Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
File: 3138372e31392e38302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: POU7SkdM7sewaDzuQ1mgYBGTzA8JrsrNEJuE2UtK+dc=
Subject key identifier: 69:EF:FE:1C:F9:6A:FC:23:7A:07:1B:EE:C6:17:2D:49:F7:78:5B:7D
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 10B3FE4A505AC9488AA35313A8DDC771BB5CBCD5
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:17 +0000
ROA not before: Tue 23 Jul 2024 11:46:17 +0000
ROA not after: Tue 22 Jul 2025 11:51:17 +0000
asID: 28667
IP address blocks: 187.19.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b3:fe:4a:50:5a:c9:48:8a:a3:53:13:a8:dd:c7:71:bb:5c:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:17 2024 GMT
Not After : Jul 22 11:51:17 2025 GMT
Subject: CN=69EFFE1CF96AFC237A071BEEC6172D49F7785B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:bd:19:1f:32:8e:2a:63:8d:2d:12:42:d7:
d0:e9:ec:fe:0c:8b:e8:0c:59:c2:50:72:07:5b:78:
4a:93:c5:76:dd:fa:da:12:b4:4d:23:c0:70:f1:32:
e9:b7:aa:0d:f9:c1:84:cb:66:23:a6:1c:17:7c:b9:
b1:41:63:b6:99:e3:5d:3e:00:c3:c1:4e:4e:b7:87:
b4:34:9f:84:25:34:94:09:63:fc:0a:d0:10:15:f5:
4a:a8:0e:ed:85:0e:72:ff:09:af:13:71:2d:5a:d8:
ce:ab:6c:6d:26:85:6b:c8:66:05:c4:63:cb:df:9d:
34:a1:f1:cd:a9:7f:4c:cb:3b:f9:7f:47:fb:fd:ed:
0a:03:14:ba:ec:37:45:3f:6f:30:eb:46:29:dc:0c:
b4:ac:88:96:25:f0:5e:09:36:3b:ee:1f:4b:1f:b0:
a9:c3:04:5e:42:b9:be:c0:2a:d8:27:14:27:88:e7:
5b:8a:81:a6:5f:e8:66:bf:5b:c7:ae:81:7d:16:6c:
b1:ef:e4:fb:1e:7a:33:80:de:80:48:b1:06:d5:4b:
e1:29:80:50:70:40:fe:a9:28:2b:f6:23:a9:2f:87:
a2:db:9c:59:94:e6:a0:fd:de:aa:34:41:19:57:db:
0e:44:08:ab:4e:3d:b5:a7:f4:d5:d9:ae:4f:67:b4:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EF:FE:1C:F9:6A:FC:23:7A:07:1B:EE:C6:17:2D:49:F7:78:5B:7D
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:8a:a7:35:a5:71:57:6a:e9:8f:7e:0a:c9:46:62:c1:04:92:
4e:79:19:a7:60:6c:ca:f8:b1:10:d1:44:1b:5b:f2:64:0b:a2:
83:6e:de:bf:ef:1c:08:a9:49:c5:a0:9a:7f:82:f8:89:81:d5:
37:1d:c8:21:3b:60:d4:0a:a1:4e:1b:22:20:d7:e4:7d:b3:21:
55:01:59:30:39:3b:a3:83:c6:7c:1c:89:8e:f8:6a:b8:57:58:
b8:d7:41:7e:bd:be:0a:74:bb:56:1c:58:33:c8:62:dc:1f:d4:
76:39:a5:a5:2a:58:42:11:16:57:63:fd:fc:ba:6e:ba:dc:4d:
49:01:cf:ad:b3:b1:83:46:c1:9b:3c:6d:72:0a:6d:59:11:d6:
b1:db:2f:d4:93:61:ef:72:dc:7f:48:89:a1:78:ee:c4:e1:3c:
08:b5:ef:2d:d7:62:f0:7b:0e:3c:30:f3:1a:84:b8:36:e9:9d:
33:78:3f:6a:ff:30:a9:2a:da:d2:2e:da:80:33:c8:a5:1a:b8:
76:0f:96:98:1b:9c:d8:a7:2c:8a:d9:57:92:70:ff:7c:bb:80:
96:7e:93:00:1e:74:75:f4:c6:6f:af:3b:d7:31:69:80:30:2f:
d8:87:03:33:cb:84:a3:a7:aa:dd:ca:82:af:2c:14:9d:d9:32:
6b:40:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org