Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3332203d3e203533313831.roa
File: 3133382e302e3131322e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier: vBvcU96EfRnIyXPEZr7hOJf7/bdSoRNf6QedW1Kzb4w=
Subject key identifier: F3:BC:42:95:E8:18:B5:3A:0F:7A:DC:AC:5D:1F:A7:3A:6A:40:0F:93
Certificate issuer: /CN=E092437C3A4C234394EB5991D5BE5C5235768D77
Certificate serial: 253188AF07AC543BF6F7A91DFEABF832F91A7D61
Authority key identifier: E0:92:43:7C:3A:4C:23:43:94:EB:59:91:D5:BE:5C:52:35:76:8D:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E092437C3A4C234394EB5991D5BE5C5235768D77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3332203d3e203533313831.roa
Signing time: Mon 13 Mar 2023 13:21:18 +0000
ROA not before: Mon 13 Mar 2023 13:16:18 +0000
ROA not after: Mon 11 Mar 2024 13:21:18 +0000
asID: 53181
IP address blocks: 138.0.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:31:88:af:07:ac:54:3b:f6:f7:a9:1d:fe:ab:f8:32:f9:1a:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E092437C3A4C234394EB5991D5BE5C5235768D77
Validity
Not Before: Mar 13 13:16:18 2023 GMT
Not After : Mar 11 13:21:18 2024 GMT
Subject: CN=F3BC4295E818B53A0F7ADCAC5D1FA73A6A400F93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:5e:b5:f6:aa:8e:68:32:32:3e:0a:b4:b5:b3:
e8:81:4a:31:44:10:2d:19:7a:de:ee:2b:aa:13:08:
42:e5:83:1a:b0:1c:2a:a7:69:23:2f:31:8c:08:1e:
a5:d3:92:57:ed:5e:b4:68:4e:a1:43:61:09:e6:04:
00:4c:43:d0:59:04:f6:7a:ea:03:da:45:63:73:25:
5b:a8:fc:a1:ce:51:c5:6f:c6:9d:f4:10:6b:24:ff:
36:7d:35:7d:76:d3:55:71:bc:b6:46:4e:b8:1e:b8:
87:6e:9f:9a:7e:9e:45:ff:bc:32:15:ec:b2:26:6d:
23:1f:d6:a8:2f:a8:cc:16:26:bd:6a:75:3a:74:9a:
24:35:61:01:5d:01:52:5c:8d:71:c6:4f:e4:f6:11:
99:d9:b0:dc:63:b6:94:70:c2:6b:a7:a5:e8:e8:07:
39:ba:e2:dc:55:2f:db:61:9e:42:1d:3c:65:61:2d:
82:02:b9:5e:fb:df:f9:4f:95:0b:39:65:bb:7c:d4:
2a:44:f6:35:4e:ee:23:ee:18:79:32:25:a9:c9:f2:
55:b1:5e:6b:1a:b6:9a:ca:69:46:78:39:58:28:15:
ec:b7:a3:11:29:9b:4d:c9:a2:c6:35:4d:b1:c7:16:
1e:93:ce:1e:43:46:91:67:ec:69:77:ba:0f:f9:03:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:42:95:E8:18:B5:3A:0F:7A:DC:AC:5D:1F:A7:3A:6A:40:0F:93
X509v3 Authority Key Identifier:
keyid:E0:92:43:7C:3A:4C:23:43:94:EB:59:91:D5:BE:5C:52:35:76:8D:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/E092437C3A4C234394EB5991D5BE5C5235768D77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E092437C3A4C234394EB5991D5BE5C5235768D77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3332203d3e203533313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.112.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fd:0b:f4:16:64:bc:45:85:86:71:a0:aa:d1:62:48:db:56:
e2:f9:b6:02:19:23:1d:e7:84:26:74:ac:d2:8b:bf:3e:cc:f3:
9e:8e:9b:5f:1e:f7:4c:92:29:90:79:5c:9a:c9:10:ff:7d:48:
86:f4:88:29:26:23:15:84:3e:a6:4b:4a:23:99:4f:e2:37:d1:
f6:0e:0d:33:62:d6:a1:07:51:ca:45:40:c8:57:ed:0c:96:10:
c5:c9:00:0a:9b:e2:c0:2d:20:42:29:cb:ba:50:0f:af:85:10:
b8:4c:11:69:33:d7:65:81:c5:d5:ea:b8:55:11:63:4f:04:f1:
4d:b7:79:5c:63:1e:39:70:cd:27:b2:7f:72:44:2e:7c:21:3d:
0d:fc:2a:88:2c:da:6a:50:7e:86:0a:68:48:4d:07:cb:88:3d:
8f:b8:7e:17:5d:00:19:0f:1d:69:c9:5e:a3:1e:b1:c2:d2:7f:
c7:5b:c6:41:97:14:35:22:9e:f4:a9:3b:48:55:8d:4c:40:4b:
04:20:21:90:77:63:21:76:32:6b:2f:10:bf:85:7c:60:82:ea:
67:c9:f7:1a:53:19:15:45:90:3f:38:2e:3a:2c:5c:5f:ec:ba:
6a:43:2d:41:ef:e5:3b:33:f8:70:bb:1f:3b:ed:92:56:a6:eb:
b9:7b:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org