Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3234203d3e20323633383630.roa
File: 3136382e3232372e3136302e302f32322d3234203d3e20323633383630.roa (raw, json)
Hash identifier: 0btK3zs90uC1k60PZsyHleO5jUkNRiojTHbW9fonnbk=
Subject key identifier: FA:AC:7D:65:51:E2:B1:D7:D9:49:AC:49:6B:3C:DD:54:4D:80:6E:0B
Certificate issuer: /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial: 3303DA68736C684BCD328D8080993CF76EA1C5EE
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3234203d3e20323633383630.roa
Signing time: Tue 21 Mar 2023 19:52:06 +0000
ROA not before: Tue 21 Mar 2023 19:47:06 +0000
ROA not after: Tue 19 Mar 2024 19:52:06 +0000
asID: 263860
IP address blocks: 168.227.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:da:68:73:6c:68:4b:cd:32:8d:80:80:99:3c:f7:6e:a1:c5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Validity
Not Before: Mar 21 19:47:06 2023 GMT
Not After : Mar 19 19:52:06 2024 GMT
Subject: CN=FAAC7D6551E2B1D7D949AC496B3CDD544D806E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:14:b6:38:ab:fd:9d:f3:67:8f:c3:df:a0:
54:1a:8d:c5:81:8f:75:0b:19:98:72:b9:8b:8d:84:
5b:8c:9e:18:7f:26:7b:6f:61:9d:5c:12:5e:e0:9f:
44:72:5f:eb:d8:25:ea:0e:e1:44:02:53:9d:6d:38:
06:fb:48:fe:a3:88:2f:6f:74:7b:68:44:c6:50:69:
a2:d6:71:24:52:87:b5:2f:09:e5:f5:1f:ce:b1:ad:
57:56:1c:e9:ef:1f:b1:f2:90:59:d0:8f:ba:d4:02:
82:af:90:da:40:bb:0e:b1:7e:25:63:8c:9c:a1:ab:
b6:18:fd:e4:51:bf:2a:69:66:dd:ac:ec:ba:23:5a:
70:ab:2d:c0:e1:70:34:29:18:52:13:d8:71:f8:02:
cc:e9:48:e8:8a:af:fd:c6:d3:27:3b:5c:c7:07:9e:
33:dd:75:0a:c0:bb:56:d4:ad:d0:28:82:af:3d:b9:
d6:df:d6:8e:26:e7:26:e9:a5:73:b4:c2:b2:b1:27:
f5:af:b0:33:76:ff:2d:50:74:8e:56:a1:e8:45:76:
d3:59:3c:ff:d1:69:24:27:92:db:b7:c3:87:3b:f1:
2b:6f:0b:bb:c4:90:e5:43:bd:18:d2:ff:46:a0:dc:
24:79:75:82:e4:ad:7d:a9:c7:63:af:08:d7:7e:c8:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:7D:65:51:E2:B1:D7:D9:49:AC:49:6B:3C:DD:54:4D:80:6E:0B
X509v3 Authority Key Identifier:
keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3234203d3e20323633383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:d4:54:f5:2e:fa:01:75:ed:06:03:f2:71:95:b9:8b:41:2a:
ef:d1:6c:fb:90:34:0b:29:51:6e:ea:ad:3d:9e:93:65:4b:7c:
8c:96:76:a6:77:91:a9:05:e1:88:39:e0:98:46:fe:29:d8:bf:
29:b1:1e:ab:35:da:9c:ad:a6:67:ea:7a:cd:e9:5b:a0:73:c7:
52:ee:d7:91:d5:3a:af:79:68:a8:3b:22:79:80:82:76:b5:ca:
01:bd:d9:dc:0e:0a:a7:22:57:e0:97:f5:ae:0f:c6:e7:cf:f8:
ba:e5:a6:9f:51:8c:06:46:44:1a:69:3d:96:1f:cb:63:a4:21:
c1:22:4b:87:27:c8:e1:c3:24:22:30:45:5d:b6:bd:e6:b2:db:
72:e1:6c:74:bc:c0:cc:10:c3:3a:24:bc:66:a3:69:7a:e6:db:
45:af:7c:fa:f8:01:9e:b4:f4:4b:8a:09:0c:a7:1b:17:fb:2c:
f1:57:a8:a2:3c:2e:9f:67:ee:93:9c:6f:71:84:06:aa:d2:8f:
af:5d:94:c4:bc:db:7a:7a:ef:3e:bd:d6:da:76:cd:d8:29:42:
df:5d:51:fd:96:31:81:de:c4:22:7c:6c:40:37:00:99:b7:77:
9c:71:03:fa:87:c0:68:2e:87:55:2a:b7:2c:bf:91:c2:c4:36:
c0:24:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org