Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e302e32382e302f32322d3234203d3e203238323130.roa
File: 3133312e302e32382e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier: K7lux7moTdUWEyhdAahhXH1KyFJYT2ZQJqtzkyKzTMI=
Subject key identifier: 37:87:C6:3B:3B:EA:E1:D1:D8:2E:6E:38:11:B7:CC:F3:B9:A5:2F:4F
Certificate issuer: /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial: 609C13B2C45D98FCB0A9A9B85706DC73E0684B72
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e302e32382e302f32322d3234203d3e203238323130.roa
Signing time: Sat 04 Mar 2023 16:07:20 +0000
ROA not before: Sat 04 Mar 2023 16:02:20 +0000
ROA not after: Sat 02 Mar 2024 16:07:20 +0000
asID: 28210
IP address blocks: 131.0.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9c:13:b2:c4:5d:98:fc:b0:a9:a9:b8:57:06:dc:73:e0:68:4b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Validity
Not Before: Mar 4 16:02:20 2023 GMT
Not After : Mar 2 16:07:20 2024 GMT
Subject: CN=3787C63B3BEAE1D1D82E6E3811B7CCF3B9A52F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:ff:9a:fa:1a:81:2f:cb:cc:5a:71:1e:31:
b6:a7:23:ff:fe:e9:52:0c:85:a4:3b:e6:ab:34:ef:
81:6b:4a:aa:38:82:d8:99:e2:cf:f6:12:f1:6a:59:
be:24:d9:2d:c7:f3:ac:8f:d5:e1:33:e8:5f:9c:6d:
38:bb:a6:ac:a8:23:ef:36:9d:b2:70:84:fd:4d:f2:
0a:43:09:96:8c:1f:aa:29:ec:9d:51:b9:8e:7c:4f:
44:c1:8e:96:1b:86:35:c8:ca:5a:9b:0a:21:7c:42:
b7:17:20:9c:70:31:2d:cc:be:ed:07:59:d6:6e:dc:
de:d0:0e:c8:6e:fa:04:3b:35:50:e7:5e:fa:57:79:
b9:73:8d:f3:38:7e:a3:b6:38:d8:25:41:21:bf:e7:
e4:a6:be:c9:12:75:ed:50:29:65:74:71:36:85:fc:
bb:99:77:06:de:5a:70:63:13:cd:4c:ad:35:25:1d:
41:d5:b0:05:61:c2:2e:e2:5e:d3:dd:75:48:ed:0d:
4b:0e:02:2e:b5:65:c6:28:d4:b0:4e:66:a2:44:bc:
0a:df:1a:81:b3:b1:80:44:67:07:7b:8c:f0:90:e0:
7e:c0:9f:15:f6:ea:52:09:17:13:6b:3f:81:52:91:
bb:55:6b:d8:53:9e:54:3d:93:d0:39:c0:b1:21:b3:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:C6:3B:3B:EA:E1:D1:D8:2E:6E:38:11:B7:CC:F3:B9:A5:2F:4F
X509v3 Authority Key Identifier:
keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e302e32382e302f32322d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
06:1b:b5:8f:62:3f:a0:8f:1d:03:05:eb:9a:6b:b3:d1:7e:74:
bd:d3:ca:51:bf:21:01:05:5d:d0:76:73:7f:d3:31:8f:c0:9d:
8a:18:b9:c1:09:9c:f9:5e:9b:00:50:f1:21:43:4b:dd:49:e4:
5a:88:93:90:c8:da:37:98:79:35:4b:ad:f3:ed:b3:04:b1:ca:
ac:3c:3b:b9:2c:6e:f1:3b:d0:23:9d:6a:dc:ba:af:11:a5:a7:
5a:76:3f:a1:2f:bf:b2:31:c1:ef:ad:6b:e6:e4:c8:76:41:5b:
49:67:7d:60:9c:e6:93:80:2c:46:6d:20:d6:79:49:9b:21:b5:
dd:dd:b8:c7:c0:3f:9a:41:61:84:54:87:5b:e2:a3:60:c4:90:
6a:68:0b:fd:fd:63:9e:70:2b:75:5d:83:3f:f1:3a:e6:e7:2e:
16:53:39:4b:26:e7:48:5b:aa:ff:47:eb:99:c6:5f:fc:41:78:
ad:6c:68:9b:ad:d6:2e:bd:36:9a:02:52:e4:ca:8d:8e:ac:07:
6e:c7:4b:90:f2:2a:5a:de:c0:ea:b1:56:df:39:30:3e:e4:c2:
74:f1:04:cb:d8:c6:01:81:01:2f:2e:c1:24:33:b3:53:b5:01:
04:cf:74:08:bc:a7:bf:3e:a5:e6:bb:b6:59:a8:b3:74:ad:b8:
48:74:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-ams.rpki-client.org