Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa
File: 3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa (raw, json)
Hash identifier: qWp4e/jm9Zi6qdfP1hG6R8da2+zmMlZCjlidr4dpuwo=
Subject key identifier: C7:75:45:94:A4:F8:25:8E:D4:05:7A:7D:8B:65:4A:3C:FA:2E:95:B8
Certificate issuer: /CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Certificate serial: 46B3494B8721BB7D3DF377FA076B953A088CC412
Authority key identifier: CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa
Signing time: Sat 30 Mar 2024 00:41:05 +0000
ROA not before: Sat 30 Mar 2024 00:36:05 +0000
ROA not after: Sat 29 Mar 2025 00:41:05 +0000
asID: 264208
IP address blocks: 138.97.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b3:49:4b:87:21:bb:7d:3d:f3:77:fa:07:6b:95:3a:08:8c:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Validity
Not Before: Mar 30 00:36:05 2024 GMT
Not After : Mar 29 00:41:05 2025 GMT
Subject: CN=C7754594A4F8258ED4057A7D8B654A3CFA2E95B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:14:be:a1:2d:7d:64:4f:27:15:a3:b0:41:
84:f4:9e:22:3d:4c:3b:43:13:4d:3a:cc:ee:d3:52:
71:8b:a0:af:5c:41:24:7c:a1:ab:a6:e3:8c:b4:26:
15:21:f8:2a:f3:08:fc:5d:fb:63:22:6b:20:a1:a0:
d2:9d:06:45:b2:16:ad:c1:09:5d:4c:63:f6:00:11:
43:90:77:c7:69:6f:34:d4:9a:1b:78:55:e2:e3:b7:
22:57:44:bb:30:7b:a0:9e:e2:ce:13:b8:0b:3e:77:
8a:b4:ff:34:4b:d8:ef:ca:3c:3b:f6:b6:6e:9e:47:
1d:79:65:e1:ef:5f:89:8e:1c:96:b9:81:fa:72:f0:
4e:12:a6:12:22:1a:bb:1f:ce:c3:0d:44:e0:f7:25:
fb:fe:7f:f9:97:63:99:dd:20:eb:51:f4:f1:57:e5:
0c:0e:d5:37:8c:2e:5f:f9:03:95:dc:9b:af:49:19:
af:86:e7:ab:f2:06:60:55:25:fe:aa:06:a3:c9:af:
12:a7:ca:f7:8a:88:10:f0:d7:81:76:79:89:91:2c:
bb:f6:af:4c:22:af:ea:d8:11:ca:fb:59:ff:c6:8f:
2c:0c:c6:f0:b1:b7:f9:9f:95:fe:0b:50:45:8b:5a:
f7:c1:a0:8f:cf:a4:f6:e7:c8:bd:6f:ba:cc:13:3e:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:45:94:A4:F8:25:8E:D4:05:7A:7D:8B:65:4A:3C:FA:2E:95:B8
X509v3 Authority Key Identifier:
keyid:CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.224.0/23
Signature Algorithm: sha256WithRSAEncryption
13:a6:ff:63:10:1c:58:d8:6f:c9:ce:93:8c:a6:c8:41:14:19:
7c:71:e3:a4:65:ce:de:47:6a:94:d9:39:c1:b5:7e:72:81:8c:
7d:4c:46:43:db:86:e4:1e:8a:b1:e9:60:87:92:d5:e4:cc:b5:
cb:24:fd:86:30:2f:6a:ba:d4:24:24:ba:5c:18:cd:a4:d5:aa:
73:f9:9d:c1:c8:72:37:46:e8:99:a1:05:f6:21:8b:f0:56:1e:
33:fa:8f:d6:1c:d0:34:df:85:76:08:c0:70:de:01:56:a4:1b:
ee:42:f1:58:4a:d4:d3:1e:9c:e4:a3:31:c2:85:c5:c4:b3:dc:
f1:1f:53:2b:a3:7d:86:46:09:b7:57:23:68:ef:95:d9:9c:60:
29:7f:91:05:78:71:1e:b5:ec:fc:1b:c5:5a:5c:9b:b6:af:ad:
14:57:12:78:ed:e4:ed:1f:6b:90:14:af:10:2f:83:09:26:cb:
56:b8:76:4a:00:87:60:81:de:33:e3:5b:05:0d:32:71:3b:ca:
3c:2d:f6:73:4a:f3:2f:26:3a:6f:92:bf:ab:03:72:e6:14:16:
79:42:a0:29:6b:81:60:88:f4:0f:b0:6c:94:93:9a:af:10:67:
c0:5e:c1:09:d0:89:70:c2:ab:5c:4b:10:43:40:c3:0e:fc:5a:
f1:f5:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org