Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32322d3232203d3e203238323630.roa
File: 3138372e39352e33322e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier: oC306LtsFRghsmEjh1qciGbJeUwWU9epw3BOMNaRtFw=
Subject key identifier: BA:C5:4F:DE:39:C6:02:B2:39:F2:D8:CA:D7:63:F7:78:7E:77:90:B2
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 698DDC70010F24B81418789B6B3DA235FD377164
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32322d3232203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:53 +0000
ROA not before: Thu 09 Mar 2023 20:12:53 +0000
ROA not after: Thu 07 Mar 2024 20:17:53 +0000
asID: 28260
IP address blocks: 187.95.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8d:dc:70:01:0f:24:b8:14:18:78:9b:6b:3d:a2:35:fd:37:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:53 2023 GMT
Not After : Mar 7 20:17:53 2024 GMT
Subject: CN=BAC54FDE39C602B239F2D8CAD763F7787E7790B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:d9:25:5c:0f:33:79:19:06:2c:ef:be:c5:
0c:5a:d3:78:23:81:8b:30:68:56:f3:a6:68:28:2c:
1c:7e:4a:9c:d4:25:a7:59:37:96:4c:92:0b:49:cb:
0b:ca:fb:4a:d6:94:3a:eb:8f:f5:bc:7e:29:94:0c:
99:6f:b0:12:b6:36:51:f4:9e:29:9f:2d:90:c4:de:
73:d2:c1:cf:3e:d8:86:26:d2:65:7e:80:f2:1f:7b:
7b:ee:be:b7:13:61:c5:55:44:12:62:ec:1c:d8:c0:
08:51:a9:5c:5f:4b:d6:07:d5:6b:6f:a0:1e:80:79:
de:37:9c:dc:b2:d9:87:51:cf:94:15:c1:5e:07:9d:
1e:32:4a:27:25:d2:2e:d2:ae:0f:6f:c6:2e:ac:81:
7b:ea:c5:0e:9c:ee:d8:1a:a3:11:16:30:a6:5f:b6:
74:a6:e3:91:93:2f:a6:92:db:36:e3:3e:0f:b3:08:
18:c5:09:dc:88:db:a3:55:e4:a3:78:f4:f6:af:54:
c3:fe:e3:ac:c9:c1:9e:e3:aa:e5:62:eb:20:4d:74:
bf:f2:79:9b:d2:1f:38:05:e4:4f:b8:8e:00:38:36:
ac:59:f4:bc:04:43:6f:c9:8f:b0:6a:4a:e5:08:69:
0e:ca:0f:fd:96:fd:50:46:6c:6f:77:40:29:c4:c0:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:4F:DE:39:C6:02:B2:39:F2:D8:CA:D7:63:F7:78:7E:77:90:B2
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32322d3232203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:58:a2:21:a3:28:61:83:5e:84:05:27:b7:db:be:8b:c1:f2:
73:6c:86:fa:f9:cd:25:c9:02:61:43:07:5f:4e:e3:05:76:6e:
d3:85:ea:1d:d9:08:e5:16:1f:83:89:e1:38:4e:23:58:c4:f8:
7a:d1:21:34:e8:fe:83:80:e7:db:e9:1d:b8:bc:32:9b:17:32:
7a:29:5e:ef:f3:60:f8:bd:86:15:6c:01:43:1f:a2:33:b2:30:
a1:7f:05:6a:5a:96:51:43:fc:f9:07:fc:f5:69:cb:9e:80:bd:
89:fb:08:5b:18:64:4d:19:6b:9a:3e:f5:d5:26:a1:15:88:0b:
92:a0:c2:72:cd:e9:ae:d1:fc:f2:f2:9b:9c:0d:0b:98:1d:8c:
e6:38:45:77:04:de:68:46:21:56:50:5c:ec:56:4a:ec:fb:4b:
81:d9:f9:17:64:ec:06:e8:5d:ac:de:fd:9f:b1:80:db:ee:ad:
be:bd:0e:61:fe:17:1a:ff:47:ef:d6:2e:0c:07:ab:9d:77:57:
9c:c2:12:e9:7d:b7:44:a9:9f:34:7c:c0:14:27:64:8e:bc:2c:
24:be:ef:9f:e5:22:20:d2:6a:b8:69:31:8d:b1:d1:62:93:20:
2f:ea:75:b4:b7:92:5b:41:f0:04:bb:dc:e2:d1:fd:84:96:78:
b2:00:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org