Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32342d3234203d3e20323633303733.roa
File: 3136382e3132312e3139322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: zBr9tYHhutxs4BlmgyVjrrL0QV3Vb6Ac5OmK3xrq2/o=
Subject key identifier: 3B:5D:E6:8A:11:67:01:21:72:DA:02:4C:09:51:EC:BB:47:F5:CC:E2
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 3F2197A086B60EC5DDB60F9DEC82DE8FDABFC45B
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:07 +0000
ROA not before: Fri 22 Dec 2023 20:20:07 +0000
ROA not after: Fri 20 Dec 2024 20:25:07 +0000
asID: 263073
IP address blocks: 168.121.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:21:97:a0:86:b6:0e:c5:dd:b6:0f:9d:ec:82:de:8f:da:bf:c4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:07 2023 GMT
Not After : Dec 20 20:25:07 2024 GMT
Subject: CN=3B5DE68A1167012172DA024C0951ECBB47F5CCE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:22:21:9f:3d:8e:1b:cb:d2:3b:72:dc:49:
7e:e0:4d:12:fa:e2:38:fb:37:c5:7e:41:57:45:18:
b2:52:d7:1a:df:d9:cf:02:08:03:10:72:e4:b0:49:
9e:dc:3c:c5:1c:3b:5d:37:db:31:19:4c:ca:fc:70:
e6:40:cf:12:c1:17:9c:60:9c:d8:af:70:e4:5e:ef:
67:d7:d3:0d:5e:02:ba:39:52:82:b9:54:61:07:a6:
bd:84:0d:16:04:ab:7a:77:76:01:73:e8:ea:aa:7d:
8a:d8:78:a4:d4:50:b3:a1:5b:17:d8:17:10:63:a3:
f1:47:ae:c9:33:75:8b:6c:aa:e1:db:d5:e3:ab:37:
a3:71:a2:0f:ed:82:ea:21:6b:8b:f5:98:9a:16:44:
03:ab:bd:5c:c8:44:6f:c9:64:64:41:05:c2:36:3f:
cd:dc:6c:51:3d:83:5d:e2:0c:83:73:3b:87:8a:aa:
d3:48:05:5d:de:ce:1b:2a:6b:cd:b2:f6:3b:82:be:
fc:1f:0a:df:d5:36:c5:01:7f:fa:bf:8a:d7:b2:87:
f9:e7:d5:36:b3:25:20:0b:d2:9d:2e:68:d7:45:6b:
59:d2:6f:59:7d:96:f9:d3:dc:ea:0b:1d:ec:ba:2b:
27:6b:9e:51:88:cc:d1:d2:00:33:25:35:3b:98:88:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:E6:8A:11:67:01:21:72:DA:02:4C:09:51:EC:BB:47:F5:CC:E2
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139322e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a0:9e:e1:44:d9:fa:b5:cf:f6:71:e5:88:92:a6:fe:e7:fc:
78:dc:66:a8:21:74:70:f6:02:58:5d:4e:24:f5:c0:8e:fb:db:
e0:d9:52:c7:0f:df:2b:1e:78:fe:5d:9b:78:af:4b:8f:ed:3e:
ab:75:1b:34:1d:13:fa:a9:b2:d2:02:d0:b5:64:60:95:13:e6:
a8:16:45:b2:74:69:1f:41:08:56:e6:f8:26:5b:ca:9b:79:f7:
e9:9b:1c:64:ab:3b:51:0f:f1:7b:ff:6c:7a:52:90:a8:79:1c:
cf:84:a6:5d:bc:85:8e:4e:43:33:ab:2f:6f:dc:30:cc:98:f8:
25:b7:d8:61:b5:9f:7c:a0:c4:3c:80:5c:4f:05:c8:fb:38:6a:
38:8d:ff:00:38:f6:0f:24:3a:ad:af:2b:0e:00:84:28:df:5b:
09:ec:c6:4f:a0:ef:e8:9b:2c:48:de:f0:92:4e:95:69:0c:bf:
77:31:ca:c1:d6:ed:b9:90:84:a8:67:7f:5d:3c:9d:08:f1:61:
61:4d:93:ef:9c:c8:ff:0f:50:0e:a0:a7:e9:ce:0d:aa:40:87:
7e:c4:7f:ca:1d:fb:60:23:c6:8d:0d:80:b1:f2:4a:4d:48:3e:
04:a0:0d:d2:5a:96:e0:a7:c3:c9:29:e4:d1:c1:e9:07:19:05:
9b:20:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org