Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3234203d3e203631373435.roa
File: 3133312e37322e3135322e302f32322d3234203d3e203631373435.roa (raw, json)
Hash identifier: e/IaP+Z08yHfYb99p64NAaoCYzLpXVPMPLOFyuGux1s=
Subject key identifier: 0A:3E:4C:D5:CC:7A:C4:70:6C:5A:8B:C3:27:C5:2A:54:0A:8C:D7:AE
Certificate issuer: /CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
Certificate serial: 421C89308859D1CEF8C88FDF698A7C18363B0CCD
Authority key identifier: 57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3234203d3e203631373435.roa
Signing time: Thu 09 Mar 2023 17:40:10 +0000
ROA not before: Thu 09 Mar 2023 17:35:10 +0000
ROA not after: Thu 07 Mar 2024 17:40:10 +0000
asID: 61745
IP address blocks: 131.72.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1c:89:30:88:59:d1:ce:f8:c8:8f:df:69:8a:7c:18:36:3b:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
Validity
Not Before: Mar 9 17:35:10 2023 GMT
Not After : Mar 7 17:40:10 2024 GMT
Subject: CN=0A3E4CD5CC7AC4706C5A8BC327C52A540A8CD7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:99:f7:1e:ab:87:d1:49:93:b9:fb:10:ab:
39:95:d9:29:83:11:b9:1c:4b:3f:d6:6f:dd:91:45:
df:82:b2:2e:27:39:4f:5a:0a:c4:2f:e8:4f:ef:3e:
68:0c:31:f4:05:be:dc:cf:1b:2c:ff:d8:5a:b1:70:
ed:c2:d0:04:38:e1:ec:f7:66:c4:7f:9f:d0:fa:bb:
14:33:96:11:ee:dd:ff:e2:5f:a7:5a:a5:63:94:41:
a5:75:c2:a7:ee:57:35:48:34:af:9c:0b:ad:af:7d:
ae:0c:5e:15:18:d3:15:47:9d:c2:65:7d:b2:8e:30:
63:28:f0:cd:10:91:9a:32:9e:56:71:12:71:60:36:
c7:d3:0a:1c:fd:fe:8c:32:19:b4:0d:1f:0e:b8:45:
2f:79:9c:8a:a1:c6:9b:08:aa:48:73:0e:21:5c:ec:
a8:11:6c:1a:2e:3b:a1:6f:bf:a1:8e:7d:b3:a2:cf:
07:73:dd:d5:48:48:2b:da:0d:24:5f:bb:c2:a4:f0:
a1:82:00:ed:f2:13:b6:b1:9a:32:4a:0f:bc:d1:14:
77:4b:de:75:d5:8f:fd:8b:84:c5:39:4f:23:cd:5f:
66:f1:a3:f2:63:10:f1:06:e4:6e:0a:50:3a:fd:89:
90:69:9d:50:78:cc:fa:d4:a5:fd:0f:03:0d:cd:48:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:4C:D5:CC:7A:C4:70:6C:5A:8B:C3:27:C5:2A:54:0A:8C:D7:AE
X509v3 Authority Key Identifier:
keyid:57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3234203d3e203631373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
18:2f:c0:07:3c:67:10:34:62:62:d6:57:f3:4e:e8:f3:33:24:
42:17:36:d4:5b:32:53:99:ff:8c:7c:f5:5d:a9:ad:c2:7b:7a:
ca:2e:05:41:be:b2:31:cb:54:11:43:6d:52:c6:0c:33:14:67:
23:69:20:e5:9b:8b:2d:e8:3d:08:25:f4:87:42:4c:e6:f1:2c:
49:3c:d5:06:0b:1a:c6:2a:04:2f:05:fa:f6:f5:d9:dc:cf:84:
11:5a:c9:4b:d5:f3:05:7b:0b:3b:d3:5b:4c:21:2d:a9:6c:83:
a3:64:29:27:fd:24:ec:88:60:1e:34:12:83:96:c4:0a:1d:44:
b7:da:ab:86:59:9a:89:a3:2b:d0:46:42:cd:35:1f:1b:92:06:
01:60:f4:ac:b1:c5:9f:42:f9:f8:b2:8c:50:39:62:1d:a9:ad:
93:2f:ae:c6:9f:51:02:0b:8f:96:8c:53:95:06:01:09:c3:29:
78:07:04:b6:15:60:fa:65:72:f8:5c:28:2f:ef:ad:c5:cd:34:
3b:3d:df:59:4e:7d:d1:1c:8b:fe:50:28:76:77:38:8a:05:5a:
1c:91:dc:df:c8:c0:a9:1a:f1:ca:fa:90:4b:b6:a9:7b:38:41:
af:eb:38:6b:4b:83:74:16:4e:d5:bb:98:a0:3f:d2:c3:b6:e9:
d2:95:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org