Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa
File: 3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier: iEC2rMhU4jheAbjl1xoyxRGnBBJdujP3G4dLneFFiG8=
Subject key identifier: 00:CE:54:04:BD:09:B6:C0:6E:A9:A3:79:62:61:AC:29:15:20:4C:FD
Certificate issuer: /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial: 2E9FA3400471B3668EB028F96E88964E41C14763
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa
Signing time: Fri 02 Feb 2024 00:16:13 +0000
ROA not before: Fri 02 Feb 2024 00:11:13 +0000
ROA not after: Fri 31 Jan 2025 00:16:13 +0000
asID: 265181
IP address blocks: 167.249.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:9f:a3:40:04:71:b3:66:8e:b0:28:f9:6e:88:96:4e:41:c1:47:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Validity
Not Before: Feb 2 00:11:13 2024 GMT
Not After : Jan 31 00:16:13 2025 GMT
Subject: CN=00CE5404BD09B6C06EA9A3796261AC2915204CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ea:4e:80:5e:97:46:6d:ce:46:69:66:5f:e4:
35:ed:26:db:a1:c7:0f:3a:c4:5a:dd:2e:0d:9e:17:
f3:4b:30:37:57:2a:09:8b:84:80:a4:b4:2e:a1:56:
78:f9:ba:26:99:5b:a6:ff:6e:aa:9b:36:52:8f:0c:
16:a6:36:d3:43:f9:75:34:bc:4c:99:40:c8:a9:e8:
5d:fe:c6:72:0b:97:ca:15:8a:87:a8:57:89:2b:40:
7e:2a:4b:b5:7e:fe:f7:5f:79:49:b7:6e:0f:c1:2c:
0a:de:97:6e:8e:dc:15:ac:14:fc:40:69:01:a0:c1:
d9:35:b1:52:08:5d:40:46:da:7b:a6:89:80:ca:ba:
6e:1f:d3:0c:32:9e:cc:f6:3e:4c:f2:00:78:3b:af:
30:c9:74:e3:66:43:e5:c8:af:0d:85:59:4d:2b:16:
68:34:77:c4:af:7e:e8:df:13:96:99:c5:b6:f2:8d:
71:03:0e:60:05:93:19:6d:86:23:80:96:55:0a:60:
f4:f8:3b:15:12:1e:24:23:80:f5:cf:6f:db:20:40:
1c:44:be:c3:52:02:ad:47:b5:94:bc:6c:62:01:f8:
e6:4f:3c:7d:f1:93:e7:56:e3:19:63:de:d9:87:ec:
6f:b1:35:d7:11:75:ee:ea:c2:4a:7c:91:cf:a0:13:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:54:04:BD:09:B6:C0:6E:A9:A3:79:62:61:AC:29:15:20:4C:FD
X509v3 Authority Key Identifier:
keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133332e302f32342d3234203d3e20323635313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.133.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ff:16:89:df:46:16:1c:fe:9a:a0:0d:24:21:82:d3:eb:12:
30:57:39:62:10:f8:18:f7:33:92:03:08:63:55:ed:a2:d6:44:
4c:55:77:1e:97:c6:0e:77:0d:f5:1e:9f:07:7a:1f:4a:b1:e5:
9a:02:99:6e:5f:69:fc:22:7e:30:89:e8:b4:9f:88:fb:df:3c:
45:0f:84:60:cd:22:af:63:b1:33:3f:27:be:e8:6a:ec:b4:c2:
03:fb:ec:28:1e:29:bd:f0:d8:1a:0e:4f:ac:c9:1a:77:b4:33:
38:e5:ac:c5:6e:7b:11:d4:fe:67:a0:8a:17:07:c5:37:e3:f0:
68:f7:50:a8:1b:03:c6:1c:bb:ca:72:6e:c5:74:2c:fb:8f:3d:
a4:38:33:cc:4f:43:85:43:42:6a:6a:64:84:23:53:21:94:ec:
37:dc:d0:46:09:c7:1b:bd:c1:bb:16:c5:8e:b3:92:ea:d9:c4:
79:d8:5f:4b:99:6b:de:90:96:14:79:8c:e6:bc:ec:33:e6:d8:
63:0b:dd:bc:11:e6:47:17:21:ee:a7:07:e7:1d:47:df:42:57:
bd:92:60:0a:63:fe:bf:a1:eb:f6:1c:82:43:36:de:10:f9:48:
b0:42:eb:b1:17:48:05:43:b9:eb:97:ac:32:d9:19:bc:43:ef:
b4:f4:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org