Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32322d3234203d3e20323633383738.roa
File: 3133382e3230342e32302e302f32322d3234203d3e20323633383738.roa (raw, json)
Hash identifier: osVhjbmwF5vFFWlFuYhyWK2AnN41OQoNqKa6mn3eRF8=
Subject key identifier: 66:F3:9A:1C:73:E6:C0:D9:2C:0A:AD:28:B3:91:5E:25:19:F0:45:54
Certificate issuer: /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial: 7E8324DF1AAE25E9615C3B072D74D0F8129FA16E
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32322d3234203d3e20323633383738.roa
Signing time: Tue 16 Jan 2024 13:23:37 +0000
ROA not before: Tue 16 Jan 2024 13:18:37 +0000
ROA not after: Tue 14 Jan 2025 13:23:37 +0000
asID: 263878
IP address blocks: 138.204.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:83:24:df:1a:ae:25:e9:61:5c:3b:07:2d:74:d0:f8:12:9f:a1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
Validity
Not Before: Jan 16 13:18:37 2024 GMT
Not After : Jan 14 13:23:37 2025 GMT
Subject: CN=66F39A1C73E6C0D92C0AAD28B3915E2519F04554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:c1:20:c5:96:81:45:be:2c:b0:4d:b8:25:
2e:be:4f:30:3e:4a:a6:dd:7d:7f:96:29:bd:59:4f:
38:42:1b:62:90:16:77:cd:b3:bf:d0:59:6d:d3:d1:
8f:d2:b2:ce:b8:2c:c7:97:bc:0b:15:7b:93:75:ce:
d7:f3:84:ce:22:c9:b2:aa:77:85:2d:df:86:87:1a:
20:0c:58:0f:df:5f:73:f2:92:9e:6a:a1:32:a8:68:
d4:22:55:40:3e:cc:e6:73:16:8e:cf:a4:88:66:b5:
4f:2c:5d:f5:14:89:78:1f:db:4d:c5:c9:c9:bc:eb:
28:bb:1f:2a:e1:56:8f:54:84:0c:d6:4f:40:3d:89:
ff:e8:f5:3e:2f:38:45:a4:a8:3f:af:94:e6:c4:d8:
bd:11:d4:84:98:20:22:64:2a:a8:3c:2c:20:4d:b9:
08:3c:80:c4:4c:a4:a7:25:b6:1f:d8:6f:cb:31:be:
8c:e7:9a:c7:6d:2a:9e:a1:9e:b1:a3:2e:7e:8f:bc:
f2:ae:79:c2:34:53:27:ac:32:eb:cc:85:93:31:0b:
38:9f:3d:f1:3b:a5:3e:4b:42:8e:5d:c3:f1:29:ac:
8a:de:bb:36:b1:5c:1f:3b:af:29:17:0c:e7:25:1a:
b9:57:8f:1d:64:d6:eb:0f:54:a9:bc:0e:0c:58:3b:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:9A:1C:73:E6:C0:D9:2C:0A:AD:28:B3:91:5E:25:19:F0:45:54
X509v3 Authority Key Identifier:
keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32322d3234203d3e20323633383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:7c:60:a8:b1:ae:b9:68:ab:9c:5b:06:f5:4c:8c:df:72:48:
1f:32:fe:72:f0:7c:8f:b8:8f:d2:47:c8:fd:ed:c2:f7:c9:70:
08:32:a2:e3:49:be:a6:89:4e:67:c1:5c:c9:d7:39:1e:bd:f4:
11:fe:bc:d3:5e:fa:d4:ed:57:b5:00:4b:ff:0b:f1:f8:8e:db:
52:e9:17:02:65:92:a8:3e:21:57:c6:b7:78:b9:3d:28:95:d7:
64:16:f5:ff:90:14:5e:6a:1a:9b:aa:47:3d:66:56:ba:8a:99:
13:5f:4b:c4:8d:f2:6b:92:82:6b:e6:cc:8a:b1:ff:89:b3:29:
44:76:56:36:7c:f2:9f:21:54:7f:16:b9:fd:c0:3f:64:a4:3f:
7e:17:04:80:73:94:4b:ec:4a:6e:1d:b0:b1:60:e0:5d:9b:9b:
3d:26:fd:5e:33:b8:cb:e1:9c:2a:f1:d6:40:c9:32:22:d0:a7:
65:94:ff:77:9a:70:59:aa:9d:56:d7:1c:a6:cb:d9:8d:41:ff:
35:38:9c:98:6d:a2:99:8c:79:18:93:44:30:8b:86:07:e0:42:
2a:f1:ca:88:96:51:5f:11:0f:5c:01:fd:32:81:0a:dc:dc:77:
91:88:a4:1a:70:79:fd:f5:77:80:fd:48:a3:85:b7:f5:93:bf:
5d:56:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org