Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e35392e3132302e302f32322d3234203d3e203238323130.roa
File: 3133382e35392e3132302e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier: 2Qxo6xpW3JVH1CO9Z3kDXXtRE8/w/kdfi7TtJ9EESGU=
Subject key identifier: A9:F0:1B:39:15:22:6F:1E:BC:C5:3C:B2:94:B2:EE:A1:9E:13:A8:37
Certificate issuer: /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial: 32FD934D1A8B12FD2018E963D2DA4B646C976517
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e35392e3132302e302f32322d3234203d3e203238323130.roa
Signing time: Sat 04 Mar 2023 16:07:31 +0000
ROA not before: Sat 04 Mar 2023 16:02:31 +0000
ROA not after: Sat 02 Mar 2024 16:07:31 +0000
asID: 28210
IP address blocks: 138.59.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fd:93:4d:1a:8b:12:fd:20:18:e9:63:d2:da:4b:64:6c:97:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Validity
Not Before: Mar 4 16:02:31 2023 GMT
Not After : Mar 2 16:07:31 2024 GMT
Subject: CN=A9F01B3915226F1EBCC53CB294B2EEA19E13A837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:83:fb:19:f8:6e:ea:ee:df:c7:c4:06:f2:
aa:29:0d:a2:1c:54:bc:7e:71:eb:1e:41:d0:33:1f:
7e:39:cc:ec:2d:e7:30:ce:1d:75:18:f9:03:86:84:
d0:eb:0a:20:4b:f7:04:04:ef:94:49:97:2a:fc:ff:
62:47:d3:b8:0b:93:06:1f:ee:6a:9e:8c:46:c8:7f:
e1:9f:e5:d1:a4:68:3c:ff:9b:7b:cf:eb:e7:d4:54:
11:d0:e7:ed:94:3b:f1:50:5c:d0:ab:b8:05:54:98:
50:88:25:4a:13:85:9f:0e:c8:49:17:00:af:8f:8b:
16:28:39:18:03:90:dd:cd:87:0c:18:62:39:1f:2a:
d0:f9:5d:16:b8:b0:69:25:41:40:3d:ad:b7:9e:8e:
86:5e:cc:58:34:e5:f8:59:3d:48:3e:97:c1:f0:60:
ef:ad:19:fd:db:a0:b8:91:41:21:4e:37:45:7b:3d:
04:34:e3:90:92:f3:08:4e:58:c2:fd:14:fc:aa:58:
97:ad:1c:62:c5:df:85:5f:a0:55:34:53:b0:cb:28:
08:89:05:63:f2:f9:9e:ff:a7:a3:0a:0e:ea:eb:4f:
a5:32:e3:26:b2:98:b5:54:0b:cc:d7:39:f8:99:08:
ca:9c:83:25:5f:0e:bc:80:96:cd:10:02:89:c4:c6:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:1B:39:15:22:6F:1E:BC:C5:3C:B2:94:B2:EE:A1:9E:13:A8:37
X509v3 Authority Key Identifier:
keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e35392e3132302e302f32322d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:23:08:6e:97:68:3f:c2:3a:9e:71:b4:60:84:50:57:a7:30:
b6:5e:45:29:dc:70:e1:b8:88:55:0f:24:86:69:87:15:bb:61:
72:5a:84:ca:02:05:e6:68:f7:aa:d3:8a:21:fc:f3:84:72:b7:
26:47:0a:e7:1f:c0:22:ee:8c:14:33:8c:f0:cf:0e:bb:c9:60:
92:f3:72:16:07:01:0c:fe:57:b6:3c:cd:4e:a3:da:15:ac:f4:
b5:eb:5a:ee:8f:bb:90:58:4e:93:ba:eb:53:4e:4b:22:cc:1b:
d2:5c:20:b1:9d:aa:fb:c0:53:f7:60:db:d5:b0:91:2e:52:3c:
53:ba:72:16:16:08:ba:91:f4:cc:6a:98:bb:07:6f:1a:29:fe:
22:7f:de:63:3a:d1:94:a6:ff:6e:fe:58:01:a4:63:32:1a:9b:
f5:ef:3b:29:41:f1:b4:11:c2:9e:e3:e9:fc:3c:75:f5:3d:37:
e5:eb:e4:20:d2:9f:9b:02:87:c2:e8:fd:6d:0b:cf:dc:4a:51:
08:3b:6f:84:ec:eb:59:97:bd:38:0e:c1:23:4e:1b:75:ab:a3:
41:9a:02:a1:e4:89:51:f7:50:29:7a:e8:ad:f2:45:b5:d5:7f:
b6:22:28:f4:ee:f4:66:f8:ac:34:eb:c9:be:4b:0b:99:be:2e:
18:29:3f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org