Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
File: 3136382e3230352e38362e302f32332d3234203d3e203532373830.roa (raw, json)
Hash identifier: hMG/Kzlblogxy/+/rwj5/9YTeaaPZMHnfmuZbrc/CJE=
Subject key identifier: A0:C2:43:DA:9B:03:7E:3D:B2:56:15:64:58:99:84:8F:DD:FB:05:AA
Certificate issuer: /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Certificate serial: 1343EA3E513FE11A8D02ED962A7CFDA337659E8D
Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
Signing time: Tue 05 Dec 2023 14:44:32 +0000
ROA not before: Tue 05 Dec 2023 14:39:32 +0000
ROA not after: Tue 03 Dec 2024 14:44:32 +0000
asID: 52780
IP address blocks: 168.205.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:43:ea:3e:51:3f:e1:1a:8d:02:ed:96:2a:7c:fd:a3:37:65:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Validity
Not Before: Dec 5 14:39:32 2023 GMT
Not After : Dec 3 14:44:32 2024 GMT
Subject: CN=A0C243DA9B037E3DB25615645899848FDDFB05AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:8e:14:b7:d5:1f:22:2d:9c:16:4b:7b:93:
67:27:da:61:26:45:32:df:6a:fa:cc:17:a1:b0:ad:
4c:14:8a:63:91:a6:89:a5:5d:eb:dd:83:9e:f3:85:
83:ea:1c:07:6f:c3:90:d8:9b:be:d5:26:54:f1:d4:
72:9d:b6:9a:9e:04:d5:7b:de:b5:0f:d1:ac:55:f7:
ae:6b:12:52:fb:9b:2f:0c:4a:a0:6e:66:dd:24:df:
aa:9c:eb:84:d3:e9:9e:4b:ab:fb:3e:08:b2:99:e8:
05:5c:68:b1:76:3c:72:f7:a7:80:78:17:0e:05:5b:
20:a9:8d:5b:17:ba:b8:5d:96:17:bb:b3:c0:44:65:
07:b4:b7:63:f6:6a:e3:20:a3:e8:1f:e3:fd:9c:cc:
be:0c:ad:86:8a:e0:63:0c:bb:29:94:98:e6:f5:c1:
a6:77:fe:b1:35:6a:23:45:13:e9:dd:f7:ae:b5:e1:
2b:11:b6:bd:c0:df:11:3a:16:ee:b1:56:49:c0:eb:
0c:ce:71:32:11:2a:79:e3:bc:9c:06:18:45:9b:ab:
5d:4c:71:c7:1b:11:b3:aa:00:52:bd:6c:f3:32:68:
32:c0:51:52:a7:69:0f:b6:6d:79:60:97:4e:9f:27:
55:de:d9:11:1a:a6:4e:5f:0d:69:5b:25:25:d1:9a:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:43:DA:9B:03:7E:3D:B2:56:15:64:58:99:84:8F:DD:FB:05:AA
X509v3 Authority Key Identifier:
keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3136382e3230352e38362e302f32332d3234203d3e203532373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.86.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:e9:04:9c:bf:b2:c1:03:29:65:0a:45:c6:9c:aa:67:b5:f2:
28:67:f0:0e:e2:45:5d:dd:d3:5e:7c:f5:4e:cf:71:41:7f:22:
68:55:be:18:01:7f:3a:aa:72:b1:e7:fe:03:98:d8:98:6a:ba:
00:7c:7f:3d:8b:57:ae:94:ed:cc:45:b5:a3:fc:90:a3:e4:fc:
86:80:18:b7:ae:34:73:c7:d0:2c:56:b9:42:8f:95:44:a4:2e:
50:36:c9:62:f1:b7:a8:84:39:8f:d3:0e:b2:b9:a2:f5:21:ab:
ca:da:28:56:79:f6:a8:30:a5:ac:49:8a:db:98:22:39:97:79:
1b:78:96:2e:2d:87:c0:81:ab:5f:43:25:93:55:82:36:ab:f0:
0f:13:cb:56:59:f0:60:27:1a:bd:cc:ee:92:d6:46:bd:f1:15:
e4:e3:5d:fb:b2:f7:51:c5:ff:89:fc:7e:d8:a9:0d:5c:e6:4f:
e3:91:60:7c:47:f8:c8:e7:35:13:6e:01:74:2b:c9:c4:53:a8:
59:70:66:51:79:b7:06:2c:d5:5c:ae:c3:52:21:7d:2f:b3:5a:
99:d0:b5:cf:2e:d8:27:a7:65:98:4e:9d:b1:78:05:0e:8d:d3:
2b:21:73:e6:d5:8a:93:39:53:b7:1b:9d:6d:7b:58:c7:7d:29:
25:ad:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org