Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137372e38352e302e302f32312d3234203d3e20323632353935.roa
File: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (raw, json)
Hash identifier: cObvG3EMzwYcyMbM3NVMPwTX3ZwD5epL7wbf3pjha6Y=
Subject key identifier: FF:84:20:CC:F0:DB:B6:2B:29:08:AC:4F:57:73:88:B1:DD:E5:B8:4E
Certificate issuer: /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial: 39E7D2CA0EAB263243DE546C8EB6E6944F3ED326
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137372e38352e302e302f32312d3234203d3e20323632353935.roa
Signing time: Thu 30 Nov 2023 20:00:00 +0000
ROA not before: Thu 30 Nov 2023 19:55:00 +0000
ROA not after: Thu 28 Nov 2024 20:00:00 +0000
asID: 262595
IP address blocks: 177.85.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e7:d2:ca:0e:ab:26:32:43:de:54:6c:8e:b6:e6:94:4f:3e:d3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Validity
Not Before: Nov 30 19:55:00 2023 GMT
Not After : Nov 28 20:00:00 2024 GMT
Subject: CN=FF8420CCF0DBB62B2908AC4F577388B1DDE5B84E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:cd:ea:d8:69:d7:06:39:92:c4:b8:2d:86:
41:c2:8e:84:12:0d:bf:ce:b6:32:57:b9:a8:55:f3:
4b:27:25:b4:63:51:08:5b:22:bd:bc:91:d0:26:74:
fe:d7:0b:1a:92:09:e3:77:0b:51:6c:91:ea:61:0c:
58:72:8f:5a:30:bb:b7:32:b7:3d:c8:98:1c:e3:ac:
89:37:86:8e:dd:51:be:bb:5d:73:a5:76:6a:83:90:
4f:61:a3:ad:0e:84:7b:14:be:3f:86:9d:c3:f3:45:
a8:67:c9:cb:49:b3:a8:12:a5:8c:c7:34:61:1a:8a:
6d:2f:48:62:2f:fa:ac:ac:68:63:cc:88:b5:d9:56:
12:3d:dd:3b:8a:83:ba:e2:0b:de:81:aa:80:de:88:
90:76:3b:46:c3:7b:63:58:8b:1e:64:3c:2c:ce:7e:
46:f9:f8:f8:86:4f:a5:30:9a:d3:f6:ca:3a:81:73:
85:ed:a0:12:c3:47:7f:32:f1:a8:da:09:61:fc:ca:
7c:a0:f3:b9:27:16:43:d3:44:91:f8:90:c8:f6:25:
78:77:4d:07:45:fb:8f:e3:b3:7f:77:dd:60:8b:b8:
36:40:95:b8:72:68:47:07:72:89:2d:91:66:93:17:
4f:5e:9c:57:fd:02:55:0b:17:f7:f7:31:e2:05:7a:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:20:CC:F0:DB:B6:2B:29:08:AC:4F:57:73:88:B1:DD:E5:B8:4E
X509v3 Authority Key Identifier:
keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137372e38352e302e302f32312d3234203d3e20323632353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.0.0/21
Signature Algorithm: sha256WithRSAEncryption
38:96:c6:3c:f9:e9:6c:9a:a5:19:c6:08:1e:28:ea:ab:87:49:
ea:fa:f6:de:fb:21:9a:ce:6a:62:48:9f:c5:f4:db:fc:f6:25:
37:ca:ce:2b:d7:8c:45:8a:88:1f:d4:66:e2:a4:c4:5b:17:09:
36:af:be:38:17:b6:5c:26:8e:cc:c1:f0:8e:17:aa:17:0d:f4:
69:0e:c2:de:69:9e:6c:e9:cd:2f:6e:d9:f2:12:3e:d1:e2:fa:
92:56:d8:93:47:3d:0d:ef:ed:2a:ee:a7:8b:25:ba:43:3d:2a:
42:eb:84:43:62:75:c9:99:b5:0c:a1:3e:a6:39:a2:c9:62:35:
69:b7:e8:07:46:4a:2b:cc:8d:90:d4:05:79:de:d6:dc:be:e2:
cf:ef:fa:f3:02:04:10:fc:3c:f2:23:9e:51:5c:b3:60:20:5b:
d9:ed:a4:3a:12:b8:39:0d:18:3a:7e:9b:aa:f2:46:d8:be:71:
fd:48:1f:09:05:2a:55:b0:8c:ca:b1:03:27:f6:d4:8f:bc:b7:
f2:a8:c3:ff:b9:b3:11:dd:ec:94:96:7e:75:cb:93:65:58:2e:
2e:b5:1b:e4:06:66:ee:62:f1:98:bb:14:10:e2:9c:9a:f7:86:
55:4a:de:f7:9d:d8:a8:0b:47:41:8c:05:1b:c9:cd:62:79:b1:
36:b7:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org