Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa
File: 3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa (raw, json)
Hash identifier: dOrxZSCQrfkNziy1SIT/DZxY0BnqGqZBuliFFViGAC8=
Subject key identifier: A8:DF:4C:1D:97:93:0B:B1:43:38:86:D6:CB:4E:B1:10:1D:1C:3E:8A
Certificate issuer: /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial: 3E307928B6975F96E5C78CED4A2273AC5DB66BA5
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa
Signing time: Tue 20 Feb 2024 13:52:32 +0000
ROA not before: Tue 20 Feb 2024 13:47:32 +0000
ROA not after: Tue 18 Feb 2025 13:52:32 +0000
asID: 263860
IP address blocks: 168.227.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:30:79:28:b6:97:5f:96:e5:c7:8c:ed:4a:22:73:ac:5d:b6:6b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Validity
Not Before: Feb 20 13:47:32 2024 GMT
Not After : Feb 18 13:52:32 2025 GMT
Subject: CN=A8DF4C1D97930BB1433886D6CB4EB1101D1C3E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:e1:a3:41:dd:e8:d8:b9:a4:2a:f7:b7:c4:
ae:d6:3e:54:d3:a8:5a:b3:99:16:d9:89:da:cc:63:
00:59:6b:00:0d:66:8a:e0:b6:97:95:2a:cb:bf:e7:
ba:5b:d0:e5:33:a3:86:43:31:b1:35:a0:9c:64:08:
a5:12:ea:58:63:fc:d2:94:af:a9:e9:c6:67:31:49:
74:14:d8:c3:c8:a4:f6:c3:59:c1:5b:53:a6:88:3d:
12:45:70:e5:46:39:fc:59:97:00:1d:28:fa:73:23:
c1:5a:c3:6a:91:1b:57:b6:de:88:db:5c:0d:dc:ce:
97:c1:65:da:a7:2d:d5:11:f6:3b:36:4f:72:8a:ef:
e7:e7:4b:72:71:3a:3d:7f:67:9f:d8:4d:b9:39:27:
34:cd:8a:ed:ac:63:ec:e4:d2:9a:a3:d3:d2:49:2b:
25:7f:eb:15:bd:e9:75:07:91:0e:c2:c2:0d:9c:ac:
4f:13:c8:ce:e4:fa:5f:c2:11:b5:e3:ef:55:11:9c:
86:13:68:09:71:b6:a8:a2:35:c3:b6:68:51:76:1a:
8e:e3:7d:2f:99:0f:77:79:53:d1:8b:76:0d:35:47:
a5:24:39:63:76:7d:19:0a:e8:42:10:a7:3f:ba:49:
8e:60:b8:71:b4:06:fe:16:05:8b:21:31:65:ec:a4:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:4C:1D:97:93:0B:B1:43:38:86:D6:CB:4E:B1:10:1D:1C:3E:8A
X509v3 Authority Key Identifier:
keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b7:95:5e:ab:3d:54:df:96:60:f6:2b:31:4d:08:56:7f:0e:
09:83:af:b1:d9:aa:8f:df:89:c6:bf:88:7b:a5:ac:d7:46:24:
71:1d:b9:5a:79:53:9c:12:f3:df:6a:af:c2:bf:d7:42:d6:03:
41:3d:07:32:e1:60:59:84:a5:d2:f4:3b:00:12:bd:30:1d:5f:
09:bd:90:9e:d1:f4:36:f6:d8:64:ea:e5:e7:0c:b5:d5:08:48:
f6:57:26:a4:e3:0d:99:1e:b9:2d:3d:f4:61:a7:94:ec:1e:9a:
44:a2:84:e8:9a:4f:62:9c:ef:e4:ae:bb:96:3c:c6:31:b3:53:
0f:c5:3f:0e:11:51:e1:26:b9:6c:05:91:3a:f3:73:f2:36:64:
c3:6d:eb:73:02:5e:70:5f:f2:23:06:ca:1c:19:6c:95:3b:8b:
0f:53:d7:33:f7:f1:24:a1:ff:de:65:68:fd:e8:2c:6f:83:67:
d5:30:42:d5:42:75:07:05:fa:36:ea:c4:4f:03:27:a1:94:9b:
1d:f9:f8:97:a6:ed:6f:af:15:be:dd:df:12:27:9b:ff:54:21:
e8:76:04:82:01:f6:4a:46:4d:13:2b:ac:46:85:e3:0b:50:29:
3a:ac:ba:ea:06:91:32:39:54:de:c8:bf:2d:55:76:52:59:7f:
75:f3:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org