Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133372e302f32342d3234203d3e20323634303131.roa
File: 3134332e302e3133372e302f32342d3234203d3e20323634303131.roa (raw, json)
Hash identifier: CdbfCgdrXJTfjPtsveqjlsB22N17HgRSBoPq1t39E9Y=
Subject key identifier: 2D:66:9E:2E:AF:C7:23:E6:99:41:9C:F8:DE:3C:56:92:FD:45:10:AD
Certificate issuer: /CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
Certificate serial: 525CEB5C9B108AEE2510A26F52D19C20E27BC274
Authority key identifier: F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133372e302f32342d3234203d3e20323634303131.roa
Signing time: Mon 01 Apr 2024 15:40:20 +0000
ROA not before: Mon 01 Apr 2024 15:35:20 +0000
ROA not after: Mon 31 Mar 2025 15:40:20 +0000
asID: 264011
IP address blocks: 143.0.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5c:eb:5c:9b:10:8a:ee:25:10:a2:6f:52:d1:9c:20:e2:7b:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
Validity
Not Before: Apr 1 15:35:20 2024 GMT
Not After : Mar 31 15:40:20 2025 GMT
Subject: CN=2D669E2EAFC723E699419CF8DE3C5692FD4510AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:a5:39:42:c5:90:b7:8c:41:88:1f:69:6b:
a3:f8:7a:c4:62:42:9c:14:27:e6:be:80:a9:6d:69:
4e:1c:3d:b8:42:6c:e8:ac:71:e2:20:ec:65:78:74:
fd:60:19:7d:fd:50:f3:a9:8d:c4:6a:9d:79:93:c7:
31:b3:c5:bc:1c:34:ce:e4:90:3f:36:d1:0e:4d:6f:
50:5f:2b:b1:ba:9c:46:b2:9e:3e:47:5e:7e:06:69:
39:53:76:60:49:b6:67:48:57:a7:96:6d:69:2d:5e:
4e:fe:b1:bb:69:78:98:7a:e2:25:c7:ed:62:a3:6b:
b0:f9:64:87:3c:25:d3:a7:0a:7c:85:36:cc:f6:a0:
ea:3c:9d:03:09:97:f0:4d:25:a0:18:bd:2c:56:36:
c1:0e:52:65:35:5f:bb:d7:31:d7:5e:9f:15:48:3b:
81:d4:25:df:9f:55:dc:83:49:93:77:a9:38:4a:58:
6f:5d:80:14:93:7f:82:11:42:cf:70:a5:2f:44:a5:
38:d7:9f:2c:6a:cb:33:d6:d5:a2:f7:f2:d3:4f:66:
41:e8:78:20:7b:2c:c2:61:b5:ec:ac:10:4b:32:ea:
b4:46:93:3f:60:30:fb:6c:2f:04:07:2d:ce:07:39:
af:09:0c:54:a4:4e:26:7e:0b:ac:bf:ad:1c:45:07:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:9E:2E:AF:C7:23:E6:99:41:9C:F8:DE:3C:56:92:FD:45:10:AD
X509v3 Authority Key Identifier:
keyid:F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133372e302f32342d3234203d3e20323634303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.137.0/24
Signature Algorithm: sha256WithRSAEncryption
52:dd:78:d2:02:93:98:6b:e7:df:3d:4f:33:7c:ff:d3:98:2f:
1d:8c:d6:99:fd:ef:13:2e:a6:78:65:ab:55:48:8b:25:64:d5:
81:b6:b1:6c:6a:7a:17:de:ce:29:3c:b6:20:30:b0:bb:1f:41:
b3:75:87:0a:7a:dc:50:f3:a3:85:06:34:86:bf:a2:9e:5c:27:
cf:a4:07:51:7a:88:38:32:1b:bb:ea:f5:1f:fd:ff:41:ca:26:
79:57:ce:23:56:3a:df:9a:1c:33:94:de:9d:6e:6e:9c:0b:ac:
2c:d6:58:aa:5d:df:a1:df:ed:24:10:3d:2d:15:e8:00:22:da:
cb:b3:62:97:2e:2b:98:3b:70:db:1b:e3:70:f7:76:be:92:3f:
d8:9c:72:72:dd:73:ba:85:71:de:5a:44:77:23:98:ff:e9:ed:
8b:d0:eb:b8:1c:92:34:0f:8c:f1:68:0b:08:2b:8a:50:b1:e9:
58:c8:4e:a2:f9:a5:3d:6b:1b:19:6f:a3:15:0b:34:eb:a5:25:
bd:ad:da:6f:0c:e4:90:e4:c6:fd:2b:f5:2b:83:c3:4a:9e:0f:
8a:92:0e:79:2b:df:68:98:37:8e:95:e2:de:66:bf:62:c7:ac:
0c:36:e1:8c:c5:8c:18:42:6e:8f:90:a2:83:6e:3c:d5:e9:82:
05:7b:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org