Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
File: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier: grquM0etDMv6Swf8SSxpXwmjnIcSVxqWpcP1bqm/ks0=
Subject key identifier: FD:1D:52:53:77:B0:DD:C9:6C:0A:1E:E3:22:8D:93:43:7F:6D:5E:D8
Certificate issuer: /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial: 362845C5F5D86E8971EE6AE05ECA0F9D507431A5
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
Signing time: Tue 27 Feb 2024 17:28:59 +0000
ROA not before: Tue 27 Feb 2024 17:23:59 +0000
ROA not after: Tue 25 Feb 2025 17:28:59 +0000
asID: 263945
IP address blocks: 138.219.180.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:28:45:c5:f5:d8:6e:89:71:ee:6a:e0:5e:ca:0f:9d:50:74:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Validity
Not Before: Feb 27 17:23:59 2024 GMT
Not After : Feb 25 17:28:59 2025 GMT
Subject: CN=FD1D525377B0DDC96C0A1EE3228D93437F6D5ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:2e:01:4e:dd:a3:3c:10:0e:50:88:51:bf:
bc:1b:dc:f7:0a:bb:80:21:a8:a0:7a:f0:0e:34:0c:
7b:3d:0e:28:5b:d8:35:36:18:86:16:98:cb:1e:7e:
cf:65:22:a5:2b:68:72:16:c5:78:a6:70:ac:f8:3b:
ff:1b:ee:46:ac:e5:6e:78:85:43:9c:86:c6:8f:13:
80:0f:35:b0:2c:b0:32:c3:34:13:c8:ca:79:5a:50:
b0:59:3d:3d:80:ed:24:42:b0:00:d0:c8:61:2a:fc:
6a:ec:17:10:81:bb:36:d3:3f:ce:57:09:b0:c0:ff:
b7:1b:b6:be:49:f6:cd:01:35:71:96:df:3c:72:7f:
a8:b4:ba:49:6e:8f:49:70:79:fd:9c:c1:65:e1:44:
5e:e3:af:ac:af:93:8a:fb:ae:d5:63:f6:73:d9:ba:
e6:53:1f:19:6b:5a:b8:9e:eb:07:7f:eb:e8:87:cc:
fa:38:3a:26:db:7b:56:53:4c:29:b2:8a:dd:a8:af:
75:b4:fc:a4:04:c6:ea:e6:6a:1a:ad:34:91:55:87:
ff:14:c3:36:bc:5c:19:d8:f1:6c:17:06:28:82:2a:
ea:2b:b2:39:67:37:03:86:e7:a0:ff:ae:20:c5:68:
82:f1:ba:2b:56:2e:8c:93:99:f7:13:75:14:40:d0:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:52:53:77:B0:DD:C9:6C:0A:1E:E3:22:8D:93:43:7F:6D:5E:D8
X509v3 Authority Key Identifier:
keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.180.0/22
Signature Algorithm: sha256WithRSAEncryption
54:49:ec:50:ef:51:f0:c5:05:8d:e6:ef:14:1c:96:0b:20:52:
f8:e1:7a:6e:1e:3b:11:60:fb:fd:96:22:00:58:01:ff:5a:ef:
2d:f6:d9:d9:9c:dd:49:d3:9c:f2:05:1d:e3:59:b2:c3:c3:8e:
27:67:df:87:e7:fd:9a:49:6f:e0:23:33:00:69:bd:d0:e9:7b:
9a:d6:bb:61:3e:73:e5:36:d7:b3:20:92:fa:f3:39:aa:3f:83:
a4:5d:e7:b7:6b:f6:c3:97:be:fb:95:2f:80:62:65:2e:d7:a7:
08:ef:66:74:84:e4:61:76:78:d5:57:ec:21:35:bd:9d:b2:5c:
8b:71:3f:f3:f4:48:75:6a:25:7f:be:e5:a2:59:e9:c4:c8:32:
9f:f4:44:8c:36:43:bc:14:bb:5e:23:bd:7b:90:42:e1:19:fe:
ef:0d:9f:b9:aa:f8:d4:d8:ec:48:bf:35:2f:4c:40:fb:aa:c8:
d9:9c:31:1a:cb:40:2e:9d:73:29:04:53:93:c1:94:fa:dc:ed:
39:97:bf:20:39:6a:cd:e2:df:e6:1a:ec:ae:0e:b6:11:18:1f:
ec:78:2f:e2:61:cb:15:c1:28:63:7d:a2:a3:af:90:0e:78:e1:
72:7f:84:49:ef:6f:d0:f4:79:0e:4e:96:19:90:bd:14:1e:fd:
bf:af:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org