Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: E7bScGXODQ3xHnS+Zwni7ImBl67y4PfISZnbs1GjsSk=
Subject key identifier: CF:FA:3B:90:73:87:AD:BA:0D:FC:3C:C7:3B:2D:A6:AD:12:DC:6B:96
Certificate issuer: /CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Certificate serial: 3D9A9A7AEE6DA0F28FBC56F9592163F7789A7B18
Authority key identifier: 99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
Signing time: Mon 15 Jan 2024 00:20:36 +0000
ROA not before: Mon 15 Jan 2024 00:15:36 +0000
ROA not after: Mon 13 Jan 2025 00:20:36 +0000
asID: 265393
IP address blocks: 168.194.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9a:9a:7a:ee:6d:a0:f2:8f:bc:56:f9:59:21:63:f7:78:9a:7b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C
Validity
Not Before: Jan 15 00:15:36 2024 GMT
Not After : Jan 13 00:20:36 2025 GMT
Subject: CN=CFFA3B907387ADBA0DFC3CC73B2DA6AD12DC6B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:70:23:96:f4:6e:88:65:55:a9:71:4a:4e:
69:f7:66:7b:e4:5f:fa:6f:a6:8d:13:dc:28:17:8e:
44:03:d5:71:ad:ca:9f:e7:b0:9a:ac:9a:49:de:0d:
8c:10:b8:f9:98:fb:69:3d:ef:5c:57:8b:75:f1:bb:
4e:80:d9:a5:39:c9:05:79:49:46:e7:06:f1:a8:f8:
ae:c0:a1:7e:9f:3d:19:e9:f1:ad:8a:13:64:3d:38:
e2:84:ad:5e:ed:26:99:9e:88:8d:35:3e:e9:87:81:
27:10:2d:6f:52:87:2c:6d:b6:3d:93:d1:76:c9:29:
5a:e3:00:a2:90:92:a0:5a:39:3a:0a:43:3c:62:91:
4b:8c:00:fe:31:f7:8d:f4:5a:cf:9c:ee:b4:39:af:
a5:84:44:a9:9a:b9:d0:26:a1:bc:81:d8:32:c1:be:
b4:35:f4:32:35:68:e9:7c:77:6d:c2:0d:88:ef:d6:
97:a7:bd:24:02:14:3e:25:a5:2e:22:ae:5a:97:4a:
03:6f:81:5c:fd:b3:38:1b:a4:be:fd:f6:81:5d:2f:
8a:44:6b:6e:dd:a5:b1:da:74:aa:b9:08:d4:eb:bb:
a8:7d:ad:a9:09:73:04:1c:d2:10:39:9c:00:9a:70:
3d:d0:50:53:9c:ea:cd:da:62:bf:5b:32:35:ee:cf:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:3B:90:73:87:AD:BA:0D:FC:3C:C7:3B:2D:A6:AD:12:DC:6B:96
X509v3 Authority Key Identifier:
keyid:99:7C:15:C2:A4:44:51:CD:BD:2E:1A:86:BD:F8:E5:CE:95:CC:6A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/997C15C2A44451CDBD2E1A86BDF8E5CE95CC6A1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/2/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.166.0/24
Signature Algorithm: sha256WithRSAEncryption
28:26:b2:72:fe:f9:ff:ca:96:8d:63:3a:76:97:98:03:30:4f:
af:5c:fd:ab:bd:55:9a:cd:6a:3a:57:5e:94:e8:dc:5f:87:e2:
b8:30:f4:1b:16:f5:7f:81:3f:e6:79:9f:09:0a:27:cc:0c:55:
dc:3e:5c:59:0e:87:a1:91:be:b6:79:60:d8:94:f0:cf:38:af:
fe:2b:38:14:f4:b3:9a:c4:db:76:45:27:5a:94:82:0d:36:94:
9b:d4:72:1a:88:ed:9e:64:b6:11:1a:4e:3d:e3:7a:fe:1d:7c:
6a:cb:d5:bc:22:b3:57:0f:46:2d:87:18:ca:43:6e:43:63:b5:
af:81:79:0f:d0:2b:ab:50:5e:5c:b0:1a:57:c5:30:f9:f8:31:
79:dc:1b:eb:7d:7a:a8:74:b0:a2:92:64:f7:fb:47:07:5e:1f:
df:06:82:02:c9:a6:84:43:73:9f:d1:7a:6e:53:85:b9:0b:6b:
f8:18:2e:7a:8d:d5:b3:9c:06:d5:b2:17:ee:8b:4c:c9:5f:e4:
2b:df:8c:9b:89:1a:7b:ff:ab:df:0c:59:1b:aa:40:3b:16:20:
6f:af:ac:8d:9a:7a:91:f3:ca:85:eb:c8:dc:93:37:3f:9c:da:
47:77:5c:e7:0e:b0:79:bb:1f:e1:ed:48:b3:d3:b1:53:cc:35:
9f:20:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org