Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e3235352e32302e302f32322d3234203d3e203238323130.roa
File: 3133312e3235352e32302e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier: Nd7grpJxibpLzQbUXygl3RWyDm44+SOhnM5SkrhwhAc=
Subject key identifier: 45:A1:BE:ED:6B:9D:66:9D:17:92:23:C6:3A:40:31:2A:FC:68:8C:E9
Certificate issuer: /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial: 01685C841CB7EC0C5C521D63C40263D3AC7BA1F3
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e3235352e32302e302f32322d3234203d3e203238323130.roa
Signing time: Sat 04 Mar 2023 16:07:25 +0000
ROA not before: Sat 04 Mar 2023 16:02:25 +0000
ROA not after: Sat 02 Mar 2024 16:07:25 +0000
asID: 28210
IP address blocks: 131.255.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:68:5c:84:1c:b7:ec:0c:5c:52:1d:63:c4:02:63:d3:ac:7b:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Validity
Not Before: Mar 4 16:02:25 2023 GMT
Not After : Mar 2 16:07:25 2024 GMT
Subject: CN=45A1BEED6B9D669D179223C63A40312AFC688CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:c1:74:a7:67:08:77:a2:12:7f:01:af:c3:
00:44:fd:24:ca:1b:f9:35:1e:4c:da:06:4f:4e:d0:
2b:a1:13:85:d2:35:ad:b8:45:8d:dd:c8:0b:c4:df:
c7:3c:84:e5:ee:ae:62:cb:c2:e5:c8:4b:17:f3:0c:
f9:bc:48:17:b7:2c:60:b8:75:0e:b4:e6:f9:30:64:
35:aa:be:c1:74:63:1c:63:40:4c:01:26:63:f8:b0:
b8:1b:a0:93:ff:80:82:a9:76:6a:56:0f:32:e4:d4:
de:29:1e:22:c5:78:17:ee:9c:74:1f:f1:27:4c:ba:
4d:ae:ff:0f:b5:04:76:8d:1f:4e:1a:ab:80:25:c6:
cd:a1:67:55:35:f2:13:dd:4d:42:3d:5e:3e:15:f3:
4c:f2:d7:0c:e6:0f:dc:f5:f4:cd:c3:f0:86:3a:d7:
1f:54:2b:95:02:24:66:3c:4f:62:98:62:03:fb:87:
18:ca:36:58:b2:33:9a:70:92:59:9c:4c:9d:76:79:
ee:13:c5:62:db:71:5e:62:cb:82:b8:63:2e:24:dc:
8d:bc:8e:05:0d:63:65:0e:86:ba:c7:f3:ff:55:9d:
84:20:59:ce:64:f7:20:63:66:ba:f5:70:9a:3f:9d:
96:1c:f7:40:54:af:23:67:d1:c4:4f:86:23:38:77:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:BE:ED:6B:9D:66:9D:17:92:23:C6:3A:40:31:2A:FC:68:8C:E9
X509v3 Authority Key Identifier:
keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133312e3235352e32302e302f32322d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.20.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:22:a8:05:08:b0:21:fe:94:ab:b6:d8:ea:eb:d5:1c:1a:ab:
a3:d2:02:7b:4b:c9:53:25:30:fe:5c:89:4b:c6:9d:8d:4f:5e:
c9:2e:31:f3:f6:67:b1:e2:74:36:2e:0b:51:8b:bb:6e:56:05:
4b:19:4c:bc:91:3f:86:29:e4:6f:86:65:d4:01:5d:7d:14:1b:
bc:bb:de:df:69:61:4d:85:f8:70:2e:da:9a:4a:3a:0c:cc:0d:
33:a8:50:dd:b3:23:4d:91:67:2e:10:a6:ac:0a:0b:e0:a6:12:
31:a4:2e:1b:f0:e6:30:ff:04:8b:5a:50:42:58:1a:72:3f:75:
6d:ca:6a:74:73:10:48:b7:95:cc:ef:21:77:d0:6b:72:5c:7a:
82:c1:4e:86:88:f5:61:94:c5:46:08:44:2b:af:63:c7:81:f7:
aa:61:7f:c4:df:e4:5b:47:11:08:1e:90:58:2b:d1:4e:9a:0f:
4d:7c:41:53:1b:47:89:6b:41:ea:ef:00:88:d1:cf:03:3d:19:
eb:ae:65:87:da:2b:2a:33:2b:7f:c3:58:95:a4:97:71:8e:e7:
7b:b7:30:c3:d1:cb:dd:09:e7:a4:7c:ea:14:72:9d:d9:0c:89:
78:05:98:b7:22:9c:22:e3:02:d9:b5:19:ea:13:a5:c2:d7:1e:
64:76:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org