Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/3133312e302e32302e302f32322d3234203d3e203238333237.roa
File: 3133312e302e32302e302f32322d3234203d3e203238333237.roa (raw, json)
Hash identifier: v0X1XsZXEkMhcTyMesJvg8DASPOsbcKcgfZjHez8T/0=
Subject key identifier: 3F:44:AC:7D:80:5A:8E:34:A8:79:BB:D0:E6:6A:82:33:2F:18:9B:6A
Certificate issuer: /CN=E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990
Certificate serial: 3CAAD12E6F776B50A005FA616E9436F986995736
Authority key identifier: E9:86:D8:D3:14:6A:4D:08:E3:6F:EA:EA:C7:3B:87:E7:E5:A3:F9:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/3133312e302e32302e302f32322d3234203d3e203238333237.roa
Signing time: Wed 03 Apr 2024 18:30:19 +0000
ROA not before: Wed 03 Apr 2024 18:25:19 +0000
ROA not after: Wed 02 Apr 2025 18:30:19 +0000
asID: 28327
IP address blocks: 131.0.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:aa:d1:2e:6f:77:6b:50:a0:05:fa:61:6e:94:36:f9:86:99:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990
Validity
Not Before: Apr 3 18:25:19 2024 GMT
Not After : Apr 2 18:30:19 2025 GMT
Subject: CN=3F44AC7D805A8E34A879BBD0E66A82332F189B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:cf:e7:bd:9d:25:b2:4d:22:aa:30:8c:6a:
d1:f1:0d:bc:19:d8:83:d3:b7:3c:64:4b:70:8e:09:
30:7b:ff:53:df:5e:8d:e2:f2:89:c3:0f:12:a4:14:
4b:fe:7f:04:01:97:e3:6b:33:26:00:dd:90:58:f2:
97:29:23:67:99:dc:9f:ba:d8:3b:b2:bc:94:6f:34:
c2:59:ed:fc:8c:ae:c0:b9:59:c1:a4:b6:e2:21:89:
8b:c2:88:c2:0c:3d:7f:73:0b:71:e2:7b:12:35:c1:
f0:6d:14:ff:f8:e3:2c:84:78:40:45:b3:54:b3:63:
37:1c:e8:32:11:84:9a:4a:5d:2a:48:7a:cf:61:8c:
b3:4d:ed:39:a6:ec:17:94:74:18:25:58:d5:42:d9:
c9:6d:cf:d4:f7:86:6f:21:c1:3b:14:a5:d3:52:e2:
a9:e5:00:24:84:fb:1d:72:eb:6f:28:fd:05:31:ef:
0a:42:e6:6b:c0:61:6d:f4:6e:82:1a:b6:5d:5b:cc:
04:51:bd:b0:8a:1c:de:f1:bb:c6:f8:b7:46:d4:ad:
18:dd:2e:51:12:29:e3:c1:b1:d9:b8:cd:b4:98:44:
a4:0d:66:07:fc:c1:e7:07:fb:b8:c6:ab:79:6d:9f:
8c:55:92:21:f6:52:58:22:8e:e9:cc:04:11:ad:0f:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:AC:7D:80:5A:8E:34:A8:79:BB:D0:E6:6A:82:33:2F:18:9B:6A
X509v3 Authority Key Identifier:
keyid:E9:86:D8:D3:14:6A:4D:08:E3:6F:EA:EA:C7:3B:87:E7:E5:A3:F9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/3133312e302e32302e302f32322d3234203d3e203238333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.20.0/22
Signature Algorithm: sha256WithRSAEncryption
89:66:30:71:a0:92:9e:04:c1:13:85:70:1c:f9:13:df:33:0a:
ba:df:d2:7f:98:1a:54:44:6b:6b:ce:78:97:3a:0f:01:70:cf:
3f:f0:c9:9f:63:44:d5:b0:de:31:44:77:9e:cf:49:a8:d3:65:
ec:97:e2:29:64:c6:c2:e5:e3:4a:f9:02:4d:9c:80:31:f1:05:
6d:28:d5:91:84:9b:51:0d:0a:19:dc:59:a0:cc:88:ab:ee:84:
46:f3:7e:14:63:ee:76:a8:39:ce:20:63:7d:96:41:c0:4b:6e:
80:fd:17:f1:31:c9:b9:8f:ba:de:cc:20:d5:da:19:8e:82:a7:
13:fe:b7:32:b7:68:82:89:8d:8a:09:eb:9b:0b:7e:cf:6b:90:
da:aa:63:58:d2:1e:11:1d:da:33:14:b7:ba:0b:7b:4b:13:97:
b1:d5:d4:2b:d8:5d:74:a7:ec:44:7f:08:34:db:7b:2b:cc:c3:
3b:75:57:15:18:d7:6e:cc:2e:14:51:44:e4:b3:f7:ab:a9:10:
55:2d:69:b1:3a:81:3a:6d:34:31:10:9f:c3:a7:0a:13:61:9b:
31:aa:c3:8c:a9:e5:72:60:3a:84:cf:f9:fa:e9:86:58:1a:cc:
0e:0e:d4:a8:85:e8:25:79:6d:42:d0:1a:3f:9a:39:13:a0:d9:
03:10:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org