Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa
File: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier: gF96xG1KwQ0WW9r6ku/u7vQ0+JamzoR5ZNQ9IPKs05o=
Subject key identifier: DA:2C:D5:3C:E2:21:3B:3C:2E:19:71:24:7A:3B:21:A9:7E:51:F2:98
Certificate issuer: /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial: 4F8552DCF87852651EBEE82C8A599155109332B5
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa
Signing time: Wed 31 Jan 2024 18:00:00 +0000
ROA not before: Wed 31 Jan 2024 17:55:00 +0000
ROA not after: Wed 29 Jan 2025 18:00:00 +0000
asID: 262755
IP address blocks: 170.238.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:85:52:dc:f8:78:52:65:1e:be:e8:2c:8a:59:91:55:10:93:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Validity
Not Before: Jan 31 17:55:00 2024 GMT
Not After : Jan 29 18:00:00 2025 GMT
Subject: CN=DA2CD53CE2213B3C2E1971247A3B21A97E51F298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:3f:62:19:49:c9:0a:87:3f:4f:35:70:4a:
9b:9b:06:8e:1d:8c:b1:6b:fe:26:35:ba:a4:85:7f:
c5:41:9c:b5:d8:8c:63:c1:1f:10:5d:50:72:b1:1b:
2e:09:4f:62:8e:2f:b8:c6:62:40:66:04:c0:04:e0:
56:58:96:fe:5b:9c:8d:c2:98:01:ec:d4:01:97:1e:
2b:fc:35:98:74:9d:e1:74:d5:2a:b6:b3:21:76:6c:
52:3c:70:16:45:bc:9b:b7:9c:13:f0:f4:ec:cb:99:
6c:65:32:c8:ed:a0:d9:91:58:2e:50:2e:11:aa:04:
fc:cd:9f:b5:ab:f0:42:4a:68:0a:62:b2:fe:53:a4:
21:83:78:94:73:e9:13:47:ac:77:f9:a5:b8:82:bf:
d0:cb:5f:42:ea:22:06:5a:82:15:3e:c9:1e:2b:72:
c1:c6:7d:4e:14:be:bf:64:eb:27:f2:cd:2c:ff:9f:
96:81:ed:4a:46:9e:54:c7:eb:4f:2d:e2:dc:24:43:
19:f0:d4:88:9e:cc:37:0f:5e:9e:4c:84:c2:89:6b:
f2:a7:43:90:4e:56:bd:18:2d:2d:05:3d:f1:9a:e7:
72:5c:f5:8f:43:03:f3:e6:17:3c:a7:e2:6d:6c:d6:
71:3e:e8:e6:42:43:04:41:de:c3:9b:46:97:1d:98:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:D5:3C:E2:21:3B:3C:2E:19:71:24:7A:3B:21:A9:7E:51:F2:98
X509v3 Authority Key Identifier:
keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:66:52:29:a3:30:63:8c:f0:fa:3c:29:69:28:a8:90:8d:b4:
d4:b3:9d:26:af:c6:54:2d:08:53:36:1f:c4:6d:5a:9e:3b:1e:
5e:40:68:5e:c2:71:ad:b7:a2:e4:3a:a8:ce:5b:01:3c:3c:1e:
94:93:b3:e0:af:2b:f1:af:1a:76:80:9b:5e:da:04:a8:42:f9:
6b:3a:88:96:ba:ec:83:e2:76:77:05:ae:d1:b1:f7:59:a3:bd:
93:57:75:af:b3:d6:13:80:b4:a8:fd:c7:63:6e:73:a7:a7:ed:
1f:ac:3e:04:cd:cf:dd:c2:1b:90:05:22:e7:bf:b7:6d:86:51:
0b:93:12:96:f7:18:b5:13:ca:2d:bd:c9:81:8b:94:0e:34:c6:
a5:43:bb:47:f9:c8:d5:f5:ac:cb:45:ac:3c:69:dd:44:74:c4:
35:83:f5:41:d0:22:c5:dd:da:70:5e:e0:96:f2:87:0d:c0:e5:
8c:f8:db:96:57:11:a5:ee:23:cf:d5:67:93:68:60:df:2b:f2:
54:c8:8a:6e:7e:3c:28:62:4d:84:b6:a7:3d:04:b8:1d:01:9f:
5a:21:89:0b:68:08:a4:93:80:c9:1c:67:77:15:0f:93:f9:3f:
f0:3c:81:5c:82:7d:0a:70:fe:29:71:75:71:01:61:a4:bd:69:
44:63:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org