Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32322d3232203d3e20323633303836.roa
File: 3133382e39392e34302e302f32322d3232203d3e20323633303836.roa (raw, json)
Hash identifier: Ceoen/9A4xOx6ZGiCER6qH//ryr6/MF2Cndxtf/c2g0=
Subject key identifier: 3A:A8:62:F9:1A:DC:08:23:08:8E:4A:79:E2:59:43:79:37:30:85:BD
Certificate issuer: /CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Certificate serial: 7F30163FF4289CCA48D97CBAF4FBE601BF6C89C1
Authority key identifier: 1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32322d3232203d3e20323633303836.roa
Signing time: Wed 20 Mar 2024 18:57:29 +0000
ROA not before: Wed 20 Mar 2024 18:52:29 +0000
ROA not after: Wed 19 Mar 2025 18:57:29 +0000
asID: 263086
IP address blocks: 138.99.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:30:16:3f:f4:28:9c:ca:48:d9:7c:ba:f4:fb:e6:01:bf:6c:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Validity
Not Before: Mar 20 18:52:29 2024 GMT
Not After : Mar 19 18:57:29 2025 GMT
Subject: CN=3AA862F91ADC0823088E4A79E2594379373085BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:d9:ea:4f:57:69:78:34:c0:18:9b:81:d6:
b9:9d:57:a7:cb:9c:cc:f4:75:f8:68:38:82:26:ee:
42:c0:34:29:2c:20:45:cd:4f:9a:f4:1d:19:28:ff:
ba:56:b5:02:dd:68:84:78:d1:67:2d:1c:d5:a3:23:
b1:25:8c:ed:3a:25:04:7d:4f:53:bd:53:28:02:4e:
1d:7c:b8:c6:2b:74:e0:61:33:22:c8:24:01:0b:4d:
d2:bf:be:2e:dd:7a:fd:29:b9:1a:d1:c4:e3:df:1a:
cb:82:17:be:96:33:b5:fb:cc:21:07:dc:94:4c:eb:
e4:f0:ec:18:77:a1:d5:d3:c8:44:3d:f8:1e:a0:01:
9a:fc:c5:4e:d4:5a:b4:f7:9e:b1:eb:68:94:d4:8d:
ad:9f:2d:d6:42:00:68:35:c3:3b:59:c2:43:0d:f9:
bd:af:76:73:6e:da:64:2b:30:4c:44:29:70:bd:fe:
62:4f:b8:b8:f0:39:42:e7:80:06:0c:3d:a4:29:a5:
65:57:55:68:cb:41:43:e7:0c:ce:74:a8:d3:9b:9c:
1b:f7:00:ec:c7:5c:85:b4:d6:a1:d4:ff:61:9f:26:
b9:1c:4b:8e:83:b4:6b:b7:94:c9:45:fc:4f:9a:46:
98:02:62:b8:f2:75:2b:69:9b:2b:7f:76:bf:02:d4:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:62:F9:1A:DC:08:23:08:8E:4A:79:E2:59:43:79:37:30:85:BD
X509v3 Authority Key Identifier:
keyid:1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34302e302f32322d3232203d3e20323633303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.40.0/22
Signature Algorithm: sha256WithRSAEncryption
32:26:49:d7:df:a1:d1:ea:c4:d3:1e:a7:69:83:8e:8a:b3:fd:
23:b0:c7:f6:ce:e8:5a:39:f9:84:64:f9:31:62:33:da:22:be:
40:0b:d6:bf:6f:fe:43:2e:ae:64:bb:6c:0d:cb:b6:fc:0c:d7:
7b:be:20:9d:08:62:1c:df:2a:0e:ad:4a:b4:90:ef:d3:de:8a:
0a:37:d1:fa:78:da:b4:ed:26:78:f3:c9:c9:ac:10:78:83:41:
48:82:87:9f:64:b5:90:80:ca:62:18:87:d4:d9:ba:47:61:11:
a7:37:ae:c3:2f:58:72:cb:84:ff:14:39:af:f6:64:52:15:fb:
00:39:7b:07:f3:1a:4f:72:48:99:dc:43:6c:48:c7:9e:b9:a2:
d0:69:9b:4e:12:06:a1:d9:b8:3a:36:19:47:94:92:59:fc:f8:
73:de:cf:a6:49:b3:66:45:fb:80:c5:da:ce:39:87:2b:13:14:
6c:56:21:b3:3d:5a:57:ed:36:bb:27:b7:4f:97:f9:10:e3:55:
75:bc:14:33:f6:93:e7:41:6e:8b:cb:3b:a6:7d:bc:59:1c:e2:
79:f3:3c:a5:75:ac:df:58:15:47:2c:4d:89:fb:55:79:9a:1f:
78:b7:78:2f:f8:07:75:89:a0:27:ac:df:e4:68:b1:f9:18:01:
ff:55:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org