Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3233203d3e20323635393238.roa
File: 3133312e3139362e3133322e302f32322d3233203d3e20323635393238.roa (raw, json)
Hash identifier: Ch5tace3AD3bVD5D8H8Dq//vQNl2xhBJ5Lwt3gukodI=
Subject key identifier: 21:71:67:41:54:57:A8:AF:44:ED:C0:E4:44:67:05:3F:4D:44:84:C3
Certificate issuer: /CN=36F665342472E37B1A265E089E5C8754A433B1A2
Certificate serial: 40CDCE4F627473BA0A5545E0B34DC9DA19B26B00
Authority key identifier: 36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3233203d3e20323635393238.roa
Signing time: Tue 23 Jan 2024 12:23:12 +0000
ROA not before: Tue 23 Jan 2024 12:18:12 +0000
ROA not after: Tue 21 Jan 2025 12:23:12 +0000
asID: 265928
IP address blocks: 131.196.132.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cd:ce:4f:62:74:73:ba:0a:55:45:e0:b3:4d:c9:da:19:b2:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36F665342472E37B1A265E089E5C8754A433B1A2
Validity
Not Before: Jan 23 12:18:12 2024 GMT
Not After : Jan 21 12:23:12 2025 GMT
Subject: CN=217167415457A8AF44EDC0E44467053F4D4484C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:5b:c7:0a:95:15:34:cd:2d:c4:c0:37:24:
62:a2:8e:19:7f:71:bc:20:58:dd:1b:43:da:52:27:
c3:eb:65:95:f1:a4:81:3e:36:59:b0:80:8f:25:d5:
c1:00:cc:6d:d0:1b:38:d7:03:0b:36:8d:46:a5:d4:
2d:3b:e6:b2:27:40:1f:1f:70:ae:3b:85:83:d4:89:
e8:d3:b1:24:06:df:d4:a1:19:86:20:97:d7:02:ac:
5c:34:43:8f:f9:30:9d:d0:78:a4:aa:b7:7f:aa:d5:
2d:0b:4c:5e:68:8e:af:7f:60:02:35:07:9e:90:af:
d8:49:9d:6c:4c:73:28:db:32:8f:53:e0:16:0a:95:
24:77:63:6b:07:68:dd:b5:26:4e:4b:cb:b4:fc:79:
50:ce:70:e5:36:fe:5b:5c:9b:9d:11:2c:85:8c:7e:
3c:b5:a4:bc:f3:68:4c:5e:a8:e7:d6:45:46:cd:cd:
7a:36:f4:15:6c:38:8c:93:16:71:4e:ea:ad:cf:e7:
62:be:a5:cf:5d:f5:d7:d0:29:e2:aa:60:0b:92:6a:
69:0d:85:17:f1:3f:74:79:6b:54:4a:51:d5:2c:fb:
59:09:73:9f:66:43:d6:58:61:2e:ec:b9:2a:52:1e:
65:4b:5a:00:f6:7b:e8:43:3d:5f:ae:6f:f0:32:02:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:67:41:54:57:A8:AF:44:ED:C0:E4:44:67:05:3F:4D:44:84:C3
X509v3 Authority Key Identifier:
keyid:36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/36F665342472E37B1A265E089E5C8754A433B1A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133322e302f32322d3233203d3e20323635393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:36:29:3d:3a:9b:7e:99:47:1a:3b:06:92:5d:b1:1a:a8:05:
d0:55:d3:92:3a:b3:ea:a8:e5:62:0a:39:e1:51:65:a0:44:fa:
fb:50:bf:65:2e:67:ed:fe:41:0f:ad:f9:78:6e:da:e0:5b:a2:
06:b7:3f:1a:5f:0e:aa:8a:ce:67:c6:b2:fb:b9:d4:50:50:22:
bf:c4:4d:c3:dc:69:19:85:60:24:d2:10:fb:4c:0d:a6:f1:e0:
76:9c:b3:ee:e0:de:8a:f8:b3:6d:4a:b2:c0:94:98:9c:eb:51:
ec:b9:92:bb:5a:d3:8e:38:9d:c3:4c:6f:21:b8:83:93:bd:0b:
7d:f4:a6:d5:ab:e1:31:f7:4d:5d:6c:bd:8f:e5:e1:48:c2:2d:
49:0e:5b:ef:42:3f:8c:36:db:c2:80:34:05:fb:31:9a:88:ee:
09:65:77:51:10:f5:f3:cf:37:75:e6:d0:c4:b0:d4:82:2f:f5:
96:d7:c0:9d:03:7b:72:65:b9:3c:22:2d:8b:e4:63:40:7b:b1:
46:e2:97:ec:72:89:83:ec:6f:39:64:08:88:15:60:75:94:94:
c7:fd:cd:08:60:34:13:8b:2a:2b:1b:cf:78:d1:b2:0e:99:82:
99:7a:50:f1:54:b6:db:b1:01:24:ad:51:85:dd:54:24:f3:19:
08:d1:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org