Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38302e302f32322d3232203d3e20323634353731.roa
File: 3133382e33362e38302e302f32322d3232203d3e20323634353731.roa (raw, json)
Hash identifier: NqkP7QinHJSCkPIfjyVDyJnW+RFsVSMkmtz3/5qEE/U=
Subject key identifier: 8E:B1:C0:C1:A2:0A:2D:B1:1F:AA:91:3D:D2:A4:DF:EC:A0:13:45:B0
Certificate issuer: /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial: 7D378B9A08B34900BB46AFD59992A522E5E69F19
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38302e302f32322d3232203d3e20323634353731.roa
Signing time: Mon 18 Sep 2023 14:00:00 +0000
ROA not before: Mon 18 Sep 2023 13:55:00 +0000
ROA not after: Mon 16 Sep 2024 14:00:00 +0000
asID: 264571
IP address blocks: 138.36.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:37:8b:9a:08:b3:49:00:bb:46:af:d5:99:92:a5:22:e5:e6:9f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Validity
Not Before: Sep 18 13:55:00 2023 GMT
Not After : Sep 16 14:00:00 2024 GMT
Subject: CN=8EB1C0C1A20A2DB11FAA913DD2A4DFECA01345B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:a3:41:df:2e:e7:64:f9:dc:46:0e:48:a8:
60:81:c0:15:5f:6e:80:ae:cb:49:73:dc:39:3e:98:
43:21:d1:e6:18:78:68:af:55:fc:fa:6d:a8:1e:5a:
2e:43:78:b3:a9:46:af:73:53:aa:e8:c4:8b:8d:80:
92:91:cc:8c:a4:30:b7:6b:c1:9c:5f:c2:01:f5:14:
88:7a:d4:56:21:cc:11:e4:c2:cd:fe:0c:d8:c6:2e:
41:39:92:43:39:39:a9:a9:be:97:bd:98:96:31:55:
66:55:10:ca:63:4d:41:fe:eb:10:4a:c1:66:18:68:
2d:86:f5:fa:19:dd:f2:27:d5:ff:63:bd:e1:1a:22:
4b:47:91:d2:a4:50:34:21:dd:81:f2:51:e3:39:c3:
7f:78:33:ab:b5:64:4b:4f:a0:e1:5b:14:64:f5:1b:
1a:3a:40:51:98:0d:60:e8:0b:56:53:6c:c6:95:2b:
50:c3:39:ad:23:16:50:45:d2:d5:d0:bc:e9:84:8e:
d8:0e:0f:a7:94:98:37:5a:9c:2a:5e:c1:60:69:7b:
f1:40:72:25:c9:56:34:4a:ed:0d:be:72:ec:ee:54:
4e:92:c6:c5:65:96:27:bc:0f:15:45:bc:9b:cf:01:
ed:19:14:d8:83:9c:08:94:08:e2:60:17:55:e7:ef:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:C0:C1:A2:0A:2D:B1:1F:AA:91:3D:D2:A4:DF:EC:A0:13:45:B0
X509v3 Authority Key Identifier:
keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38302e302f32322d3232203d3e20323634353731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:78:40:cd:f7:46:f2:9f:94:5c:80:57:dd:cb:4a:dd:17:52:
c9:dd:2c:d3:e4:49:b9:47:dc:ce:0b:03:7e:51:37:9b:85:a2:
10:4d:24:5c:82:82:21:c1:b3:19:7e:fd:2d:63:29:10:2e:fc:
3e:a2:de:d8:fc:2c:8f:91:dd:91:82:66:7f:83:64:d3:21:bf:
89:54:31:4d:7f:13:ab:e0:9f:90:8c:05:26:e3:5c:64:a4:67:
5e:fe:51:6d:fb:d0:cc:cb:62:c9:9f:c0:49:c2:0b:77:cf:45:
6b:99:48:42:ce:af:af:7d:46:6d:b2:46:09:b0:a2:92:c1:d8:
2e:58:10:cc:12:96:1d:11:1f:89:26:a9:b9:6e:db:03:9f:13:
db:1f:1c:df:f5:1a:bf:90:bf:a0:9f:c9:f2:e3:a1:9a:22:99:
ee:e0:56:02:7c:8e:56:59:da:b1:e2:ce:36:09:cb:9b:6d:68:
53:b8:84:9c:ec:7f:a9:32:d9:3a:c1:c1:6b:92:2e:a4:17:d0:
ae:6f:f2:47:61:05:fb:fb:a8:d4:01:61:1b:63:2b:06:e1:95:
88:34:0a:4c:6a:84:b0:3e:88:94:ec:ae:8f:65:20:d4:2d:f4:
3d:a9:27:96:af:a5:17:ec:5f:7c:c2:60:91:71:84:9b:dc:5f:
e0:5b:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org