Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa
File: 3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier: SGoaC3dBEq1S3Ehepc/W2Dh3G7kdBodLQxQYrj2skvk=
Subject key identifier: B9:16:2F:E7:B6:65:C6:3F:A5:26:84:F6:21:3D:89:A7:84:B1:4C:67
Certificate issuer: /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial: 39AC443A2D157161610DAC6D3655272BF316173F
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa
Signing time: Fri 02 Feb 2024 00:16:11 +0000
ROA not before: Fri 02 Feb 2024 00:11:11 +0000
ROA not after: Fri 31 Jan 2025 00:16:11 +0000
asID: 265181
IP address blocks: 167.249.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ac:44:3a:2d:15:71:61:61:0d:ac:6d:36:55:27:2b:f3:16:17:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Validity
Not Before: Feb 2 00:11:11 2024 GMT
Not After : Jan 31 00:16:11 2025 GMT
Subject: CN=B9162FE7B665C63FA52684F6213D89A784B14C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:a7:26:d3:93:ff:66:1e:0c:8d:b4:a1:36:
d1:c0:34:e5:38:ae:3c:42:6d:1d:70:bc:04:d9:d0:
09:8b:de:fd:3f:75:3b:01:ba:78:7e:f2:1b:1f:be:
c5:fa:13:28:77:ba:71:81:df:52:ff:77:4e:42:33:
85:16:e5:bd:ed:bb:2a:90:91:1d:6c:96:66:6e:35:
1c:71:0b:d1:50:01:05:d5:c4:9e:81:31:fc:36:59:
bf:13:4a:5d:2c:bd:f5:1b:37:aa:62:9b:74:de:d3:
f4:c7:36:2b:10:db:12:40:18:cd:08:ec:10:a2:e3:
8c:a3:1f:27:e0:51:65:6b:0a:81:0f:01:6d:c3:f9:
41:20:be:8c:61:c1:9d:85:2b:0b:9e:28:d5:fe:a7:
ec:48:bd:30:d1:d4:3d:9a:35:bb:84:ab:11:25:c4:
9d:24:96:c3:9b:a9:cc:91:7f:4b:cb:13:08:88:15:
0d:bf:c7:ff:8d:de:ba:8b:40:78:d9:5d:57:2e:9c:
30:af:1e:10:8a:91:9f:c5:9b:8d:d7:7e:9a:d0:cd:
23:89:ba:4c:b7:a8:eb:fc:c1:da:86:d7:a3:6b:19:
4a:06:da:2e:e1:53:61:d3:9b:6a:94:18:17:e7:7d:
18:c2:0e:1a:b7:37:b9:75:bf:d2:fe:16:d0:b5:7c:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:2F:E7:B6:65:C6:3F:A5:26:84:F6:21:3D:89:A7:84:B1:4C:67
X509v3 Authority Key Identifier:
keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.132.0/24
Signature Algorithm: sha256WithRSAEncryption
32:91:33:f4:f7:42:25:14:71:dc:b9:f2:e5:54:33:2b:6e:49:
71:b6:32:3b:73:b7:80:5b:82:ab:f4:9f:d9:9b:01:bd:32:42:
d7:87:80:cb:8c:4b:9f:4f:5e:88:bb:c8:0a:b1:7d:e9:4e:68:
93:2e:93:94:db:e6:8f:a7:6b:4b:e4:eb:26:fd:98:8c:21:b6:
12:89:17:a4:be:de:a2:30:8f:76:1c:3b:ed:fa:33:96:1a:97:
08:4e:41:9c:00:14:9b:cf:d5:c7:dc:a6:91:39:b6:fc:db:a2:
f5:56:f5:3d:11:67:9b:6b:34:87:60:83:0b:aa:33:68:4d:1e:
6d:21:ea:89:10:8a:b0:aa:22:20:db:da:b2:12:28:c7:ec:8b:
57:9e:2b:5c:0f:d9:cd:0c:84:72:fe:d5:91:1c:bb:66:c1:ab:
f4:0d:27:9b:1a:0b:57:62:2c:78:d0:9a:b2:93:e7:21:1a:d2:
ae:ac:2f:41:19:e1:44:a3:a3:04:d8:ac:d1:f7:ac:b9:66:e7:
4c:32:70:71:72:71:41:91:93:02:1b:5c:f9:ba:32:5a:7e:28:
21:96:d9:a5:a5:36:6e:87:84:a5:32:c1:61:21:99:b0:6a:0d:
03:06:36:7c:19:ac:14:d0:9d:e1:1f:0e:b8:dc:e8:be:e4:53:
77:bc:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org