Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS61946.roa
File: AS61946.roa (raw, json)
Hash identifier: mfCV2vk0baSyvLGcEi8rer8HZCoz9tgnX3zsv333UxM=
Subject key identifier: 80:99:EE:CA:5E:8D:E8:05:DE:82:2A:8F:8A:A1:53:EE:26:64:8D:8D
Certificate issuer: /CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Certificate serial: 213071A440D2471316CDFCD95ABD12EDA16B5F11
Authority key identifier: 3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS61946.roa
Signing time: Tue 02 Apr 2024 23:13:31 +0000
ROA not before: Tue 02 Apr 2024 23:08:31 +0000
ROA not after: Tue 01 Apr 2025 23:13:31 +0000
asID: 61946
IP address blocks: 201.139.184.0/21 maxlen: 21
201.139.184.0/23 maxlen: 23
201.139.186.0/23 maxlen: 23
201.139.188.0/23 maxlen: 23
201.139.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:30:71:a4:40:d2:47:13:16:cd:fc:d9:5a:bd:12:ed:a1:6b:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Validity
Not Before: Apr 2 23:08:31 2024 GMT
Not After : Apr 1 23:13:31 2025 GMT
Subject: CN=8099EECA5E8DE805DE822A8F8AA153EE26648D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:ee:27:73:ca:50:53:07:8c:bf:02:de:fa:
7d:22:d6:a8:2a:7e:26:c2:85:ed:e1:0b:83:cd:6f:
c2:d4:e7:33:4c:d3:45:2d:0a:4f:95:1f:3f:39:3b:
08:e8:f0:44:10:94:25:bb:ee:ba:79:47:d0:e7:10:
36:4c:97:b0:e8:eb:63:36:bc:95:a0:5c:88:b8:be:
84:be:91:38:6c:67:41:d4:a8:f6:37:67:76:83:47:
72:05:d5:40:e6:52:c1:c4:39:d6:d5:b0:b8:41:3a:
a1:e4:29:21:16:dd:94:2b:b8:e8:27:5a:34:97:57:
48:64:78:d3:36:32:2d:a2:6f:a7:31:fa:a5:7c:b5:
a5:79:25:2f:9e:a8:8f:fe:d7:21:4a:14:70:24:1e:
1e:51:3d:f4:75:a5:67:60:23:27:ad:5d:56:26:09:
ea:02:30:1c:3a:25:96:82:51:46:19:cd:a5:08:38:
bc:e1:ea:ca:d7:92:68:02:29:92:d9:b5:dd:ff:b3:
99:98:14:3e:6e:53:49:22:2b:67:1f:15:2b:68:3c:
f4:a1:6f:a1:26:74:9d:0b:98:70:80:e4:e1:af:d8:
25:7c:f4:32:17:58:ab:a0:64:f0:a3:7e:14:da:53:
f6:21:31:0f:0c:5a:cf:3e:89:f2:d4:42:2d:0d:fe:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:EE:CA:5E:8D:E8:05:DE:82:2A:8F:8A:A1:53:EE:26:64:8D:8D
X509v3 Authority Key Identifier:
keyid:3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS61946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.139.184.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:38:d1:3f:26:9c:be:61:ee:82:f3:25:6e:36:96:61:67:9f:
c5:80:92:d1:01:38:8b:f2:38:23:61:24:b2:c5:ab:ec:ed:dd:
a3:e4:9d:fb:f9:b4:ae:f4:83:6c:89:2c:0e:61:c8:3a:dd:07:
5e:77:cd:21:d4:ac:ab:d6:ef:fd:76:a6:b6:f7:05:4c:d9:e1:
72:0e:d1:d4:54:e0:50:7e:da:de:9f:18:78:70:8e:b0:79:e1:
30:47:69:b4:82:a4:d4:58:5d:58:69:4e:c3:5c:d1:6c:64:83:
40:f2:d4:8d:97:19:c0:d0:74:52:95:9b:fb:b3:bf:4c:94:50:
a2:41:64:6b:47:be:df:31:d7:16:47:5b:a7:cc:da:58:e9:c0:
8d:79:d7:bc:0f:61:50:5b:d2:de:c5:e1:2c:30:6e:3f:6a:ce:
a2:9d:02:8e:01:72:71:94:62:39:09:7b:f3:97:a6:96:d8:39:
53:56:c3:08:b7:fa:a2:36:dd:c3:60:f1:c8:c0:1d:17:45:fb:
3d:b5:fb:fc:bc:3a:ae:2b:07:a3:3b:a8:46:d3:d7:4a:d9:47:
8c:47:ca:29:fb:c7:cb:c4:21:bc:21:5b:6a:d2:f0:82:bc:83:
ea:9c:ec:80:81:99:b4:92:5d:c4:b8:f0:f1:fb:1e:33:dc:bb:
2a:c2:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org