Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3133382e302e36342e302f32322d3234203d3e20323632353935.roa
File: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier: 0ALrovMLGJQqrcDnN4NHPKGywKgK4AUWcJ+zJEaGTEo=
Subject key identifier: CF:2B:CB:CC:D8:65:D4:EE:5A:0D:41:1A:95:A9:D8:F0:90:88:98:5E
Certificate issuer: /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial: 1D2FC06A7BBB8FEDB0D685A838325014CAC9557E
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3133382e302e36342e302f32322d3234203d3e20323632353935.roa
Signing time: Thu 30 Nov 2023 20:00:00 +0000
ROA not before: Thu 30 Nov 2023 19:55:00 +0000
ROA not after: Thu 28 Nov 2024 20:00:00 +0000
asID: 262595
IP address blocks: 138.0.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2f:c0:6a:7b:bb:8f:ed:b0:d6:85:a8:38:32:50:14:ca:c9:55:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Validity
Not Before: Nov 30 19:55:00 2023 GMT
Not After : Nov 28 20:00:00 2024 GMT
Subject: CN=CF2BCBCCD865D4EE5A0D411A95A9D8F09088985E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:cc:cb:48:0d:ad:4b:a9:c2:36:bd:dd:be:
f5:48:9b:fe:39:aa:13:c7:58:76:7d:0c:d9:6c:89:
e0:0b:b9:ec:f7:42:c7:94:d6:ad:ae:0c:2c:09:5c:
b9:1b:51:d2:e9:3a:6b:70:02:d7:47:18:93:9e:a3:
04:48:9d:71:b5:4c:e7:a3:e4:4a:35:b4:66:33:e0:
24:f6:c1:8d:2f:5b:06:85:59:e5:a2:b7:4d:f7:58:
bc:ac:67:cd:0d:f7:b5:2d:22:d0:ae:2a:15:6f:11:
ad:e3:c0:3e:59:20:1d:84:fe:fb:f2:08:7d:99:2b:
43:d8:c3:ad:55:81:f2:d8:f4:4d:81:f8:36:32:bf:
ff:8e:1e:4b:7b:dd:e7:76:3b:48:4f:ad:e5:a2:15:
18:a6:5d:30:28:51:24:69:a7:cb:ed:f9:57:71:32:
24:b2:56:38:aa:df:d0:c3:b3:6d:c7:9b:16:6c:77:
0e:ca:b6:6e:e8:26:8f:b9:49:7f:68:bc:fe:46:3b:
25:43:40:6b:bc:11:ba:42:87:66:fb:b7:49:fb:0b:
f8:d9:ff:df:83:73:2c:31:3c:b8:05:26:47:8f:59:
a7:af:63:65:1a:fd:f7:7f:55:c4:4e:2e:8a:30:20:
92:63:e3:33:e9:e2:ee:63:9c:67:4c:b6:df:53:c8:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:CB:CC:D8:65:D4:EE:5A:0D:41:1A:95:A9:D8:F0:90:88:98:5E
X509v3 Authority Key Identifier:
keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3133382e302e36342e302f32322d3234203d3e20323632353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:4a:a3:e4:d8:23:3e:59:df:9a:02:00:35:a3:64:f3:7b:d8:
88:bc:b7:b4:73:42:a8:4a:0d:69:10:5e:89:7c:f4:fb:ad:6a:
5f:6a:e8:03:31:d8:e2:df:35:04:b0:a3:6f:e3:54:cb:49:ad:
30:e2:a1:69:27:3a:af:97:18:e1:4e:82:f2:db:1f:7b:5e:14:
71:1d:a4:13:9e:8a:50:74:45:d4:74:5b:af:38:98:ec:74:d3:
76:bd:d3:bd:6a:92:9e:b4:cc:66:71:80:96:17:33:8a:e8:fc:
d4:bf:3e:d0:75:79:af:1d:95:af:3d:52:b0:c6:62:04:b2:17:
09:20:4b:c0:14:40:cd:f0:b8:4c:b5:28:ea:ee:46:0e:c2:64:
10:c0:bb:f4:93:4d:bc:00:bb:ef:06:9b:5e:20:9a:b5:a8:2c:
d9:2f:3d:de:ce:e4:06:20:9d:5b:d5:e3:a9:d8:fe:75:e5:be:
b3:ed:31:5b:aa:22:28:6f:06:9c:d6:c4:05:c1:3c:eb:61:7d:
44:a2:32:52:b1:4b:4a:50:79:05:53:88:75:01:6b:00:53:97:
93:a2:e1:d5:e7:74:d7:9f:8e:be:ac:5d:c6:8c:c8:ff:af:b4:
5a:55:23:cf:76:a2:99:ed:c1:53:6b:ae:cc:ec:ae:ed:7b:ea:
55:84:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org