Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa
File: 3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier: Y6xxBcLfHtA7MstARuzXFTEHZ9XNkIvkzAkGwA7ZqrA=
Subject key identifier: 22:7A:23:9E:1C:0C:5F:07:0E:17:B7:05:E7:85:BA:19:4E:31:2B:A6
Certificate issuer: /CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Certificate serial: 20FE4EBE2F4972209D7083C2962FBC363667D1C1
Authority key identifier: 0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa
Signing time: Wed 11 Jan 2023 18:50:58 +0000
ROA not before: Wed 11 Jan 2023 18:45:58 +0000
ROA not after: Wed 10 Jan 2024 18:50:58 +0000
asID: 262535
IP address blocks: 201.159.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fe:4e:be:2f:49:72:20:9d:70:83:c2:96:2f:bc:36:36:67:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Validity
Not Before: Jan 11 18:45:58 2023 GMT
Not After : Jan 10 18:50:58 2024 GMT
Subject: CN=227A239E1C0C5F070E17B705E785BA194E312BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:99:ff:0c:ef:e0:4d:a2:1b:3c:65:f9:5a:
7f:ee:0f:4f:39:a4:74:28:ed:8d:01:e6:80:25:8d:
d7:e0:b8:df:a8:0e:0f:68:cd:6f:f4:f5:b2:1e:d2:
32:7b:3b:64:36:f7:0e:e9:9f:b5:62:c6:5a:ea:e5:
94:b0:97:6b:e8:af:8e:87:5a:cd:cc:2b:d1:2b:e2:
46:72:a4:f4:e6:ae:b5:6a:fc:ac:dc:e3:cd:7f:61:
7f:2d:b0:a5:19:9e:be:2f:69:31:1d:25:62:1f:65:
fd:7e:38:74:15:a3:fe:24:9c:6d:83:15:68:2c:e8:
9d:2b:47:98:a1:f9:1a:64:1f:ca:27:43:88:d8:56:
1a:b2:58:6d:52:bb:92:ee:de:5e:da:2d:2b:49:53:
50:9f:71:60:78:87:9a:ea:97:bd:90:52:7e:e2:8b:
0d:dc:dc:05:26:60:09:06:4f:78:2d:2c:9b:e9:68:
f9:4a:ca:8c:f5:f4:95:3b:bc:98:81:8f:48:95:cc:
52:4b:15:c5:6e:31:70:75:9c:fe:85:00:7c:15:5e:
78:57:dd:31:00:be:e3:64:8a:2c:e8:79:03:44:e9:
c9:b7:23:b3:f1:9b:73:ef:99:b0:f7:13:18:1c:c7:
42:e2:9f:25:e4:3f:de:e1:c6:5f:8e:03:6a:30:85:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:23:9E:1C:0C:5F:07:0E:17:B7:05:E7:85:BA:19:4E:31:2B:A6
X509v3 Authority Key Identifier:
keyid:0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131382e302f32342d3234203d3e20323632353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.118.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d1:87:10:aa:a5:9c:b6:a0:bb:00:37:8a:93:5d:f5:fd:26:
a4:75:18:2a:7b:4a:b1:de:43:67:27:59:11:b1:c7:5d:10:0e:
ee:07:04:89:1e:42:9f:59:ad:2b:cf:d8:e6:e2:12:ad:90:d1:
0e:58:5c:d0:e5:6e:cb:22:58:bb:fd:05:0a:70:d3:6d:86:17:
61:05:09:1c:98:64:be:16:85:f3:3f:71:f9:02:09:8f:d5:83:
79:46:38:d1:58:ba:1a:27:11:dd:3b:8a:03:86:5e:20:7c:4f:
a1:9b:d0:57:4e:c3:84:93:e2:ec:72:ba:22:a5:3f:06:51:67:
17:d5:14:2f:0b:10:14:b6:48:f0:b6:80:0e:04:81:0c:0d:90:
04:a4:bd:ed:e9:d8:d4:6f:f3:ea:98:8c:b4:60:41:54:ec:ce:
cf:7b:4f:32:a1:c6:e6:39:b4:b7:f6:5f:69:bb:38:2d:b5:7b:
84:eb:54:56:58:8b:f7:d0:21:91:fd:56:74:fe:1b:52:3b:ad:
8e:fe:09:de:85:f1:a9:52:22:a1:0a:88:23:45:fd:45:9d:74:
eb:be:ae:fb:b4:37:c1:66:18:38:98:a8:af:05:b2:f4:97:89:
a0:39:f3:0a:1b:a7:b5:e7:8a:6d:2f:09:6b:78:65:3d:2e:c0:
5e:ff:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org