier: 20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235342e302f32342d3234203d3e20323634383932.roa
Signing time: Wed 31 Jan 2024 20:10:11 +0000
ROA not before: Wed 31 Jan 2024 20:05:11 +0000
ROA not after: Wed 29 Jan 2025 20:10:11 +0000
asID: 264892
IP address blocks: 168.205.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:70:7e:81:f8:3f:8a:31:4f:dd:19:c1:60:69:66:92:8f:4e:18:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Validity
Not Before: Jan 31 20:05:11 2024 GMT
Not After : Jan 29 20:10:11 2025 GMT
Subject: CN=10A2A6C0881B41619798C6D63F1337176887B4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:19:08:d0:bd:1e:8f:f6:ca:ce:c2:a4:13:
23:7c:ba:ee:ae:57:12:6f:10:08:b5:03:da:03:51:
1b:14:a9:1c:f2:76:fc:ed:32:b1:ca:4a:1d:ac:f3:
7c:69:d9:15:e4:c8:38:f7:1c:0d:3b:4e:3b:a8:f6:
05:75:42:f1:16:1d:a8:d4:91:05:97:56:14:73:a2:
f0:18:01:fc:fe:18:13:96:65:ec:a5:a7:93:ef:b5:
3f:00:46:ed:fc:ab:68:a1:9f:87:96:c0:e5:7d:b8:
3a:af:22:47:b0:dd:e4:99:d8:5b:57:98:d3:cf:25:
67:f0:73:d6:8a:24:d2:be:ec:44:95:07:a8:45:c5:
5e:ea:09:b7:a2:2b:47:5f:69:49:31:10:25:1a:d4:
4e:32:2e:fa:52:93:e4:3e:39:a9:f3:8a:d0:11:60:
9e:c0:db:b6:d4:0b:a2:69:af:7c:84:3c:b7:b6:79:
c7:1a:17:65:db:7c:19:cf:d0:fd:76:61:24:e2:ed:
e7:8e:c8:eb:9a:48:f4:c0:69:69:fc:c6:50:e7:46:
ec:0d:a0:f7:6d:c6:7b:45:09:24:d7:a4:6c:a1:59:
cc:75:f9:de:8b:c9:63:36:50:19:8e:7b:f7:bf:ef:
ae:b0:fc:97:4e:c7:dd:07:5e:01:01:d5:2a:87:09:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:A6:C0:88:1B:41:61:97:98:C6:D6:3F:13:37:17:68:87:B4:D4
X509v3 Authority Key Identifier:
keyid:20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235342e302f32342d3234203d3e20323634383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.254.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4c:cb:4f:03:0e:74:d2:d9:e7:73:e8:db:5a:83:72:89:a4:
56:c0:5b:7b:72:7c:77:b5:37:63:74:ce:5c:d8:c7:cf:ca:18:
51:e9:3f:a4:c1:20:63:d3:90:72:db:e6:6f:42:21:8b:f9:88:
fb:0b:20:40:97:e3:31:cd:51:7c:f0:2a:84:ab:d2:80:b7:4b:
38:e6:2c:7c:50:22:be:19:2b:c2:7b:9f:e8:7e:39:77:d8:aa:
a9:60:b5:1e:3e:ce:e8:3e:3b:07:49:87:80:8c:fa:14:82:df:
ea:48:9d:3f:2f:ed:56:a8:f0:81:0e:48:a2:24:24:d1:75:d5:
57:19:69:a5:20:27:0b:e8:64:b2:ec:58:34:4b:e1:bb:49:8e:
0a:be:bc:bf:30:91:eb:d7:e8:c7:ba:d4:20:72:c4:95:17:7e:
dd:81:67:0a:e7:88:7e:23:48:aa:bc:9d:c5:cb:c4:83:f1:24:
b9:b2:13:c6:44:e8:63:40:0e:68:a5:bc:02:53:32:b6:77:e8:
87:e8:49:c7:9b:0a:50:b1:20:65:14:d0:da:ba:9e:f8:90:be:
e0:ce:52:ff:c8:0d:43:ee:86:69:73:e5:2e:dd:c6:14:a9:1b:
b8:34:46:76:a9:e3:ed:46:eb:3d:48:96:59:2c:ab:b7:58:d1:
0d:64:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org