Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31362e302f32322d3232203d3e20323633393930.roa
File: 3134332e302e31362e302f32322d3232203d3e20323633393930.roa (raw, json)
Hash identifier: 5v8MMza8/b4uvh9/eRPRHDvpVgNHiHVczjj1xOjnjC4=
Subject key identifier: F6:8D:94:88:FD:07:78:1D:7C:75:FA:A0:15:AF:D2:F8:89:51:F3:6D
Certificate issuer: /CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Certificate serial: 3D79A12B8A1747DEDE26F0599282BF517E90FC9F
Authority key identifier: 75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31362e302f32322d3232203d3e20323633393930.roa
Signing time: Sat 13 Apr 2024 16:13:22 +0000
ROA not before: Sat 13 Apr 2024 16:08:22 +0000
ROA not after: Sat 12 Apr 2025 16:13:22 +0000
asID: 263990
IP address blocks: 143.0.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:79:a1:2b:8a:17:47:de:de:26:f0:59:92:82:bf:51:7e:90:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Validity
Not Before: Apr 13 16:08:22 2024 GMT
Not After : Apr 12 16:13:22 2025 GMT
Subject: CN=F68D9488FD07781D7C75FAA015AFD2F88951F36D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ef:90:43:19:d5:66:78:11:2d:b9:07:b3:b4:
ee:27:08:90:e0:61:66:fc:16:4c:f2:81:bd:07:93:
09:50:af:40:26:e9:c6:36:12:84:70:3f:72:a6:c2:
66:72:7f:6d:d4:e6:29:52:a6:4e:f1:bc:f6:6b:6d:
83:54:4a:b5:1e:f3:20:8f:94:13:63:a2:32:ae:8c:
19:46:7e:7d:55:93:a8:46:64:6c:d2:d8:3d:1d:74:
98:7c:06:c0:45:97:45:ad:43:65:27:73:75:de:94:
78:c0:6c:71:ba:10:e7:e0:e6:a3:a6:0b:c1:40:e7:
d8:13:a7:22:dd:4b:82:a9:2f:19:64:e9:b6:c2:d9:
df:fd:6a:27:78:b2:bf:59:58:3e:5e:91:21:1c:b5:
93:13:59:5b:1e:97:9d:a2:e9:12:26:25:26:3c:78:
55:f4:c7:5b:a0:9d:ef:15:b2:7d:17:79:29:9f:c2:
51:29:dd:83:ef:80:4f:f1:2f:37:0a:09:e8:fa:52:
c9:02:57:a4:d3:80:6c:33:09:49:3f:2b:19:95:5e:
50:fb:c0:f8:0d:99:9e:1a:f8:91:e7:8b:bb:b6:23:
21:ef:7a:37:12:4e:07:c1:32:b2:aa:c8:2d:02:09:
97:68:bb:42:9b:c3:45:79:7c:99:bb:ab:f9:4f:3f:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:94:88:FD:07:78:1D:7C:75:FA:A0:15:AF:D2:F8:89:51:F3:6D
X509v3 Authority Key Identifier:
keyid:75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31362e302f32322d3232203d3e20323633393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a5:a6:b1:55:9f:5d:09:a8:2a:dc:99:9e:91:58:04:ba:98:
ac:f9:2b:62:b8:b2:2b:f3:cf:14:0f:12:2d:49:f0:d9:72:11:
d2:f6:80:97:50:4f:2b:9b:5f:d6:e7:7d:ff:10:bf:46:ce:fe:
ed:fc:0b:91:ca:5e:8f:05:4f:c5:12:2d:11:b6:7e:84:f8:f4:
4a:75:1a:2d:80:88:75:2c:ae:79:2f:c6:b6:d3:3c:5e:fa:74:
b3:dd:d3:5f:ea:b5:70:e5:a2:63:70:13:e1:07:25:68:13:30:
e7:c3:64:c0:a7:75:48:f1:e8:7d:da:c7:8d:f3:9d:04:d9:37:
28:5b:59:0d:c0:82:e2:95:a8:77:f9:3b:59:5e:e0:43:96:6f:
7a:21:02:b4:78:2e:36:bd:ae:79:d0:2b:09:d5:ae:61:fa:ee:
64:ab:98:0f:41:aa:2b:09:01:e4:a2:75:07:53:6d:13:5c:79:
b7:6f:95:2b:9e:1b:ea:ea:fd:af:c3:84:d4:13:20:69:3e:2b:
1a:b3:a3:8b:a3:0c:18:c8:f1:be:30:48:4d:a5:29:44:9d:01:
e2:27:70:15:69:20:93:e8:ae:82:eb:c9:91:35:99:ad:c6:79:
3d:fd:63:a1:f4:c4:8e:bb:1f:a2:90:dd:16:86:1a:bc:d2:1a:
25:71:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org