Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32322d3234203d3e20323632333639.roa
File: 3133382e302e34342e302f32322d3234203d3e20323632333639.roa (raw, json)
Hash identifier: Mvu3AN0Z/1txT46TGvGV9iLVFREZhvU6GqpNYoVlSpQ=
Subject key identifier: 75:E7:6C:DF:5E:AD:91:19:06:82:71:52:DC:4D:40:14:E5:8B:1C:23
Certificate issuer: /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial: 21891860F8B3F6A857DB0DF54799453908CFF5B9
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32322d3234203d3e20323632333639.roa
Signing time: Wed 22 Nov 2023 13:08:34 +0000
ROA not before: Wed 22 Nov 2023 13:03:34 +0000
ROA not after: Wed 20 Nov 2024 13:08:34 +0000
asID: 262369
IP address blocks: 138.0.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:89:18:60:f8:b3:f6:a8:57:db:0d:f5:47:99:45:39:08:cf:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Validity
Not Before: Nov 22 13:03:34 2023 GMT
Not After : Nov 20 13:08:34 2024 GMT
Subject: CN=75E76CDF5EAD911906827152DC4D4014E58B1C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:93:cd:cc:da:62:fe:46:dd:71:6f:c5:94:
d6:80:b8:0a:ac:a0:81:dd:0d:32:b4:e3:49:31:00:
9a:67:db:e8:42:a4:1b:dc:60:02:48:11:86:2e:3b:
87:35:f6:af:79:b9:86:1e:75:91:2f:93:99:a9:04:
a4:6c:e4:ac:a4:97:38:b7:19:1d:59:97:a5:70:39:
36:8e:9a:32:11:58:b5:f7:70:ac:ca:21:68:17:b0:
5d:c3:ba:2b:8e:df:76:0c:a2:45:be:f9:20:74:0c:
ec:46:92:bc:71:24:e1:c7:58:43:83:ed:26:74:c8:
72:e0:b1:14:e3:fb:40:71:38:14:5e:3b:98:36:8f:
19:e9:d6:92:4a:18:ce:72:51:fd:b9:b5:6a:9d:6d:
f3:57:21:74:aa:ce:9e:15:97:79:58:ce:8f:53:6f:
c4:00:fc:be:85:4e:d5:5c:c2:0f:3f:d2:ad:13:3d:
4f:18:dd:d3:c6:66:9b:5d:00:99:c1:7e:76:5f:0b:
5d:24:33:1d:ba:ff:7d:f3:bc:23:26:d2:c7:05:bb:
90:62:d4:5d:ae:c9:d4:8a:83:85:6a:11:a1:01:50:
c2:d4:06:fc:84:71:69:27:03:bf:c6:32:20:d9:82:
d0:ba:1d:94:86:b6:b8:25:9b:d9:0b:db:f7:75:eb:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:6C:DF:5E:AD:91:19:06:82:71:52:DC:4D:40:14:E5:8B:1C:23
X509v3 Authority Key Identifier:
keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32322d3234203d3e20323632333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:87:24:04:52:c4:f3:f5:cc:e1:22:bf:c4:a3:72:f0:25:69:
b3:2c:b5:a2:c1:dc:00:af:b8:0a:e2:8f:ea:5b:76:48:4e:49:
d6:6a:7b:01:af:ba:25:0c:85:7f:5d:2b:80:c0:7e:39:64:85:
a7:cf:0f:58:fc:64:ff:45:1d:ea:43:1f:c1:c1:20:39:8c:12:
2f:ae:d0:18:c5:75:ac:8a:f5:1c:3c:5c:46:67:ea:b7:da:07:
1b:fd:1b:71:a2:ce:93:10:a4:ca:b8:12:b9:07:94:51:aa:d0:
28:61:f3:b3:bf:ba:03:52:87:fe:5e:66:ed:45:ab:7d:73:61:
15:dc:76:63:8d:16:76:1c:0d:04:ee:b7:76:70:bf:dd:35:18:
ee:9c:16:cd:65:50:fc:8e:d3:a0:ae:ca:4b:9b:ca:d7:a4:d5:
e0:31:eb:75:01:57:b2:4d:31:cc:7e:dc:97:7f:ca:ca:dd:5e:
88:ee:4f:6d:a3:14:10:0a:2f:3e:71:42:2b:db:fa:af:81:78:
a4:e3:31:9f:d1:52:32:ef:f0:50:c6:91:ae:6e:b5:68:02:20:
ca:54:03:a9:a2:34:bf:09:9f:f9:29:31:59:76:48:bb:ab:00:
68:37:73:d8:05:a6:80:97:82:a6:e4:70:9c:18:58:84:96:65:
5b:01:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org