Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/3136382e3232382e32302e302f32322d3234203d3e20323634393032.roa
File: 3136382e3232382e32302e302f32322d3234203d3e20323634393032.roa (raw, json)
Hash identifier: ciEzMsl8XNQvatcy3qlBI91g+PZV+KCj01OxQblzefw=
Subject key identifier: 5B:8C:C3:56:DF:E6:41:8B:4C:2B:A6:A8:2C:5A:19:87:FA:87:1D:AB
Certificate issuer: /CN=AA631FAB3A44BD06A767A4F75D7C1474EFCE8341
Certificate serial: 559B0E8B79F0AF96D402DC2DE71619BE29591986
Authority key identifier: AA:63:1F:AB:3A:44:BD:06:A7:67:A4:F7:5D:7C:14:74:EF:CE:83:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/3136382e3232382e32302e302f32322d3234203d3e20323634393032.roa
Signing time: Thu 20 Jul 2023 15:29:02 +0000
ROA not before: Thu 20 Jul 2023 15:24:02 +0000
ROA not after: Thu 18 Jul 2024 15:29:02 +0000
asID: 264902
IP address blocks: 168.228.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9b:0e:8b:79:f0:af:96:d4:02:dc:2d:e7:16:19:be:29:59:19:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA631FAB3A44BD06A767A4F75D7C1474EFCE8341
Validity
Not Before: Jul 20 15:24:02 2023 GMT
Not After : Jul 18 15:29:02 2024 GMT
Subject: CN=5B8CC356DFE6418B4C2BA6A82C5A1987FA871DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:a5:87:b6:fd:0d:4e:d2:3c:cb:cc:50:43:
c3:1a:0a:8d:9f:07:43:15:32:2e:ef:e3:4f:97:8c:
c0:fd:dd:59:fb:4e:35:5b:7e:ca:e8:8d:c6:6c:fb:
05:a0:c5:4e:9b:b0:6a:a8:d0:fe:4f:e7:96:75:70:
73:3b:ec:35:eb:60:61:21:dd:f8:46:53:30:58:a1:
38:1e:36:58:f8:6e:02:d0:1e:0c:9a:08:07:a1:ae:
3c:a4:ab:31:6e:83:61:78:7a:76:95:56:ca:8b:39:
10:e2:6b:f4:96:2d:c9:d1:c5:ce:05:0b:5e:c4:f1:
9a:8b:e8:15:f4:e9:71:06:9c:40:f5:b5:eb:66:96:
da:62:df:cf:82:32:d1:8c:68:e0:ba:29:27:7a:90:
1d:7e:0a:25:7d:23:6c:a9:d0:1d:0b:fe:c6:73:b3:
26:c7:68:51:53:e8:aa:fd:25:ba:76:d5:4f:c2:ac:
d2:2a:2d:91:77:4f:f1:eb:40:41:7a:0c:f1:ac:16:
25:d9:8d:5a:77:06:a2:ef:d3:d6:68:0d:87:ec:4c:
95:3d:b2:21:f7:bb:2c:ef:87:11:3a:32:20:47:ae:
eb:55:3e:40:5c:f8:45:35:b9:ae:ac:3f:8b:46:dc:
53:4b:1f:e6:b4:87:31:2b:ca:5f:c0:45:f3:53:64:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:C3:56:DF:E6:41:8B:4C:2B:A6:A8:2C:5A:19:87:FA:87:1D:AB
X509v3 Authority Key Identifier:
keyid:AA:63:1F:AB:3A:44:BD:06:A7:67:A4:F7:5D:7C:14:74:EF:CE:83:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA631FAB3A44BD06A767A4F75D7C1474EFCE8341.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Z4Sm8eyRehyioFXxcaj3H9FvLzbgepuzxttDTxsN1nc/0/3136382e3232382e32302e302f32322d3234203d3e20323634393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:9a:76:82:6d:81:5c:4d:d7:98:fa:a4:e7:0e:65:13:14:00:
3c:46:4c:c5:d9:70:91:5f:51:4a:e5:af:8f:57:b1:08:72:aa:
d1:e5:ca:c8:22:f5:7b:dd:0e:26:38:df:5b:27:2e:25:3a:37:
13:91:b6:ee:a9:1a:f0:c9:f2:32:5d:55:e5:1a:d6:6b:b7:97:
b7:ce:d9:a5:ac:80:96:af:ff:4f:29:12:9d:2a:57:3d:c8:2e:
23:2a:42:20:8d:18:34:41:56:c9:0d:22:cf:0b:35:d5:e7:0f:
ef:e7:67:ca:16:8c:3a:27:5b:69:51:26:c7:44:d0:00:85:2b:
7e:7b:f2:51:1f:83:cb:c0:65:38:7d:65:8c:43:88:c7:b7:57:
50:5b:8a:cc:72:4f:bc:ee:92:b2:c2:d7:07:f4:20:09:9c:32:
db:8e:4d:c5:9b:29:3c:46:73:c8:2d:2d:4d:9c:79:2d:a9:ea:
1a:ba:a0:7e:43:e5:b0:db:20:ce:37:10:cd:e0:f0:29:0b:14:
7c:ea:d9:0a:87:eb:bd:6a:43:1b:55:66:26:c7:33:3c:56:32:
2f:f8:e6:1f:81:eb:00:69:55:62:ba:23:5a:6a:3b:8e:0b:63:
3d:2e:33:20:06:47:20:6e:86:09:1c:87:49:0d:03:69:31:00:
78:a1:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org