Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa
File: 3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa (raw, json)
Hash identifier: RQJ/S/gTrX+HRxlVXyBFTSRExoFjAipaE8kMcmNXGpY=
Subject key identifier: 3A:D3:03:E4:FF:0A:98:EF:A9:A1:6A:17:47:5B:A9:4A:7C:2A:18:09
Certificate issuer: /CN=32F120628961E91749A1239DA4FFA744369562E2
Certificate serial: 7DB8D1E615F5628789BA17997638D5A1B6B8736F
Authority key identifier: 32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa
Signing time: Thu 21 Dec 2023 18:53:04 +0000
ROA not before: Thu 21 Dec 2023 18:48:04 +0000
ROA not after: Thu 19 Dec 2024 18:53:04 +0000
asID: 263970
IP address blocks: 138.255.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b8:d1:e6:15:f5:62:87:89:ba:17:99:76:38:d5:a1:b6:b8:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32F120628961E91749A1239DA4FFA744369562E2
Validity
Not Before: Dec 21 18:48:04 2023 GMT
Not After : Dec 19 18:53:04 2024 GMT
Subject: CN=3AD303E4FF0A98EFA9A16A17475BA94A7C2A1809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:1f:75:ad:f0:5e:a9:3b:71:c2:70:d3:30:
23:67:26:a1:b9:c4:88:d8:8b:30:39:b1:4b:05:0c:
b5:16:79:65:e3:81:8c:e1:02:f7:a4:7f:f0:62:aa:
26:7d:6e:bb:f9:25:1e:2f:39:38:0a:43:a6:3e:a1:
a5:b6:11:b6:73:bd:c2:63:85:0c:81:e4:21:bf:a6:
62:39:03:4a:f3:92:04:f2:30:2f:78:de:cd:38:82:
68:ac:c1:f7:9f:88:30:32:66:66:dd:ef:ae:9b:5b:
f4:9f:83:46:6e:6c:4d:28:b0:77:ae:ca:4e:ae:c0:
64:32:85:69:d3:73:06:68:03:2f:31:ed:73:df:57:
af:07:2f:14:fa:d1:74:a8:ae:b8:5c:89:36:67:98:
85:7b:b7:77:4b:1a:6e:51:aa:03:f3:9d:5a:27:fd:
73:46:13:16:79:01:31:9b:bf:a0:f9:e5:bd:9f:3f:
b0:d8:04:3d:0b:5a:19:e4:24:aa:cc:30:e0:a9:d6:
1c:f7:9c:ad:64:d3:a2:b0:83:0b:f0:de:80:4f:40:
18:2e:2b:b0:8d:f7:a6:04:ce:56:8d:f8:1f:2d:1c:
d8:52:26:a2:3d:92:82:07:9f:76:d6:c4:48:4b:f5:
8e:9b:aa:d7:18:f1:dd:0c:bc:f4:c3:52:3f:23:d2:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:03:E4:FF:0A:98:EF:A9:A1:6A:17:47:5B:A9:4A:7C:2A:18:09
X509v3 Authority Key Identifier:
keyid:32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:1f:78:8d:3c:8f:8e:65:7a:46:cb:4e:dd:db:29:cf:0a:11:
c3:fb:47:01:d0:bd:07:a6:a7:5b:02:1a:d7:ac:15:74:9f:4c:
44:84:dc:77:f4:c9:3c:24:cb:1d:fe:3a:dc:7f:38:90:aa:ae:
a9:58:6e:cf:eb:60:95:fe:79:6d:b0:6f:51:31:c8:ce:73:f2:
8b:f3:4c:23:aa:83:03:5b:a0:26:2e:ac:f1:55:5f:d9:0a:ef:
52:5b:8b:bc:08:ae:d9:60:9c:ec:2c:68:b7:cd:a2:09:d1:87:
74:82:ec:5a:be:4b:65:22:0e:bd:38:58:11:c6:f7:28:ca:30:
79:e8:ce:88:15:c8:ab:1b:e5:e0:a4:1f:8f:d0:4f:6a:17:ad:
00:e3:7b:39:9f:8a:47:3d:1c:a6:3c:3e:92:3a:18:82:d2:6d:
e5:6f:9f:58:a4:b4:77:ae:47:bc:2c:ab:51:1b:de:aa:a1:ff:
5a:f8:91:58:50:b1:2e:d2:0d:c8:3e:6f:a0:27:c7:d2:18:0b:
14:21:95:2f:f7:c7:3c:28:1f:d9:fc:93:44:38:b4:e7:37:d5:
41:98:f4:01:08:d1:4e:cd:34:a8:e7:3d:95:e6:db:e1:d6:cb:
0b:20:a7:1b:36:75:32:55:6b:ca:bf:e0:80:72:69:27:5f:1d:
4e:e3:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org