Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa
File: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (raw, json)
Hash identifier: PAmYC6D87HDWPMZMtx9k8wjAL8GDhlgZPzGxmnNP7LE=
Subject key identifier: 8D:8C:C6:D5:5A:03:00:85:55:6D:AB:FC:48:1A:04:60:98:92:7A:DD
Certificate issuer: /CN=74ED85142F26302A125E71A3E55B2063509E7AA3
Certificate serial: 2A01A0C3D3B88CDCDD4091BEC5434CC7243187D9
Authority key identifier: 74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa
Signing time: Wed 17 May 2023 14:12:14 +0000
ROA not before: Wed 17 May 2023 14:07:14 +0000
ROA not after: Wed 15 May 2024 14:12:14 +0000
asID: 266632
IP address blocks: 128.201.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:01:a0:c3:d3:b8:8c:dc:dd:40:91:be:c5:43:4c:c7:24:31:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ED85142F26302A125E71A3E55B2063509E7AA3
Validity
Not Before: May 17 14:07:14 2023 GMT
Not After : May 15 14:12:14 2024 GMT
Subject: CN=8D8CC6D55A030085556DABFC481A046098927ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:b9:d6:bc:a9:60:ed:cc:df:0a:64:b4:b2:
52:24:ea:a3:f8:1d:21:03:b5:27:a3:a4:4c:89:71:
98:c2:a4:de:d0:7b:3a:86:09:f9:f5:5c:dc:ca:16:
4e:4c:81:9b:b1:b5:c3:b6:f8:c6:90:89:dd:57:6a:
9b:eb:08:d3:79:53:0e:af:b3:41:09:bc:56:f7:1d:
58:34:6d:46:37:6f:7b:96:29:6e:b3:6f:2f:27:91:
e9:12:38:b1:44:1f:95:8d:d9:06:73:dd:20:20:dc:
00:ec:2a:d2:e3:10:2b:b9:7e:d7:f8:d6:bc:69:c4:
59:67:1d:53:e7:38:71:f8:d4:6c:cd:8e:09:15:0b:
27:2f:28:c7:2e:5c:dc:33:1c:03:bd:ad:4a:b9:29:
c6:e0:b7:01:90:ff:bf:6e:57:70:cc:d3:28:d6:51:
a5:b2:b0:03:d1:ab:f4:f4:5f:cf:48:36:a7:17:e2:
68:bf:f8:af:eb:6a:46:c6:c2:95:e1:e4:7b:26:fc:
e8:0f:8b:14:7e:89:3e:02:61:ec:8a:81:45:bf:fc:
d7:95:72:a1:94:5a:a9:b9:68:07:be:85:c9:29:0e:
5b:3d:8c:e4:c4:7e:9e:40:68:08:8b:24:1c:2f:c6:
c4:f5:2b:54:ef:c5:6f:24:1d:4a:5e:97:3f:62:24:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:C6:D5:5A:03:00:85:55:6D:AB:FC:48:1A:04:60:98:92:7A:DD
X509v3 Authority Key Identifier:
keyid:74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.148.0/22
Signature Algorithm: sha256WithRSAEncryption
09:3a:ef:5f:a2:45:1d:3a:1c:b0:23:a1:a3:5e:23:1a:b1:75:
cb:4b:5f:1b:b6:35:5a:3e:a6:f8:bc:fe:07:ba:3c:2b:04:ad:
4d:5f:5c:5d:a8:b4:82:aa:b3:d4:a6:a0:c8:fc:5c:b0:4e:ee:
18:09:04:0f:c9:4f:b8:4f:37:df:18:75:e6:d2:bb:65:58:33:
8e:15:f2:86:a7:90:24:43:13:ad:bf:7f:d1:73:b2:11:8a:37:
40:0e:34:9c:4e:08:5f:0c:6d:a3:0a:03:0c:33:87:bc:8a:e7:
ac:59:b2:9a:ab:98:f7:dd:c6:c3:c1:1b:42:33:79:65:f6:52:
9e:9e:44:74:7c:02:f6:c2:09:56:e6:23:38:d2:9d:16:a6:c3:
61:01:cd:6b:6c:27:c8:00:af:67:9c:e1:ac:e1:e1:74:99:40:
34:ba:64:39:80:aa:27:e4:c0:4f:be:73:c0:49:e6:4c:d9:f0:
0f:cd:51:7c:1e:9a:17:d5:e6:74:aa:6b:ae:a2:93:82:ae:2d:
d7:36:ec:4a:14:74:1a:6a:b9:b9:1d:dd:e0:f3:67:9f:b5:b2:
55:a1:0c:92:ce:11:94:e0:b9:d0:bd:0e:f7:67:43:7f:b5:6f:
e8:f0:3c:b3:c1:9c:62:7a:7f:8f:27:41:cc:4f:b0:40:7f:e5:
51:43:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org