Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32322d3232203d3e20323634343938.roa
File: 3133312e3235352e3231322e302f32322d3232203d3e20323634343938.roa (raw, json)
Hash identifier: QUbkG1iy0ZrXq5eX4081N/+e1J/LcYioUa9IyPsvkdc=
Subject key identifier: D5:9A:09:28:E6:A6:50:16:DD:2C:F6:64:25:80:E3:C4:B9:F9:6F:03
Certificate issuer: /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial: 5AE543F32E1EEE312AE0610F84E62A908B13C25B
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32322d3232203d3e20323634343938.roa
Signing time: Thu 20 Apr 2023 19:16:09 +0000
ROA not before: Thu 20 Apr 2023 19:11:09 +0000
ROA not after: Thu 18 Apr 2024 19:16:09 +0000
asID: 264498
IP address blocks: 131.255.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e5:43:f3:2e:1e:ee:31:2a:e0:61:0f:84:e6:2a:90:8b:13:c2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Validity
Not Before: Apr 20 19:11:09 2023 GMT
Not After : Apr 18 19:16:09 2024 GMT
Subject: CN=D59A0928E6A65016DD2CF6642580E3C4B9F96F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:a3:96:77:ad:cf:f6:7f:4e:e9:e6:50:72:
d3:4a:f5:fc:69:a9:83:3f:03:e4:a0:3b:c2:31:a9:
4a:88:42:e6:78:00:43:46:77:c1:cc:7b:7e:4a:31:
8f:9f:68:83:44:2d:33:fe:f1:f4:80:0e:ed:c2:66:
7e:7c:8b:91:0e:f3:48:81:1d:72:cb:f3:54:3a:da:
32:a2:b4:94:cd:a5:9b:9b:24:dd:41:d7:a9:c0:f7:
8e:41:94:2a:8a:da:f2:42:d4:f2:93:53:ae:37:9d:
f9:ff:05:b2:9e:15:32:ab:4d:12:b4:9f:f2:34:f6:
65:41:87:5c:46:51:65:17:0c:ba:3c:ef:e5:60:17:
d4:4e:de:70:db:68:b1:ae:ba:22:b9:28:7e:d9:96:
f3:51:20:fa:6b:ec:b1:4a:f0:d8:0f:6b:ad:21:23:
ea:63:e9:58:ac:7d:f2:02:7c:3d:70:79:69:f0:46:
57:c6:c5:3a:75:b0:d8:31:44:7c:6d:06:26:bb:b9:
43:28:d9:9e:df:d2:b5:51:4a:44:3e:c2:8a:18:bf:
ea:d1:d5:62:78:2d:8d:81:6e:13:bc:82:fc:a0:d2:
d4:2c:2d:d9:bb:87:00:80:df:99:1a:fd:ae:3f:5d:
20:de:69:ae:c5:64:19:de:35:dc:9e:70:c7:8d:3d:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:09:28:E6:A6:50:16:DD:2C:F6:64:25:80:E3:C4:B9:F9:6F:03
X509v3 Authority Key Identifier:
keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32322d3232203d3e20323634343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:a7:73:98:c7:63:0d:c6:2c:08:3e:81:bf:b3:a1:e7:54:d2:
4c:1b:d5:38:7e:78:1d:b0:53:e5:0a:49:eb:93:d6:4c:ca:c0:
3b:c5:78:8b:b3:cf:33:c3:93:2b:32:7e:fa:36:ff:e7:a0:db:
40:3d:61:1a:b2:e2:f6:53:8d:fc:38:a3:e1:8a:aa:f2:3e:e7:
a0:b2:ee:7c:e3:5e:b8:7b:cb:8c:dc:c4:ac:96:28:03:aa:11:
8b:11:c9:10:9f:6b:3f:4b:73:c4:70:56:06:c7:9c:5d:38:f4:
ab:f9:88:67:c9:95:a3:00:7d:50:5a:77:cb:08:31:85:5e:cf:
d2:06:26:c1:b2:aa:b3:96:1e:16:9a:bf:dd:53:1f:ba:fa:3b:
ee:77:f0:25:04:30:5f:01:5d:43:94:4b:66:11:50:a0:b9:74:
6f:dd:26:7b:f3:e5:45:fe:26:38:5b:46:3e:0c:8b:27:a7:14:
52:57:73:a6:41:66:7a:3b:d5:d7:af:cc:bd:33:1d:1c:67:be:
a2:c9:d6:c8:84:b3:4c:43:55:f6:59:6f:24:88:59:50:c9:b9:
d1:5c:a3:8d:5e:1c:6d:9d:b7:de:c4:31:63:90:ec:7f:1e:c1:
48:06:8f:f4:aa:ec:d8:c2:66:29:2a:a6:1b:4e:8e:8d:f4:9f:
30:7b:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org