Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
File: 3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: wjssD9jK7744FruKmAXLNLZSq7327v4Do+FUvxa1hpw=
Subject key identifier: D4:E2:85:3A:31:80:55:33:B6:D6:99:63:71:7B:B7:BC:E4:F8:72:1E
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 3ED2C92387C24628AF872D9B4F3E2154A9CCC6D7
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:12 +0000
ROA not before: Tue 23 Jul 2024 11:46:12 +0000
ROA not after: Tue 22 Jul 2025 11:51:12 +0000
asID: 28667
IP address blocks: 168.196.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d2:c9:23:87:c2:46:28:af:87:2d:9b:4f:3e:21:54:a9:cc:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:12 2024 GMT
Not After : Jul 22 11:51:12 2025 GMT
Subject: CN=D4E2853A31805533B6D69963717BB7BCE4F8721E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:2d:18:2f:0d:56:2d:07:c0:5b:35:81:c2:
56:34:d7:06:e1:de:2b:83:50:bb:2c:00:c6:d3:78:
00:85:c0:ca:6f:b4:02:ba:e6:6a:f5:ff:02:2a:39:
66:41:ea:52:4e:e0:c4:b9:be:3c:91:84:d0:1b:99:
54:6a:0e:94:ff:53:86:4d:6c:04:32:96:72:00:b2:
a5:04:ad:f5:15:5f:65:ff:1b:57:c3:d8:b1:53:e2:
b0:93:bb:9c:81:3f:31:b8:35:70:5e:3a:80:23:e1:
e3:cd:8c:06:88:c0:b2:3f:8b:9f:a9:9b:02:05:45:
1b:52:b3:fe:40:9b:70:99:c5:a7:2f:f4:34:c9:ae:
3f:51:00:38:2a:ff:52:d1:cc:9b:af:f8:8c:11:22:
5a:81:ab:35:df:28:67:13:3b:4f:be:3e:85:4b:31:
2b:b6:0d:2b:2d:f5:13:81:49:cb:45:bb:c7:78:06:
bb:a8:0b:94:a5:74:aa:01:bc:15:22:1c:6b:41:51:
85:66:8b:d9:89:56:d8:bf:ed:18:76:ff:b9:28:81:
df:f8:6c:76:71:eb:85:d3:fb:8c:d2:e9:23:9b:0b:
4d:b2:d1:eb:20:f8:42:34:8d:b9:cd:40:ec:55:c9:
80:47:76:3d:0a:40:be:19:10:83:8a:17:70:86:52:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:85:3A:31:80:55:33:B6:D6:99:63:71:7B:B7:BC:E4:F8:72:1E
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.108.0/22
Signature Algorithm: sha256WithRSAEncryption
72:7a:83:16:4d:50:9c:26:8b:52:a2:ba:eb:87:97:ff:cb:01:
36:48:16:3d:91:da:76:fa:ee:46:67:95:4e:ca:4b:c5:26:8e:
d7:f1:25:09:90:81:b1:fa:e6:4d:13:df:25:5a:18:be:f4:a5:
84:21:ee:86:6a:a2:42:08:e3:be:48:0a:c8:ce:ca:05:ad:59:
ac:0c:eb:30:13:02:00:30:bf:68:37:29:d7:f1:fc:65:b2:3a:
49:ef:c1:5f:c8:c7:61:6e:1a:d5:b9:fb:74:5a:7d:53:78:11:
46:d8:ed:1d:e1:f6:0a:f3:c0:fb:e3:71:72:ba:b2:63:c5:88:
2a:6b:63:ed:37:82:35:ac:8a:da:5d:ec:39:5b:3b:fa:04:fe:
d6:59:58:0a:26:fa:4c:f2:bd:97:c0:e2:78:5d:c8:12:80:5e:
b3:d5:81:74:50:20:4e:d8:56:6a:97:f7:e5:cf:6c:35:2a:3b:
c4:04:ce:c7:cd:28:41:cb:57:cd:d7:53:df:c2:11:94:a4:16:
e9:a6:4f:51:7d:a0:f9:74:7a:de:65:aa:47:46:f1:a9:f5:43:
89:ed:63:fa:a5:71:fe:26:34:11:7b:19:7f:6e:0c:99:10:4b:
c1:c1:b0:24:61:fc:aa:5a:51:8a:16:d3:8c:71:fd:06:34:59:
d1:65:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org