Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa
File: 3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa (raw, json)
Hash identifier: d1G0jf85El4iVoDK+HuqonuqjiQkBG38Ai+PNX4gM+g=
Subject key identifier: DC:E6:93:6C:A0:BF:49:E3:FC:4F:32:5C:67:6B:71:70:72:41:48:4B
Certificate issuer: /CN=0AA46B239865B8E64AEAD48999F6B7FD6E1790F0
Certificate serial: 28C5B2997A32CE25BB3093C7F6E459CD40BB52A0
Authority key identifier: 0A:A4:6B:23:98:65:B8:E6:4A:EA:D4:89:99:F6:B7:FD:6E:17:90:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AA46B239865B8E64AEAD48999F6B7FD6E1790F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa
Signing time: Fri 01 Mar 2024 13:30:01 +0000
ROA not before: Fri 01 Mar 2024 13:25:01 +0000
ROA not after: Fri 28 Feb 2025 13:30:01 +0000
asID: 262422
IP address blocks: 143.208.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c5:b2:99:7a:32:ce:25:bb:30:93:c7:f6:e4:59:cd:40:bb:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AA46B239865B8E64AEAD48999F6B7FD6E1790F0
Validity
Not Before: Mar 1 13:25:01 2024 GMT
Not After : Feb 28 13:30:01 2025 GMT
Subject: CN=DCE6936CA0BF49E3FC4F325C676B71707241484B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:fa:81:15:c5:36:33:dc:d9:1c:07:f8:08:
6d:3c:07:00:cb:a2:47:a1:86:a9:7d:67:5c:ef:73:
93:10:e3:1d:93:f4:a0:b3:59:e2:89:84:db:17:a6:
74:49:23:00:76:1a:fc:ea:04:f7:98:b4:bd:1a:a1:
b6:82:1a:33:f8:5b:4c:f1:22:68:f5:40:cd:e1:0b:
75:74:49:06:7c:fa:dc:10:ee:9f:b3:46:6c:22:18:
03:2d:ee:4d:44:d0:6f:f7:e8:d5:b0:c2:a3:64:23:
e1:90:f8:63:31:9c:66:92:64:ea:c2:a1:c9:d7:a1:
1d:78:a1:c7:69:af:76:5a:6b:92:9d:c9:8c:07:98:
12:4a:a6:f3:f5:31:73:09:35:fd:07:7b:03:e0:77:
45:0e:00:ab:4a:66:7e:44:19:fa:9c:8e:6c:c9:0d:
4b:98:59:45:ca:91:c6:6e:c1:4a:c5:62:65:4a:ed:
4f:f8:c6:6b:db:71:dd:da:54:48:4d:ab:c7:1f:a0:
6f:20:45:a8:f6:dc:b2:e5:9c:f7:db:94:88:2a:bc:
80:ee:33:7f:ba:0e:38:59:42:7c:51:c6:4e:e2:81:
b4:73:75:b5:d1:1b:5f:c9:c6:07:08:61:21:4c:34:
a4:cf:a9:5e:16:f8:bf:c6:9b:8c:24:9e:e9:8e:9f:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:93:6C:A0:BF:49:E3:FC:4F:32:5C:67:6B:71:70:72:41:48:4B
X509v3 Authority Key Identifier:
keyid:0A:A4:6B:23:98:65:B8:E6:4A:EA:D4:89:99:F6:B7:FD:6E:17:90:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/0AA46B239865B8E64AEAD48999F6B7FD6E1790F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AA46B239865B8E64AEAD48999F6B7FD6E1790F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.204.0/22
Signature Algorithm: sha256WithRSAEncryption
65:00:cb:a3:56:75:7d:a3:c4:85:fe:c2:66:61:7c:78:8b:99:
13:c3:61:54:97:9f:0c:64:d4:a8:a4:db:11:a0:7f:1a:5f:e4:
8b:87:83:8b:90:f8:51:fc:fc:78:9a:a9:3f:0f:53:9a:36:df:
cc:67:ba:02:f9:ef:cc:0a:61:6c:a1:0e:63:b4:1d:ef:fa:b6:
51:27:72:8f:53:72:f1:a5:52:e9:e2:b9:4c:df:29:dd:a9:c9:
11:a9:27:9f:5f:50:73:dd:b1:b3:95:2b:68:c1:6b:d7:8f:92:
79:17:6a:2a:d9:4a:c6:bc:da:05:7a:43:74:7a:7f:40:fc:33:
20:1e:e3:a0:e3:6e:35:93:c6:b5:98:66:1f:19:3d:2c:d1:cd:
5d:cb:15:3d:79:81:c5:11:07:5f:ed:30:fa:c3:58:b3:15:0a:
ae:e6:b4:37:27:c3:51:e7:e6:88:d5:47:df:aa:d5:89:05:4a:
33:00:e2:d5:26:23:20:5e:2b:1e:26:05:18:23:bd:77:72:e6:
cf:76:4e:d7:6b:54:b5:9a:af:2a:8d:f9:2d:fc:33:76:84:f3:
39:73:45:72:a2:24:43:0e:07:d4:75:4c:b6:88:dd:a0:d5:a0:
45:db:be:a7:f4:59:5e:6d:32:ec:bd:36:33:30:91:07:60:0e:
e6:33:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org