Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa
File: 3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa (raw, json)
Hash identifier: zWnf0gbgffqHAswLT2DFQy1kPpFQXcIeHUDjBwjXtdg=
Subject key identifier: A3:D8:4F:4F:F0:C2:9D:53:CD:4E:69:20:4E:48:DA:2A:31:61:8C:16
Certificate issuer: /CN=9F89116D43866DC49358C8871BDCAA64A5740808
Certificate serial: 7032090FBF60F484BA2AF79051E0F83A742DEAA3
Authority key identifier: 9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa
Signing time: Thu 20 Apr 2023 14:14:19 +0000
ROA not before: Thu 20 Apr 2023 14:09:19 +0000
ROA not after: Thu 18 Apr 2024 14:14:19 +0000
asID: 264215
IP address blocks: 138.99.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:32:09:0f:bf:60:f4:84:ba:2a:f7:90:51:e0:f8:3a:74:2d:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F89116D43866DC49358C8871BDCAA64A5740808
Validity
Not Before: Apr 20 14:09:19 2023 GMT
Not After : Apr 18 14:14:19 2024 GMT
Subject: CN=A3D84F4FF0C29D53CD4E69204E48DA2A31618C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:37:7d:f3:8a:e4:52:4b:b5:92:86:12:4c:
aa:43:12:c4:38:20:ec:fa:e1:4b:84:d5:b1:58:15:
a7:86:4d:05:15:71:18:d3:ea:42:16:c1:71:ca:6a:
0b:3f:04:3e:02:e7:63:ac:10:75:78:9c:77:26:3e:
52:81:99:98:07:72:84:c6:1b:98:04:86:f9:6f:3b:
ec:8d:47:e9:9a:3e:e4:44:19:c4:11:af:ce:6c:03:
93:29:ac:2d:74:c3:2f:b2:3a:b5:45:d2:e5:27:34:
82:b5:fe:68:ad:66:95:da:a8:01:e4:aa:de:30:16:
e5:4a:8b:58:18:7b:67:a2:73:50:e6:ad:f4:cb:2e:
0d:7d:be:eb:41:ae:77:63:a8:80:5b:75:fa:af:b4:
89:77:2f:e1:3b:0f:cd:7d:5e:ef:0d:42:88:f2:a8:
64:15:c4:24:91:fc:0c:32:59:bb:55:16:9e:60:02:
96:6a:77:8f:ce:2a:16:93:6a:92:f8:5f:3b:8b:3f:
4e:57:f8:c3:00:f3:1b:fc:f2:41:40:e3:d4:fb:fc:
c5:62:11:a8:ef:a6:d6:0e:d4:dc:96:e2:9a:49:9d:
b8:48:0e:e4:ae:4d:09:68:eb:9c:c5:8e:31:1d:e1:
ba:7b:9e:a9:19:54:8a:02:f8:b1:42:82:b4:f6:b8:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:4F:4F:F0:C2:9D:53:CD:4E:69:20:4E:48:DA:2A:31:61:8C:16
X509v3 Authority Key Identifier:
keyid:9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/9F89116D43866DC49358C8871BDCAA64A5740808.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:8d:fb:e5:d0:11:b9:19:2e:bd:f4:22:2b:26:46:01:54:
fb:a5:7d:08:19:16:4b:6d:03:ef:28:ba:50:9d:96:48:50:50:
63:98:92:f0:c7:a0:14:ef:c5:f6:aa:f0:f4:b9:b4:fe:9a:3b:
46:43:5a:50:d8:19:4e:8d:4f:fe:c7:a9:cd:b0:84:03:09:a5:
d9:d8:56:84:92:f8:bf:c1:f7:b9:20:93:76:63:2e:03:4a:c4:
c4:8a:59:2b:00:20:e9:05:62:db:a2:7a:e6:dd:67:b7:6e:33:
88:da:88:ad:85:38:8b:e4:17:a8:d3:64:d8:3b:e3:6c:75:81:
49:e4:cb:97:9e:2c:ce:31:a4:b4:37:a8:b9:25:87:ae:30:6a:
23:0a:64:e2:49:f6:06:06:42:8a:cc:1d:7f:06:19:db:72:e6:
57:14:49:d1:52:87:06:3b:63:8c:fb:9c:8d:01:98:b4:02:c4:
e8:cd:c8:82:02:1b:f5:82:23:d2:b3:b1:24:e2:ff:e3:39:bd:
bd:1c:a7:b5:36:bb:63:be:6c:cc:67:f0:8b:11:5e:cb:1d:26:
cb:c6:13:4f:ce:95:aa:90:31:7f:d6:26:e3:38:4a:67:b8:58:
54:6f:ca:e1:25:b2:d2:34:55:70:f6:81:f6:79:cc:9d:1b:12:
3d:95:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org