Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa
File: 3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier: /b/d3ptvtn4xrPseuSDDSC7Hs1rF4me5Ctz4/Jus+/I=
Subject key identifier: CB:82:20:D9:48:6E:44:0D:5E:DB:6C:23:E2:81:81:DF:F8:B4:6B:A4
Certificate issuer: /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial: 2D78D56431DFCD93F6977DE4A42F38AE5E0155B1
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa
Signing time: Tue 09 May 2023 14:22:01 +0000
ROA not before: Tue 09 May 2023 14:17:01 +0000
ROA not after: Tue 07 May 2024 14:22:01 +0000
asID: 263641
IP address blocks: 168.205.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:78:d5:64:31:df:cd:93:f6:97:7d:e4:a4:2f:38:ae:5e:01:55:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Validity
Not Before: May 9 14:17:01 2023 GMT
Not After : May 7 14:22:01 2024 GMT
Subject: CN=CB8220D9486E440D5EDB6C23E28181DFF8B46BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:4d:db:e5:0a:22:76:95:2f:30:92:33:29:
9b:37:8d:81:cf:07:d0:47:db:3f:30:fb:c9:82:ac:
18:12:3e:01:8d:cd:b7:85:e8:6d:83:96:9d:ff:ab:
33:f7:cb:7c:7a:ff:56:41:8a:53:a7:6b:2d:25:2c:
44:99:ea:7b:7f:a6:9d:bd:9f:86:c0:0f:19:5a:c3:
71:ff:00:20:1e:d6:a7:be:57:2a:20:01:fc:aa:c7:
3e:74:7c:47:9f:88:0a:02:7b:40:f3:b5:49:af:e0:
93:ea:bf:8f:97:42:36:9f:b9:f6:1d:2a:2a:b1:4e:
81:9c:77:3c:32:17:36:fb:22:ba:c6:b6:f8:d1:36:
3d:91:62:4c:ac:b4:f3:da:37:93:eb:a2:be:c5:e2:
aa:42:a9:f6:6a:ab:95:39:36:93:46:be:cd:10:26:
12:c0:ed:38:d3:1b:9c:ea:e1:a8:a9:fd:7d:5b:e2:
85:0f:2e:19:df:d5:a7:b2:10:3d:95:3a:ae:08:5b:
fc:36:da:ee:40:23:ba:b5:75:1c:09:55:83:8f:d6:
57:f3:80:6c:9b:8a:fc:2b:13:7d:19:87:cc:d7:21:
09:d1:85:c3:79:20:10:06:87:f0:74:b8:06:27:13:
ba:90:13:9c:4d:ef:e6:40:d0:8a:60:e1:e1:d2:f4:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:20:D9:48:6E:44:0D:5E:DB:6C:23:E2:81:81:DF:F8:B4:6B:A4
X509v3 Authority Key Identifier:
keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36302e302f32332d3233203d3e20323633363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.60.0/23
Signature Algorithm: sha256WithRSAEncryption
77:ef:af:01:76:9a:1f:1e:23:c2:f4:32:47:1b:cb:fd:21:3d:
f0:dc:43:1f:4b:aa:2f:60:4e:79:f7:a6:49:a5:48:17:54:a8:
a1:f1:70:74:28:95:bc:12:e5:d7:3a:1d:0e:25:49:94:a7:0b:
93:fc:92:21:9d:ef:78:50:6b:54:88:fa:7f:54:ac:9d:a1:01:
3e:53:93:76:a7:39:8b:78:4e:36:f5:28:f8:f7:bb:ed:e2:4e:
89:ea:78:52:0d:ee:c7:f9:0b:d4:26:68:76:a8:66:f3:e4:be:
74:2b:37:b8:4b:b6:e5:5f:5b:c3:ae:fe:69:05:9f:b5:f7:a2:
9a:bc:1c:22:8d:32:61:b2:3b:fc:61:3f:ab:ba:40:bd:e2:bf:
5d:de:d9:7c:5f:48:d4:7c:51:ee:7a:9f:d3:97:cd:86:41:5b:
39:a7:5f:5d:df:89:9c:c9:19:59:b2:54:2d:2e:08:07:30:1a:
6a:34:56:43:b2:09:63:f9:a0:3b:69:ba:9c:f4:74:e6:9b:d5:
e0:f2:37:2f:07:7a:aa:aa:2f:38:d9:97:3a:cb:5d:8c:8e:c7:
99:d6:5a:09:dd:69:90:a4:a4:a9:6d:da:ba:ac:78:15:95:49:
cd:84:1a:a8:d3:71:35:59:8d:fa:4f:42:9f:8a:6a:4a:9a:53:
e3:29:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:13 2025 by rpki-client