Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa
File: 3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa (raw, json)
Hash identifier: YPaNnGE3hfd6RskMNmtMn4+dMaXTYtetAUPIbFA4Z0Y=
Subject key identifier: 8E:0A:33:35:36:96:17:AD:E1:A5:76:9A:20:DF:C8:83:10:6F:B8:FC
Certificate issuer: /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial: 21C76AE2956565ACAEC404910B2D02ADC7762D4D
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa
Signing time: Tue 20 Feb 2024 20:44:06 +0000
ROA not before: Tue 20 Feb 2024 20:39:06 +0000
ROA not after: Tue 18 Feb 2025 20:44:06 +0000
asID: 263860
IP address blocks: 138.186.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c7:6a:e2:95:65:65:ac:ae:c4:04:91:0b:2d:02:ad:c7:76:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Validity
Not Before: Feb 20 20:39:06 2024 GMT
Not After : Feb 18 20:44:06 2025 GMT
Subject: CN=8E0A3335369617ADE1A5769A20DFC883106FB8FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:c3:7e:1b:b9:76:13:2e:f0:43:4e:d5:c6:
25:e7:c2:fa:34:6c:25:db:0b:7b:4d:a6:7b:59:7a:
d4:9d:46:d5:aa:40:90:74:24:b1:92:7b:e1:2d:65:
c6:c2:b7:20:c7:b9:0b:8f:a3:87:8c:b1:b6:9d:ea:
6a:8b:10:9e:bb:af:45:ec:c5:a1:e4:48:ad:a3:a9:
b7:6d:b7:ae:9b:c2:1a:c2:51:2d:ad:25:c8:04:6e:
05:b2:86:99:1c:1d:37:89:32:02:c2:66:1f:5b:8a:
29:13:8d:48:88:94:15:3e:68:86:63:2c:7b:e4:f4:
cc:39:c2:fa:2f:0b:b4:35:f8:8a:f9:e4:37:39:77:
e2:c8:94:7d:b9:51:f6:47:83:4e:ac:78:30:a4:7b:
7e:f3:f1:ed:a3:8c:ed:79:5c:d5:8d:b2:0c:9f:66:
a3:20:45:d5:e3:86:e9:bd:68:a6:e2:1e:3e:fe:d2:
4e:b0:72:68:b3:5d:9e:06:f5:ce:9f:0f:af:60:fa:
e9:bb:65:68:b4:6c:3f:ae:c5:57:60:d6:c0:bf:64:
2d:42:52:f1:da:18:94:80:98:eb:9e:2b:9c:ad:37:
68:74:e1:0e:5f:52:01:bd:26:81:89:4b:a3:34:05:
69:9a:20:6e:6f:c7:76:b0:6e:99:29:c4:da:67:52:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:33:35:36:96:17:AD:E1:A5:76:9A:20:DF:C8:83:10:6F:B8:FC
X509v3 Authority Key Identifier:
keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.128.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d5:3c:d1:de:fe:5a:b6:9d:5c:48:bf:4a:f4:15:d5:d4:53:
fa:54:b1:21:12:b8:c0:a5:fe:05:bb:6b:db:cc:b1:de:7a:61:
e4:94:42:f0:dd:67:7d:7d:ac:21:e0:fb:0f:01:96:d2:90:8f:
74:34:0e:a4:57:ba:85:37:f9:98:76:45:b6:c6:06:5b:79:fe:
1d:f2:84:9e:c9:f3:36:47:7a:0f:54:c0:29:b8:95:a4:23:77:
b6:ae:c4:4d:e8:40:c3:93:4c:22:5d:2d:3b:68:30:52:55:d1:
c6:af:a7:64:73:1e:94:19:1e:89:a8:27:d6:50:ca:c9:0e:0a:
43:81:f3:d4:09:04:39:b4:2f:4e:3b:45:06:4a:5c:84:59:91:
7d:0c:c4:d4:17:f6:dd:0e:08:c7:75:93:a8:5c:3b:33:de:73:
b0:aa:41:d1:df:58:3f:fe:07:4b:cd:bb:3f:65:b1:2c:e9:f2:
be:68:0a:59:e4:94:88:33:5f:7d:56:c0:6d:b5:17:c1:0d:12:
03:1b:97:d0:76:16:e8:57:d6:b3:a8:7a:41:a7:b7:24:bb:16:
09:d7:60:b9:9a:90:7b:00:a7:b5:2b:2e:12:77:9b:9e:d6:93:
6d:0e:c6:37:9f:07:7c:d5:af:64:97:20:7f:39:da:d0:ab:d1:
bf:aa:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org