Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
File: 3133322e3235352e36342e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: BIs7EqI0t3ED3DeiiX92bcapdYV+JZaLOzh6Xz6ZqYw=
Subject key identifier: 8D:E8:68:08:C3:E3:87:A9:6E:BD:C0:A6:45:4F:C4:93:78:5A:FB:B9
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 6A9D81D1085D807556692C18E11DECCFE48CB125
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:15 +0000
ROA not before: Tue 23 Jul 2024 11:46:15 +0000
ROA not after: Tue 22 Jul 2025 11:51:15 +0000
asID: 28667
IP address blocks: 132.255.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9d:81:d1:08:5d:80:75:56:69:2c:18:e1:1d:ec:cf:e4:8c:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:15 2024 GMT
Not After : Jul 22 11:51:15 2025 GMT
Subject: CN=8DE86808C3E387A96EBDC0A6454FC493785AFBB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:5b:d9:44:30:85:c2:27:1b:fe:35:12:17:
63:3e:c6:bd:5c:f4:f7:41:33:f9:45:ce:92:68:ba:
3c:cf:13:15:0a:3f:53:61:8b:bc:fb:a4:42:f8:48:
b1:ec:aa:5a:c2:90:3a:eb:75:5e:be:12:8c:2a:8f:
a6:cb:62:03:5d:23:2c:13:6d:82:ec:2d:fa:01:16:
dd:ee:0a:4a:a0:ac:49:2e:f8:78:f1:79:4d:95:15:
f2:fc:3a:7e:2c:3a:fc:77:a6:c9:c6:21:ae:8e:88:
48:23:2f:e2:90:93:75:e5:cb:25:ba:31:fc:a9:e7:
52:14:c7:f9:42:f4:75:71:c3:75:90:31:db:3f:55:
f7:1d:d8:7d:6c:03:8f:9f:94:4b:48:2c:de:8a:c3:
6c:ea:40:62:2d:0d:7a:11:a0:97:2e:cf:d5:b8:d7:
68:be:e4:0e:53:97:89:96:71:c9:12:21:db:6b:d2:
21:90:45:b2:50:93:07:da:51:c3:70:b5:05:c9:9c:
0f:36:10:36:3e:0e:1a:cd:7a:09:80:56:81:f5:63:
7f:b1:ab:9e:35:80:15:c1:44:8e:db:67:31:7a:56:
33:8b:df:68:eb:27:76:77:28:c1:7f:10:03:98:b2:
a7:07:14:43:a9:e8:67:bc:b6:59:89:af:f4:28:6d:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E8:68:08:C3:E3:87:A9:6E:BD:C0:A6:45:4F:C4:93:78:5A:FB:B9
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:4f:73:72:b8:67:3f:a9:24:48:68:2e:54:de:da:df:eb:9c:
96:ac:1f:41:17:e8:27:a5:b8:40:c1:80:8b:0d:20:c8:2a:d3:
a5:1a:30:30:93:1a:95:cf:9b:f1:60:58:ff:b6:bb:e3:cf:9f:
57:9e:89:bf:a5:e4:39:85:35:3f:26:b1:e9:b2:4b:ad:09:ed:
b0:11:a2:7b:8b:5f:33:08:63:c9:9a:80:81:53:26:0a:55:7d:
58:06:23:b0:46:96:8d:d3:b8:ad:60:3f:14:89:f3:11:fb:1d:
6b:bd:6f:da:fb:7b:a8:42:5a:bc:db:81:3d:b1:10:87:23:96:
eb:e4:f8:34:7c:3f:29:52:b7:db:f8:8e:7d:24:27:80:56:29:
40:e8:5f:16:ef:88:88:dd:6a:eb:7a:92:a8:28:f9:dd:a9:f0:
ab:5e:c8:ea:07:11:83:61:c6:17:35:e2:6d:14:d1:4c:b4:2a:
54:0a:20:b1:7e:b6:8c:75:7a:75:a1:44:dd:14:07:73:b0:3b:
3b:45:24:9a:1e:6a:06:61:71:5c:2c:4d:38:ae:f2:8c:9d:48:
7d:1e:ff:a3:6f:4b:19:9f:99:79:58:a6:dc:cb:da:52:bf:b4:
fd:e8:e2:a8:50:7f:ca:d7:f9:e5:78:9c:4a:2d:e7:81:04:18:
47:e2:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org