Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3136382e302e3234382e302f32322d3234203d3e20323632373535.roa
File: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier: z6BTS6aRo/hpUAHl1wkz6oPNJ3tPAtj0dmu5i08y4+0=
Subject key identifier: DF:00:05:F5:E6:87:59:A0:42:AC:D0:9F:0B:9C:C6:54:70:02:75:3D
Certificate issuer: /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial: 6182C7ACDF35F03C3BED5E49E070CA4E6882FCB0
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3136382e302e3234382e302f32322d3234203d3e20323632373535.roa
Signing time: Wed 31 Jan 2024 18:00:00 +0000
ROA not before: Wed 31 Jan 2024 17:55:00 +0000
ROA not after: Wed 29 Jan 2025 18:00:00 +0000
asID: 262755
IP address blocks: 168.0.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:c7:ac:df:35:f0:3c:3b:ed:5e:49:e0:70:ca:4e:68:82:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Validity
Not Before: Jan 31 17:55:00 2024 GMT
Not After : Jan 29 18:00:00 2025 GMT
Subject: CN=DF0005F5E68759A042ACD09F0B9CC6547002753D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:1b:27:5d:97:f4:5a:c1:58:8d:28:9f:0b:
57:fd:76:ad:c2:44:ef:ff:f6:86:d9:48:88:c8:19:
65:f8:03:b2:7c:f9:b8:96:e9:ed:f3:30:9f:36:ce:
fb:d3:11:f5:4e:50:47:3c:76:cc:96:17:7b:24:cf:
36:db:cc:4a:76:c4:4d:5e:d3:05:e7:99:72:32:d8:
40:f8:77:bb:12:fd:a4:9a:01:ff:58:5e:f5:d0:b7:
fa:81:cd:10:2b:47:49:56:dc:f4:ae:c3:ee:d5:2d:
a3:cf:11:f0:a1:21:be:5b:ec:e0:d3:85:0e:45:6f:
26:2f:20:dc:e7:13:6e:0e:ef:25:68:e5:27:71:86:
4b:37:61:4a:de:ba:9a:c1:3f:3e:03:75:20:c4:e7:
cc:b6:81:ae:65:13:2a:2a:8a:1f:29:a8:af:a6:ec:
67:47:7b:f0:c1:d4:a1:11:3f:be:a5:bc:34:44:76:
ec:a8:d8:5a:05:6e:d5:26:1c:98:3d:0d:62:c0:cb:
63:67:10:75:0a:ec:0c:94:41:57:44:b5:ce:20:ab:
bc:96:06:ac:a9:55:73:50:1b:35:8a:15:f2:65:84:
fa:19:d0:ff:aa:17:57:de:0f:41:c0:ca:94:46:18:
53:f3:34:92:32:4d:a4:08:2b:3d:20:a2:cd:93:3b:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:05:F5:E6:87:59:A0:42:AC:D0:9F:0B:9C:C6:54:70:02:75:3D
X509v3 Authority Key Identifier:
keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3136382e302e3234382e302f32322d3234203d3e20323632373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.248.0/22
Signature Algorithm: sha256WithRSAEncryption
97:2a:53:31:55:47:e4:59:1e:27:12:10:d4:c4:17:c0:25:2b:
dd:32:79:d7:0a:00:50:a2:b4:6c:45:9d:ca:ae:b6:70:1e:d2:
bd:c4:2b:cb:68:fd:42:8d:37:24:aa:38:05:f1:e1:d6:75:c9:
3e:70:3b:90:97:f2:5d:1f:dc:1e:ed:39:f7:1d:46:5b:34:12:
ed:f0:c8:82:03:f7:68:ef:65:38:a0:21:ab:06:6a:e8:c1:18:
92:bc:62:b7:2d:e7:73:3f:be:df:bb:c5:09:4c:0c:ef:4f:7c:
a7:41:e7:bc:b0:12:9e:38:43:cc:1d:2f:7f:1c:1b:4d:64:a7:
18:5d:bd:c8:96:1a:2c:0b:c3:2b:ad:55:e4:95:0e:17:ab:e3:
7a:ca:98:3e:0e:ae:05:83:00:75:cb:37:2b:50:ec:6a:a1:cb:
31:74:71:56:f0:b2:0b:aa:de:f9:a1:23:90:49:03:54:ac:53:
14:37:08:88:c4:e4:73:cd:41:b0:cb:bf:31:c3:75:7d:a7:26:
20:f6:a6:f1:76:fc:fd:5a:18:d9:0d:0e:01:99:a6:3b:57:48:
af:8d:bb:1b:ef:ef:1d:dc:37:4d:4b:27:16:1b:c9:fa:f3:e5:
d4:12:df:f0:20:b2:75:ef:0e:99:e8:59:00:86:b0:25:6c:57:
71:ec:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org