Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/3230302e37312e37362e302f32322d3234203d3e203631353939.roa
File: 3230302e37312e37362e302f32322d3234203d3e203631353939.roa (raw, json)
Hash identifier: VV23hrpvZPO0EL7WiapaeZIiZuWLE6FafzSA1qV8fu8=
Subject key identifier: 3B:1E:E5:C9:E1:E6:C2:20:49:04:AC:D4:63:D7:45:F5:4B:8B:CF:2A
Certificate issuer: /CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
Certificate serial: 06731D7A581FA94DB0324B5949E24191473725A2
Authority key identifier: 42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/3230302e37312e37362e302f32322d3234203d3e203631353939.roa
Signing time: Thu 04 Apr 2024 06:04:37 +0000
ROA not before: Thu 04 Apr 2024 05:59:37 +0000
ROA not after: Thu 03 Apr 2025 06:04:37 +0000
asID: 61599
IP address blocks: 200.71.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:73:1d:7a:58:1f:a9:4d:b0:32:4b:59:49:e2:41:91:47:37:25:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42DC11A6099FD286F81D6C471E47FFD8469A91E7
Validity
Not Before: Apr 4 05:59:37 2024 GMT
Not After : Apr 3 06:04:37 2025 GMT
Subject: CN=3B1EE5C9E1E6C2204904ACD463D745F54B8BCF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:ea:70:1e:6a:69:fc:ce:cc:dc:d0:78:8d:
10:5c:87:8a:71:25:d6:49:cc:fc:d2:f2:fb:ae:c7:
41:dd:c5:17:ea:18:a7:d5:cd:96:a7:43:7a:94:0a:
d0:fd:77:dc:e3:f1:8b:ba:21:13:1d:1c:c3:65:4e:
68:3e:d6:fa:07:bd:a8:01:5f:65:ea:12:59:b3:9c:
42:a6:1f:26:52:b8:03:cd:e8:35:42:1d:53:8d:3e:
f6:e4:f6:6b:f7:77:35:cd:96:3b:7d:da:a6:b2:e1:
da:f6:dc:ae:2b:0f:84:28:1c:d0:c0:79:58:3a:a3:
63:e6:87:de:46:2d:dc:04:03:6d:a6:03:f1:5f:40:
b5:0b:20:19:d3:44:27:7e:16:b2:24:8b:73:23:02:
cd:45:b7:26:f5:46:f8:b4:20:e8:d8:ca:e8:90:26:
25:dd:4e:6e:c6:12:c1:4b:86:8c:b7:6f:c5:0d:f2:
30:17:94:87:c7:db:77:11:5e:90:88:79:fb:c8:e5:
0d:ac:b7:1e:3c:ba:56:19:f9:10:06:89:d3:42:1f:
cf:86:71:a9:5a:17:7d:32:84:04:43:d4:a4:6e:6e:
f1:54:35:93:3f:d1:e1:cd:52:4a:59:8e:97:9d:37:
fc:2e:22:f8:78:7b:3d:34:f9:a5:ec:df:80:6f:34:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1E:E5:C9:E1:E6:C2:20:49:04:AC:D4:63:D7:45:F5:4B:8B:CF:2A
X509v3 Authority Key Identifier:
keyid:42:DC:11:A6:09:9F:D2:86:F8:1D:6C:47:1E:47:FF:D8:46:9A:91:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42DC11A6099FD286F81D6C471E47FFD8469A91E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/1/3230302e37312e37362e302f32322d3234203d3e203631353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:aa:79:b1:86:b9:94:3e:85:0a:07:1b:6f:d0:e0:9c:af:5d:
ae:92:16:f9:cc:29:32:09:e2:eb:23:66:ec:de:dd:a8:8d:c1:
21:e6:9b:cc:e6:00:a8:a3:39:c8:7d:24:d5:cb:45:e0:e8:74:
35:94:4e:54:5c:0c:05:fb:7b:da:1c:4f:d4:64:1f:2d:12:77:
43:97:ba:71:92:8d:18:30:f9:3f:1d:de:58:d9:f3:98:02:15:
21:58:0f:5b:94:1a:5b:55:44:01:21:2b:81:0d:69:c1:a5:ca:
08:98:47:9e:1c:9c:75:d7:14:01:80:5b:11:11:87:9b:21:33:
f4:15:53:8e:22:b8:1d:55:8d:86:ca:cc:52:01:43:dc:89:4f:
8f:49:e4:f4:3a:ed:f3:c3:8a:d9:82:8c:61:85:ba:50:6f:6f:
18:f8:6e:64:b0:3a:15:e5:2e:7c:c3:09:cf:ab:e5:56:05:3d:
8e:63:7f:6a:d2:56:70:11:13:74:5e:a4:e5:23:47:b8:f6:a8:
22:c4:9e:35:15:e4:73:e0:25:60:16:3b:30:05:b6:0c:d0:64:
f8:bb:7d:1e:88:0e:86:95:6f:d2:78:be:af:5b:4a:6f:aa:0f:
0c:9d:11:13:c3:f1:41:4d:e0:ae:8f:e6:b5:19:e5:89:0f:4e:
d7:ee:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org