Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
File: 3138392e312e3137362e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: kJFDEKGZekqQb4CIjLVX5oV4+/L/cJTwJ73kPmw+trY=
Subject key identifier: 47:D7:58:5A:DF:3C:12:C8:8D:70:64:48:FE:B9:46:AB:08:9A:F0:1F
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 347BDCCC9AD7D122DB6AB2BD65B08CFA6FD5D2FC
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:17 +0000
ROA not before: Tue 23 Jul 2024 11:46:17 +0000
ROA not after: Tue 22 Jul 2025 11:51:17 +0000
asID: 28667
IP address blocks: 189.1.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7b:dc:cc:9a:d7:d1:22:db:6a:b2:bd:65:b0:8c:fa:6f:d5:d2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:17 2024 GMT
Not After : Jul 22 11:51:17 2025 GMT
Subject: CN=47D7585ADF3C12C88D706448FEB946AB089AF01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:c3:ae:41:db:fa:70:e4:37:78:52:5f:0f:
63:29:f7:be:42:9e:d4:fc:eb:db:f5:ea:19:c2:95:
94:cd:c3:7e:fd:70:69:14:d5:43:d1:2f:69:aa:d4:
69:1d:d7:ae:8b:fd:f2:2f:91:a9:43:cb:69:f8:2f:
26:3f:9b:9a:25:84:5d:37:f2:5d:d7:5e:f0:80:ec:
38:9d:2b:ab:4b:11:8a:7b:02:56:37:06:9f:24:d3:
d3:93:84:95:86:37:24:83:f3:eb:60:c2:39:80:33:
35:fc:d8:f5:ac:e3:29:fe:37:4a:0a:ef:82:b6:15:
9b:e3:9c:01:28:82:fa:b0:c6:12:80:52:b9:a1:40:
8a:3d:3a:59:19:95:65:bb:7b:03:a8:06:e5:d0:42:
a1:87:12:12:40:b8:87:15:99:dc:6a:5a:e3:ca:74:
96:4a:2e:7a:fe:2c:5a:01:73:3c:f4:da:9f:60:1f:
cf:e7:d0:69:0c:c7:28:bb:8b:f9:00:97:27:34:96:
ac:ab:b7:0b:db:15:da:6c:3b:9c:17:3d:85:ca:85:
6a:29:84:ca:33:cc:d3:49:19:a6:af:00:ba:a1:51:
bc:3f:7a:5a:98:55:91:48:f5:ed:95:84:58:bd:73:
f6:94:65:06:80:ee:ab:03:ac:ed:f2:70:f9:9e:64:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D7:58:5A:DF:3C:12:C8:8D:70:64:48:FE:B9:46:AB:08:9A:F0:1F
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:f4:3b:fc:98:01:78:04:ce:e2:08:e1:af:92:56:ad:e9:36:
60:09:46:09:fe:67:1a:78:3a:1a:27:3e:da:0c:3d:cb:dc:6a:
a0:e4:26:a7:cc:e8:8f:3c:f9:56:12:c7:ea:ac:ca:7d:29:22:
15:b8:fd:19:47:b0:b2:e0:84:5a:f9:05:05:32:bc:76:ae:9c:
3e:08:8e:d4:55:bd:3a:c4:3a:74:84:76:ae:23:7f:25:f2:4a:
99:56:c1:90:5e:28:c8:85:ce:84:71:a2:9a:79:ca:01:36:ed:
82:d9:df:e5:0a:07:0c:ae:c8:aa:79:d5:1a:ee:97:2e:e8:5b:
3d:ae:df:53:ff:a7:ad:4c:7d:8a:f3:c0:4c:04:e2:ed:d5:9f:
6b:3b:f2:7c:26:89:98:20:fa:6b:75:6d:ce:47:0c:80:16:e1:
4a:f6:37:79:ca:33:01:19:2f:59:4f:24:19:21:7d:71:96:03:
d9:3f:68:f0:8e:46:a1:f6:32:90:ea:ff:fd:7b:f4:64:f4:aa:
58:cc:1b:0a:b5:e7:1d:f3:92:6e:e3:b2:27:08:e4:a6:18:4e:
db:1a:1a:9a:b2:da:1d:48:b6:fb:ef:fc:74:88:cb:3a:46:48:
4b:8b:95:b2:c7:90:cf:ff:a0:ef:39:fa:a7:86:56:b0:1a:03:
bf:f8:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org