Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa
File: 3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa (raw, json)
Hash identifier: q8NqHedQNfxzRCi9q4lWSBJV5MnRNcB4wwlx6XZypSs=
Subject key identifier: CE:AC:FF:C2:5E:B2:9C:17:3D:57:B3:E0:90:60:67:17:1E:80:20:2A
Certificate issuer: /CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Certificate serial: 2D3981CF0F4EF14599286E36AB6B0FA6376EB60F
Authority key identifier: 24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa
Signing time: Tue 14 Nov 2023 04:28:00 +0000
ROA not before: Tue 14 Nov 2023 04:23:00 +0000
ROA not after: Tue 12 Nov 2024 04:28:00 +0000
asID: 266547
IP address blocks: 160.238.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:39:81:cf:0f:4e:f1:45:99:28:6e:36:ab:6b:0f:a6:37:6e:b6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Validity
Not Before: Nov 14 04:23:00 2023 GMT
Not After : Nov 12 04:28:00 2024 GMT
Subject: CN=CEACFFC25EB29C173D57B3E0906067171E80202A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:14:ed:be:2e:7b:c1:b4:99:de:45:51:5a:
87:7d:43:15:56:26:71:b9:af:35:06:31:35:fe:08:
43:38:a6:91:a1:ef:06:6e:01:5b:be:24:a6:05:57:
99:51:3f:aa:01:57:91:1c:eb:6c:90:3b:84:88:4d:
3f:bf:7b:78:80:0c:c2:09:38:e1:98:0d:92:83:d5:
da:3f:bf:5c:e8:2f:75:aa:22:ee:1b:8b:6c:1b:93:
e4:fc:8e:e8:06:91:77:f4:4b:3f:4c:5a:fc:51:b4:
ed:56:00:ed:de:c8:d2:6d:c2:b0:8c:ac:7d:f1:4a:
da:2b:b9:3b:69:5a:e0:4f:c1:a7:35:14:07:9b:eb:
2e:c4:2c:59:fe:83:db:eb:51:77:8e:76:b9:e2:6f:
81:3d:28:53:bc:5a:5b:d4:56:99:8b:0c:f9:1b:ac:
20:8b:f2:3e:37:bf:cb:17:15:ab:18:fe:8d:34:b3:
f3:55:45:0d:6f:46:82:97:fa:74:62:1d:06:bd:c8:
e3:c5:53:52:e9:bd:b1:0e:68:dc:6a:fc:27:69:6a:
d9:c9:10:e7:f6:89:68:75:76:02:cd:c8:da:d9:99:
10:91:cf:98:9d:aa:79:67:62:1f:95:f8:d6:64:d6:
db:ba:e1:ac:9e:47:7d:c2:41:62:d9:16:4a:8c:ea:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:FF:C2:5E:B2:9C:17:3D:57:B3:E0:90:60:67:17:1E:80:20:2A
X509v3 Authority Key Identifier:
keyid:24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3132382e302f32322d3232203d3e20323636353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.128.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:55:af:4b:31:49:09:88:11:b8:c3:b2:d3:68:b9:76:67:97:
3c:d4:fc:6d:f1:42:51:25:30:43:3e:1f:ae:ab:9d:76:32:e3:
1b:a4:79:46:68:93:69:f3:1a:4f:77:cf:1a:95:82:92:10:d1:
de:47:5d:64:0d:a7:45:a2:09:1f:65:37:9a:81:54:45:5b:ab:
4f:e6:98:39:6d:52:3d:b7:b2:7f:62:eb:c8:93:d7:ab:9d:a1:
ed:6c:80:92:ed:80:dc:b8:6a:8d:4e:73:0c:f8:f5:56:01:98:
b0:47:e7:d8:a4:63:6c:0e:57:6c:c7:67:9a:5e:3e:45:c7:f0:
e8:e2:24:fe:5f:89:33:e5:1c:60:1a:6d:23:39:17:1b:4a:71:
7d:e3:53:99:48:d5:54:17:3d:27:0d:c4:a6:69:cf:c1:6e:06:
7d:33:a8:83:e5:47:c1:57:4a:ce:7c:85:02:2c:be:2e:60:2c:
66:d9:78:a6:6f:d2:af:81:1b:28:bc:5a:b7:9b:e0:fd:ce:33:
57:0f:b1:a9:73:af:31:73:18:fa:4c:c3:af:2a:81:7d:98:c9:
37:44:ae:c5:9e:c5:44:d2:c8:43:4c:32:0d:c7:85:8f:91:44:
f4:a3:a2:73:4c:06:18:5d:95:29:36:f8:f8:c3:67:b2:db:7a:
fd:b3:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org