Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3136382e3232372e31322e302f32322d3234203d3e203238363639.roa
File: 3136382e3232372e31322e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier: O0MK3hPhSGcT4ATdEl4gJ+bbjr51hwh62nrL56Jn9tE=
Subject key identifier: 63:CC:0B:1C:7E:CF:E7:73:30:AB:CF:02:A6:2A:7C:14:65:16:F7:AD
Certificate issuer: /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial: 6511125482CE7E411A9791A7852AD1FBD0AB5628
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3136382e3232372e31322e302f32322d3234203d3e203238363639.roa
Signing time: Fri 03 May 2024 19:44:38 +0000
ROA not before: Fri 03 May 2024 19:39:38 +0000
ROA not after: Fri 02 May 2025 19:44:38 +0000
asID: 28669
IP address blocks: 168.227.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:11:12:54:82:ce:7e:41:1a:97:91:a7:85:2a:d1:fb:d0:ab:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Validity
Not Before: May 3 19:39:38 2024 GMT
Not After : May 2 19:44:38 2025 GMT
Subject: CN=63CC0B1C7ECFE77330ABCF02A62A7C146516F7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:37:95:ca:fb:09:ac:32:b2:33:76:aa:3e:
6f:d5:da:d0:25:69:35:88:92:2d:ac:9e:ec:02:d8:
72:98:c1:9c:42:91:56:56:1e:dc:ce:0d:7b:ee:d7:
a8:6d:cb:83:86:a0:29:63:d8:12:9d:e2:9e:7f:9f:
69:59:f5:71:8d:25:0c:8e:66:27:7b:3e:2b:d0:4c:
b8:70:2a:f4:27:6c:62:da:5c:45:09:3e:a8:b5:c3:
4a:46:a4:98:58:70:47:88:bb:7f:a8:2e:91:5d:f1:
91:19:c3:e5:9a:0a:ab:7b:b9:57:07:ae:c4:df:ce:
99:96:b4:b8:15:21:a5:f2:b2:15:ea:2d:a2:c1:69:
1e:c0:6f:82:6d:fe:d5:8e:fe:35:f5:f7:cf:af:ec:
f7:56:0b:05:0c:d3:ad:f9:1c:e5:f7:0f:88:3f:d6:
27:2e:b0:f8:37:93:5b:db:13:cb:55:72:2a:51:a4:
84:74:65:12:69:da:6f:ad:8a:1c:35:af:01:ee:29:
7f:95:74:7b:f9:06:2c:f0:32:aa:06:df:f1:5f:75:
0c:96:bc:b0:8b:9c:e9:4e:43:45:65:1c:fa:7e:67:
0c:29:47:ea:24:aa:a8:6d:02:49:25:40:be:58:da:
41:3f:3a:75:5d:3e:c6:c2:f3:04:b3:d3:18:ed:24:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:0B:1C:7E:CF:E7:73:30:AB:CF:02:A6:2A:7C:14:65:16:F7:AD
X509v3 Authority Key Identifier:
keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3136382e3232372e31322e302f32322d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.12.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d2:fb:f6:2c:cf:6d:c8:dd:75:4e:2e:34:f9:78:9b:21:f2:
a2:2e:b7:3d:e2:23:e1:c5:97:6a:e4:05:c2:cd:7e:88:bf:57:
f9:36:18:1f:13:00:3e:b8:ec:01:2a:d8:66:df:f6:a8:72:6a:
72:bb:5f:13:31:7e:57:6a:ac:46:6f:35:e1:09:f5:f8:65:5e:
09:c3:32:1a:9b:a2:dc:f6:89:a9:4e:93:03:fd:a1:39:4d:34:
1b:23:de:5f:4c:46:db:7c:4a:dc:6a:27:e0:7a:7d:69:0d:35:
36:9a:40:e9:66:08:3c:d7:6a:d8:d3:5e:92:08:fe:74:81:7a:
d2:2c:f6:35:31:8f:51:56:6c:e7:c8:e5:01:17:4d:93:c1:fd:
53:74:19:21:cd:d7:3f:be:b7:51:4b:f4:83:07:57:78:38:ab:
8d:68:df:0b:54:a2:a5:ab:a8:b8:11:78:63:5e:6f:ec:c4:f7:
2e:f4:b3:37:98:63:a3:69:24:ab:83:b6:41:97:c3:c3:40:ae:
02:3f:3d:ea:54:53:b1:41:75:2c:7d:41:d5:f1:92:5f:9d:cd:
6e:f0:0e:8f:5d:60:c6:4c:ca:6b:85:87:4c:3c:41:ee:9d:0d:
74:e6:98:71:e6:aa:6a:64:5c:c3:ef:96:a6:30:74:6d:53:ed:
fd:9d:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org