Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
File: 3230302e3138392e34382e302f32312d3234203d3e203134323034.roa (raw, json)
Hash identifier: NQiebJLE4fEACXI0pnobzsLayzuSERlWyQnJ6XMkrB8=
Subject key identifier: DC:9F:AF:0F:13:1F:CC:83:66:6B:C7:F1:36:96:77:5F:75:CE:BA:01
Certificate issuer: /CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
Certificate serial: 48465E338554EA282B08EB2E4BA9C060A6097ABF
Authority key identifier: 3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
Signing time: Wed 03 Apr 2024 18:31:53 +0000
ROA not before: Wed 03 Apr 2024 18:26:53 +0000
ROA not after: Wed 02 Apr 2025 18:31:53 +0000
asID: 14204
IP address blocks: 200.189.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:46:5e:33:85:54:ea:28:2b:08:eb:2e:4b:a9:c0:60:a6:09:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
Validity
Not Before: Apr 3 18:26:53 2024 GMT
Not After : Apr 2 18:31:53 2025 GMT
Subject: CN=DC9FAF0F131FCC83666BC7F13696775F75CEBA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:bb:a5:d9:00:d0:de:c8:c9:83:0a:14:f1:
ca:bc:b9:8e:27:2f:c1:bd:6a:28:6f:ef:8f:ca:25:
0c:1a:4a:a3:2b:cc:68:43:10:9b:c6:a0:6c:0d:96:
93:2b:64:b1:ba:f5:d1:fa:04:11:4d:15:64:31:51:
c7:de:18:d4:59:ee:30:82:12:28:b5:f8:f3:db:f8:
20:0c:fc:a7:4c:eb:65:36:d5:7f:74:5d:15:52:fd:
f0:7a:10:16:18:fc:c2:4a:f2:0e:7b:33:8c:05:d9:
a0:c6:48:69:1f:ef:ef:3f:1c:13:f8:1a:40:10:2e:
21:dd:0f:ec:94:f5:85:4d:74:91:f9:e0:1b:0c:a6:
23:8e:e8:d3:ca:12:d0:21:de:a1:1f:96:f6:8b:cc:
2d:68:eb:74:1d:a9:8a:d6:cd:2b:74:81:36:bf:4f:
6f:ea:d9:fd:0e:64:91:b8:ad:6d:a6:a0:ae:82:f4:
f9:f4:1c:29:03:01:6f:2f:f0:40:66:c5:c8:e3:bc:
57:1e:6f:a1:49:66:89:e1:b2:93:43:e8:84:c6:ad:
04:ac:d7:d5:7c:8d:31:78:24:94:17:7d:59:7d:5e:
37:a3:69:a6:98:0f:ec:77:e0:32:3b:99:9e:5a:c0:
75:98:ea:01:91:3f:32:da:e2:b4:36:67:16:27:2b:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:AF:0F:13:1F:CC:83:66:6B:C7:F1:36:96:77:5F:75:CE:BA:01
X509v3 Authority Key Identifier:
keyid:3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.189.48.0/21
Signature Algorithm: sha256WithRSAEncryption
96:34:dd:29:10:c2:ea:ca:99:19:26:dd:fb:27:88:89:4b:b0:
79:18:b6:fa:8c:d7:e7:40:e5:5e:12:41:f6:78:05:d1:d6:84:
16:ee:5e:d8:30:0e:5a:44:01:dc:57:2f:38:32:6e:9e:04:2a:
64:57:7d:00:53:63:71:1b:87:ff:a0:c0:0b:eb:1f:4c:09:1d:
0a:d5:56:5f:57:7b:ae:9b:c4:bc:d4:c1:76:5d:5c:56:76:b3:
66:86:2e:2f:e4:2e:4a:95:4a:24:fb:2a:64:9c:66:18:8c:96:
3d:5c:c0:ea:37:c7:17:1f:77:78:9a:cc:d0:79:17:05:dd:cd:
b1:a6:01:31:37:ec:f8:67:e7:d0:fa:95:a3:2c:a8:31:60:ab:
8b:e9:7c:7f:57:5c:1a:e9:d1:e6:bc:32:71:23:d4:1b:44:e2:
b0:8b:43:d2:a0:8f:e0:c2:f6:88:fe:35:d5:72:f9:a5:39:b5:
0e:3b:ad:02:99:91:2f:67:cd:75:d7:e8:e5:d1:ad:ab:63:45:
34:00:27:10:3c:eb:7e:9c:d7:e1:51:53:ad:48:be:51:00:2f:
c5:a9:16:ef:de:b9:de:52:fb:d7:99:f5:a7:fb:eb:95:8c:af:
50:e1:e0:f8:36:5b:cd:3d:62:07:ab:e7:42:5d:19:d9:f3:0d:
65:58:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org