Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
File: 3138392e312e3137362e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: kC9NJR02QNvweQJHK/VJjalyhvYqnVBTvMbzZpy+uzc=
Subject key identifier: F6:BC:3A:B0:E2:AA:D9:C0:30:39:C2:F1:74:6E:75:EA:55:3A:35:24
Certificate issuer: /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial: 547D3A9A4CD6D0E392005E3A3EE1A78671F741F2
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
Signing time: Thu 04 Apr 2024 16:06:04 +0000
ROA not before: Thu 04 Apr 2024 16:01:04 +0000
ROA not after: Thu 03 Apr 2025 16:06:04 +0000
asID: 28667
IP address blocks: 189.1.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7d:3a:9a:4c:d6:d0:e3:92:00:5e:3a:3e:e1:a7:86:71:f7:41:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Validity
Not Before: Apr 4 16:01:04 2024 GMT
Not After : Apr 3 16:06:04 2025 GMT
Subject: CN=F6BC3AB0E2AAD9C03039C2F1746E75EA553A3524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:5a:65:bd:f0:a8:18:bb:0d:5d:2a:7e:34:
49:b4:e8:e9:a7:ef:f3:c0:cb:af:0e:5d:7a:1e:c7:
ae:2d:92:f6:72:1a:61:e3:c1:49:37:d5:ac:00:22:
c5:da:9f:78:34:c2:99:76:72:fa:6a:0d:44:c1:80:
7d:15:b8:c1:ba:1d:dc:b1:86:1a:2d:84:9b:42:f1:
b4:ab:ac:2c:1e:e2:6e:25:c7:75:2f:73:2c:7f:d2:
d2:ff:67:09:95:35:da:23:1f:23:13:65:2f:1d:84:
b5:4d:b8:54:03:c4:de:ee:f6:8e:ca:93:1a:1a:0a:
eb:85:1c:ea:a4:2b:23:5c:27:f7:d3:24:b9:6f:41:
64:39:52:96:47:3a:ff:ab:e0:f2:a3:a3:b2:86:7d:
85:09:bd:9e:72:a7:3c:8f:24:d1:5a:97:93:ee:4d:
bd:3e:3c:37:ea:79:1c:12:8a:65:96:ae:58:11:82:
25:cb:2a:e3:10:21:a8:7c:6b:ec:67:87:fa:ee:69:
bf:27:98:be:cc:0b:2c:d2:66:9e:f7:d9:95:23:f5:
09:f9:44:b1:9f:0f:fd:5e:53:6d:4a:27:ce:8f:f2:
d6:4d:a4:cd:a5:3c:84:ab:ff:ee:ec:18:ef:e0:18:
ec:c3:16:9f:be:f8:2b:b5:d0:d3:56:27:7a:6c:bf:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:3A:B0:E2:AA:D9:C0:30:39:C2:F1:74:6E:75:EA:55:3A:35:24
X509v3 Authority Key Identifier:
keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:e8:0a:76:24:57:97:d7:c5:4f:06:93:97:8d:54:53:98:bc:
64:5c:9d:4e:e6:74:6f:06:5e:84:82:1e:fe:de:5b:f8:fc:70:
42:5c:1d:2f:c6:55:b3:76:27:64:fa:9c:c5:34:dd:90:bd:05:
f3:8c:f4:74:16:84:1a:9d:d8:b3:18:61:bf:69:1f:fa:8e:b0:
16:02:04:31:84:b8:6b:e1:09:cf:1f:15:b0:58:cc:e5:af:b7:
ef:3a:67:7f:ed:bb:91:0e:09:f3:91:3e:73:b3:e7:c4:3e:ce:
db:7b:e0:5a:a9:01:ba:21:91:9d:d9:af:a1:a0:6e:67:db:86:
d5:aa:a2:0d:89:bd:35:40:62:8f:bc:99:c0:fc:68:3f:f9:88:
bb:5d:6e:b5:ca:ba:f7:06:c2:50:8a:f5:6f:f1:dd:86:ab:91:
81:60:54:3c:ab:3f:ad:cb:83:6a:c3:ab:32:87:a5:07:0e:ce:
33:e4:58:c1:98:01:25:f0:66:97:d2:d7:66:7e:aa:e4:e5:88:
20:df:91:bb:b4:a0:45:ee:98:65:41:4f:99:26:da:fa:63:f6:
84:3f:f3:19:a4:89:40:83:c3:44:56:47:6b:27:7d:52:ca:20:
9e:f0:5a:04:28:2b:b5:f1:50:29:6c:ce:82:e0:9a:9e:f9:3c:
34:1f:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org