Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3232203d3e20323636343333.roa
File: 3133312e3130382e3235322e302f32322d3232203d3e20323636343333.roa (raw, json)
Hash identifier: +p8Q9xBEyo+A+vOQYG6BCNuCd/TgXXW8I5XeEIaa7vg=
Subject key identifier: A9:50:CB:A7:26:DF:D4:9A:60:16:BA:67:80:95:69:24:69:C7:48:8D
Certificate issuer: /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial: 653D6A7F8B4B53D4C5A511A5E8FAA3BF85920241
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3232203d3e20323636343333.roa
Signing time: Thu 04 Jul 2024 21:45:04 +0000
ROA not before: Thu 04 Jul 2024 21:40:04 +0000
ROA not after: Thu 03 Jul 2025 21:45:04 +0000
asID: 266433
IP address blocks: 131.108.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3d:6a:7f:8b:4b:53:d4:c5:a5:11:a5:e8:fa:a3:bf:85:92:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Validity
Not Before: Jul 4 21:40:04 2024 GMT
Not After : Jul 3 21:45:04 2025 GMT
Subject: CN=A950CBA726DFD49A6016BA678095692469C7488D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:2f:1b:d9:cd:4d:98:07:cf:a7:18:e2:a1:
9e:47:f9:8d:7b:e1:f6:ee:b6:54:18:ab:cf:48:ef:
8b:f7:46:ec:8f:55:96:df:ef:03:99:4a:5c:8c:f8:
c8:00:cf:02:a2:61:85:3b:5c:21:a3:13:91:c2:23:
0a:80:17:8a:a3:9e:a0:ab:15:60:25:a4:c7:9d:e1:
2e:b8:f7:fc:0a:6e:4f:e1:2d:09:81:71:65:13:19:
f7:21:23:c9:55:3d:ec:de:e5:48:97:98:a2:e7:f9:
3e:e8:06:ae:3f:70:e6:8b:cb:9b:ad:02:6c:f0:b4:
6a:db:07:18:d5:bf:0e:a5:b7:84:b2:23:59:98:1b:
65:ca:63:66:04:f7:4e:56:dd:92:a0:15:5b:43:5c:
b8:7a:b4:ef:01:ea:79:fc:92:a0:1c:36:3d:0a:f7:
1c:da:c0:ce:d5:55:7f:47:25:85:e3:d1:5d:e2:9f:
18:b6:29:27:24:28:51:31:2c:87:79:5c:5a:80:27:
7b:bf:f9:bd:3c:c7:2a:2a:38:3a:7c:e5:63:af:d1:
fe:d1:03:96:15:f2:b1:80:fc:17:0a:9a:a9:f4:f6:
f5:04:8c:fd:f5:e3:77:c2:56:d8:b9:53:17:e3:03:
04:0c:35:a7:30:48:10:45:e1:96:33:06:7d:1f:5c:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:CB:A7:26:DF:D4:9A:60:16:BA:67:80:95:69:24:69:C7:48:8D
X509v3 Authority Key Identifier:
keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3232203d3e20323636343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.252.0/22
Signature Algorithm: sha256WithRSAEncryption
92:9b:7a:08:12:fc:7e:3a:b4:d9:4a:b3:5c:e7:fd:39:3f:04:
f4:93:ff:87:14:07:54:f5:27:4a:50:37:0f:f9:da:07:9b:f0:
2a:0d:78:4b:71:24:54:dd:3c:15:81:33:cb:66:9d:b2:0e:3c:
47:94:27:ce:f7:a3:bd:65:c5:d2:55:b9:64:45:ad:92:c4:fe:
f2:c0:98:9e:26:18:92:45:35:36:51:dc:2d:8d:f4:f3:88:aa:
08:fc:c9:e3:be:ea:f9:81:36:f3:d4:f3:cc:d2:b3:9e:eb:5e:
2f:4a:e0:58:96:79:fd:8b:c3:40:17:43:9e:32:af:1a:52:84:
30:ac:f0:3d:d0:4e:a5:e9:d0:8c:1e:f3:c3:10:5b:e6:93:a6:
74:09:06:b4:d8:f4:ab:1e:c7:94:fa:65:11:76:8d:20:d1:2e:
2e:ce:73:3d:fa:9b:13:37:c6:d0:2c:98:09:83:cd:3d:3e:a8:
b5:f8:3a:7b:f6:0b:a1:1c:1b:b9:ab:ef:1a:a7:2a:9c:40:76:
d6:a2:f0:8e:97:e7:0e:1d:42:f4:0c:de:f2:76:3f:f0:5e:27:
f2:a2:8d:fa:6e:3a:d7:69:6f:22:20:01:69:40:60:d4:09:1a:
cd:0e:0a:2e:7f:40:57:49:a4:3a:90:63:e5:7a:81:09:14:c0:
9a:9c:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 23:46:42 2024 by rpki-client on console-fra.rpki-client.org