Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
File: 3230312e35342e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier: CkHyRSMvSbeqagRSSpQ3TOGKMJwJCsJtRfpl4uM9ON4=
Subject key identifier: E3:9D:F0:D8:8E:42:F5:B2:71:E3:BF:ED:61:D2:BC:A2:AC:46:F5:FC
Certificate issuer: /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial: 6EBE6E594A1F71A96830762EC79B52CBA1A784E5
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
Signing time: Tue 20 Feb 2024 16:57:03 +0000
ROA not before: Tue 20 Feb 2024 16:52:03 +0000
ROA not after: Tue 18 Feb 2025 16:57:03 +0000
asID: 22689
IP address blocks: 201.54.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:be:6e:59:4a:1f:71:a9:68:30:76:2e:c7:9b:52:cb:a1:a7:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Validity
Not Before: Feb 20 16:52:03 2024 GMT
Not After : Feb 18 16:57:03 2025 GMT
Subject: CN=E39DF0D88E42F5B271E3BFED61D2BCA2AC46F5FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:8e:1e:54:6a:dc:cb:90:7d:66:d7:6f:6e:
04:74:f9:66:42:ff:a6:45:f1:b9:bb:64:2e:06:dd:
3a:89:42:83:3a:49:4c:39:25:6c:7b:96:be:53:fd:
52:3b:e6:70:98:35:88:e2:a4:33:f1:79:5c:dc:d3:
f9:9b:db:36:06:e7:88:1c:d0:10:42:c6:64:2d:f4:
1f:5b:da:0f:7d:be:ae:17:ce:7c:52:0f:70:f1:4c:
e4:4d:81:a8:56:9b:eb:50:43:6b:b7:11:0e:c8:fd:
80:f7:a9:2e:52:ab:6c:5d:3f:5e:1e:85:a7:9b:25:
95:62:90:f7:c9:5b:7c:68:b2:19:ce:05:42:a5:82:
74:8b:30:26:83:36:09:ad:40:ad:da:23:c8:51:bf:
8d:c5:f9:65:6b:3a:9d:b3:c9:10:de:83:2f:3d:8a:
d2:c4:c6:70:72:32:fd:3d:78:4c:d1:65:14:9d:dd:
32:14:f8:9f:96:2b:00:d5:e0:01:8f:d6:46:ee:78:
7a:4e:93:77:3d:6b:0a:c9:11:d5:2c:98:f9:56:70:
53:19:c9:54:f6:42:f0:07:21:c8:c9:81:31:d5:8c:
01:2e:91:45:7d:84:cc:1d:d3:dd:98:9e:a9:c6:a6:
ca:9a:f7:cd:9c:a7:59:aa:80:dc:8f:0a:08:36:d3:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9D:F0:D8:8E:42:F5:B2:71:E3:BF:ED:61:D2:BC:A2:AC:46:F5:FC
X509v3 Authority Key Identifier:
keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e35342e36342e302f31382d3234203d3e203232363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.54.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:e7:c0:92:ee:84:84:fd:ea:0e:e2:c8:4f:81:eb:42:41:1f:
c0:cc:18:16:25:ea:be:1b:e4:17:33:0a:1e:1e:1d:f0:a9:02:
ee:21:29:f6:c4:00:e2:df:5d:af:52:8b:41:08:4d:13:40:3f:
e9:da:c1:ec:73:98:8d:93:34:db:f1:b4:c8:b3:eb:5c:0e:14:
ac:32:d9:b0:eb:6a:8e:2f:c7:40:e6:b6:ed:a8:80:b5:4b:55:
45:bf:20:07:70:ad:7c:95:1d:87:44:b9:d7:67:38:03:71:ea:
db:f7:02:e6:6a:7e:97:a1:88:31:cd:a3:8c:23:0c:36:bd:2f:
34:7e:46:15:07:76:8b:8e:81:63:22:8e:44:5d:bf:b4:39:e7:
1c:17:76:57:9a:3f:ed:39:46:e6:a5:39:51:bb:f3:6b:51:61:
bd:b5:a8:c9:df:ab:99:c8:cb:df:f6:ac:f7:0b:79:89:e2:70:
a5:38:a8:f8:7a:12:d8:29:54:aa:da:58:c6:df:ad:7d:a3:f3:
27:97:f0:e8:29:40:f9:8e:16:03:64:a4:74:50:11:8b:d7:09:
98:5f:6c:2f:1b:be:94:21:5e:5d:3c:05:53:df:60:b3:da:53:
30:d9:17:e0:15:f7:ed:dd:bf:70:86:70:f2:7a:05:ae:f1:7b:
fe:76:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:05 2025 by rpki-client