Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
File: 3133382e39392e37362e302f32322d3234203d3e20323634313537.roa (raw, json)
Hash identifier: Nphz9ZvbZ8FgTs/wVyIs5heTci1ElJIm6MGA3hmBAMc=
Subject key identifier: 1C:A7:13:9D:A3:C4:1F:A1:38:65:02:37:07:75:C8:CF:8B:6E:52:00
Certificate issuer: /CN=0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567
Certificate serial: 2D3F37F5AA13C22A86A28C307D642E3B39BCF3B0
Authority key identifier: 0F:A7:C8:49:27:E8:14:47:CB:E8:A0:F3:C5:AB:1A:D1:8C:8D:25:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
Signing time: Fri 17 Nov 2023 20:15:06 +0000
ROA not before: Fri 17 Nov 2023 20:10:06 +0000
ROA not after: Fri 15 Nov 2024 20:15:06 +0000
asID: 264157
IP address blocks: 138.99.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3f:37:f5:aa:13:c2:2a:86:a2:8c:30:7d:64:2e:3b:39:bc:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567
Validity
Not Before: Nov 17 20:10:06 2023 GMT
Not After : Nov 15 20:15:06 2024 GMT
Subject: CN=1CA7139DA3C41FA1386502370775C8CF8B6E5200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:fb:b2:49:13:d4:3b:85:d2:4e:ab:4a:c5:
01:d3:90:62:77:a2:49:0d:8a:22:1f:53:72:68:2b:
7b:41:5b:47:d4:32:5a:1d:69:ad:75:17:e0:05:28:
04:af:3e:1a:b2:8c:ba:92:c5:7f:79:7b:2f:8f:b9:
6d:91:49:b8:a5:b5:88:e2:4c:48:af:eb:d5:34:ce:
09:a7:0c:28:e9:fe:20:5e:f3:01:50:59:87:cb:b6:
52:84:e2:84:55:61:ef:76:03:56:f5:a9:b0:3b:37:
7b:57:c1:2a:c1:c1:99:78:f7:e7:bf:1a:81:7e:e7:
5b:e0:10:02:18:29:a1:1b:da:3b:1a:72:7a:13:60:
90:87:78:c7:cb:3c:33:7c:f3:97:aa:a3:18:05:cc:
fa:c4:e4:ff:79:59:5c:1e:63:b9:49:8d:45:b4:2b:
8c:c8:8b:b6:c1:07:b1:0c:cc:0b:88:b0:e7:cb:4e:
e1:8d:3f:1d:38:e6:6e:bc:98:e5:82:d5:a1:ee:8b:
c6:4d:1e:78:04:1e:4f:23:04:7d:96:19:06:f0:60:
7f:cd:24:44:04:47:1a:e6:ea:34:a4:d0:d6:cb:4b:
81:b0:77:1e:25:25:5a:b9:6c:f8:5f:37:17:a3:0e:
49:8e:96:c8:db:a1:85:42:9d:43:b9:60:09:21:d6:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:13:9D:A3:C4:1F:A1:38:65:02:37:07:75:C8:CF:8B:6E:52:00
X509v3 Authority Key Identifier:
keyid:0F:A7:C8:49:27:E8:14:47:CB:E8:A0:F3:C5:AB:1A:D1:8C:8D:25:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FA7C84927E81447CBE8A0F3C5AB1AD18C8D2567.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.76.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:bf:7d:8f:83:13:83:ed:83:87:34:42:7c:3c:2e:b9:cc:4a:
0b:6d:79:84:35:f1:45:b2:b3:32:ea:20:7b:48:68:30:08:e0:
9a:9d:e1:bd:65:82:e2:03:d5:f4:eb:66:ab:15:bb:d5:17:22:
3e:b6:08:2e:38:0d:0d:12:dd:9a:32:f7:6a:7a:f5:fb:dd:58:
92:c8:90:86:69:18:74:2e:4e:f3:ae:b5:61:42:6f:e4:75:81:
7a:f7:23:ac:60:a6:59:34:79:f9:10:0d:fe:e7:c1:ef:1e:3e:
98:81:ee:ec:57:d8:77:44:df:70:f0:51:6b:c7:68:9b:56:44:
be:1b:22:da:99:81:5f:ef:f1:02:58:9d:4f:bc:42:0f:43:46:
a4:0d:c2:08:93:61:2d:20:6d:77:1c:81:09:9a:34:e8:be:f5:
5c:66:1e:63:10:db:d5:34:ee:d4:e7:fb:eb:7e:6c:32:f3:7a:
9e:32:e7:4d:01:e5:00:69:a8:c7:fc:87:88:2f:85:a3:a9:ac:
9e:cf:0a:8f:45:f9:34:ce:13:71:71:b5:1d:5a:ce:c3:ee:12:
84:27:e4:4d:90:4e:71:68:e5:83:44:02:72:12:4f:a7:21:ca:
06:cd:ee:4d:39:85:a6:5c:bf:87:68:f9:4f:11:aa:dd:06:96:
eb:4f:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org