Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
File: 3230302e3135352e33322e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier: RYPfzvq05UTMx8CYgiLYOPMAyzA32jNztfxVpojy3Zk=
Subject key identifier: 99:43:0B:BC:FE:A3:7A:C3:97:D0:E4:9A:97:62:C7:10:5F:45:DE:47
Certificate issuer: /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial: 1EA35D37595C0B17655A5612F4F950D68BB0FBF1
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
Signing time: Tue 20 Feb 2024 16:57:03 +0000
ROA not before: Tue 20 Feb 2024 16:52:03 +0000
ROA not after: Tue 18 Feb 2025 16:57:03 +0000
asID: 22689
IP address blocks: 200.155.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a3:5d:37:59:5c:0b:17:65:5a:56:12:f4:f9:50:d6:8b:b0:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Validity
Not Before: Feb 20 16:52:03 2024 GMT
Not After : Feb 18 16:57:03 2025 GMT
Subject: CN=99430BBCFEA37AC397D0E49A9762C7105F45DE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:c7:ad:67:8d:4f:4e:56:5b:1b:f8:40:72:
ca:ce:02:4f:2b:df:22:14:a4:7b:f5:68:bf:50:7f:
86:c2:d1:c9:39:da:3c:d6:fa:15:e6:05:1f:2d:9a:
ee:1a:eb:2e:9e:99:ed:b7:9c:10:45:aa:b0:9c:28:
2a:d1:21:14:54:b1:5a:71:13:ea:30:dc:15:f8:e4:
fd:2b:67:ba:a9:f0:00:07:7f:bf:ad:e8:79:b5:c0:
61:4f:8a:9d:bd:78:44:ef:80:ab:3f:2e:f2:6a:9f:
78:4f:29:c4:80:6d:48:23:1e:f9:e5:6f:11:79:97:
3f:39:86:e7:fa:ec:ca:f7:7a:48:a3:69:d4:3f:13:
23:d4:21:47:a6:b2:4c:07:26:6e:7f:d8:b7:a9:40:
82:9f:ce:49:7e:d5:5f:6d:6b:66:ef:33:67:ee:cf:
be:21:89:c2:8b:1f:d1:6a:5e:16:cd:9a:a1:69:3d:
3e:a6:94:fb:c2:37:68:96:50:4e:40:99:b0:8c:04:
97:07:45:97:25:5b:a3:9c:6f:d5:86:b9:f3:c7:36:
95:89:f4:9e:d1:77:e1:e3:d0:12:f7:a3:aa:9f:da:
1c:2a:d0:ea:dc:92:0e:2a:a8:ed:2c:d4:4c:0b:e9:
fe:56:3b:8f:9a:c0:ec:50:ec:db:c1:c6:18:88:81:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:0B:BC:FE:A3:7A:C3:97:D0:E4:9A:97:62:C7:10:5F:45:DE:47
X509v3 Authority Key Identifier:
keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.155.32.0/19
Signature Algorithm: sha256WithRSAEncryption
11:89:d1:9c:db:6e:3f:c1:50:f1:64:8f:bd:24:80:c8:f8:fb:
80:af:8d:05:80:f2:ac:34:40:db:a7:2f:74:c6:94:db:9a:a5:
2e:07:f0:11:f7:1d:92:c0:94:8b:53:cb:a7:f4:c3:4e:20:f5:
12:02:c9:5e:45:51:83:1a:d8:5b:e9:16:45:7e:49:70:6b:cc:
ca:b2:78:94:de:03:79:06:86:0c:7c:21:31:00:89:f3:75:84:
6e:bb:8f:54:ec:a9:03:4c:c9:d3:8b:22:2e:48:d4:be:96:b3:
22:8a:20:9c:5d:3f:90:dc:17:cd:b8:c9:a1:9e:fe:4f:70:7e:
92:8e:c5:58:72:f6:44:aa:d9:4f:ed:b8:39:fe:39:3f:c3:86:
0f:08:e3:39:ce:e7:d3:8b:c0:b3:52:ab:12:67:20:da:e1:3d:
97:9e:b2:f5:13:37:9b:61:92:a1:51:ed:48:fe:d4:26:5f:f2:
19:50:7d:9e:6e:34:dc:a6:bc:72:3c:0a:25:fc:78:44:33:43:
1e:2b:ac:7b:80:b8:13:00:b9:79:81:2b:3f:5e:9d:cd:cc:46:
bf:cb:c0:3e:88:29:4d:4a:92:07:5b:6b:d5:fb:04:95:2b:8a:
c9:a5:10:75:d2:48:0b:b7:dd:08:27:e1:8e:c4:17:f1:03:75:
02:c5:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org