Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa
File: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (raw, json)
Hash identifier: lFcn+NKMvTy88Ys8cZN2vYsWVGvuk0cuqEBnCw8jD5I=
Subject key identifier: 82:E9:3A:24:CD:F4:49:95:B0:1B:E7:7F:78:C2:30:4D:1F:27:12:AF
Certificate issuer: /CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
Certificate serial: 53C127CC5DEBAA4E31937BAD5CB5741F683DEA0D
Authority key identifier: 45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa
Signing time: Tue 17 Jan 2023 01:37:02 +0000
ROA not before: Tue 17 Jan 2023 01:32:02 +0000
ROA not after: Tue 16 Jan 2024 01:37:02 +0000
asID: 264293
IP address blocks: 138.121.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c1:27:cc:5d:eb:aa:4e:31:93:7b:ad:5c:b5:74:1f:68:3d:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237
Validity
Not Before: Jan 17 01:32:02 2023 GMT
Not After : Jan 16 01:37:02 2024 GMT
Subject: CN=82E93A24CDF44995B01BE77F78C2304D1F2712AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:40:3e:2d:d3:97:69:2a:74:27:91:8f:e4:
8c:77:59:35:7f:b3:a5:a6:c7:b4:f0:43:e6:da:21:
49:62:a9:f2:33:66:5a:a7:0e:e3:72:2c:6b:6c:22:
4b:4c:27:6b:51:f7:63:9a:03:36:ac:4c:70:60:29:
b1:eb:75:09:1c:03:a0:98:61:67:4d:99:d9:a2:f0:
cf:8b:83:c8:3d:1d:56:96:0d:a2:4e:84:74:9d:64:
c4:85:e3:71:b6:d5:ec:0c:c4:58:21:88:3a:cf:ff:
fb:4c:67:94:0e:91:de:57:93:9f:ad:24:a1:da:31:
2a:22:3d:70:16:02:88:bb:34:81:0a:2c:dd:55:ce:
0b:a5:b3:b1:17:89:1f:6f:89:0c:ae:0f:ee:1a:ed:
19:43:aa:ac:77:67:45:6e:f1:d5:cf:b2:de:f4:50:
2e:73:87:d5:61:e0:4f:38:39:3d:e7:ba:1e:1c:3f:
af:80:c7:9d:dc:a5:f0:df:0d:a7:5f:d3:8d:84:96:
6e:4e:9e:e8:01:b4:d6:7a:f7:56:a0:75:b1:1c:0f:
6b:3c:54:58:bc:82:fd:47:05:13:05:3c:ae:fa:27:
59:f1:38:ee:7e:ce:83:c3:23:b3:79:b2:eb:dc:a8:
2c:c5:39:4e:76:6c:da:cf:7e:72:2f:b1:8b:c7:a0:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:3A:24:CD:F4:49:95:B0:1B:E7:7F:78:C2:30:4D:1F:27:12:AF
X509v3 Authority Key Identifier:
keyid:45:C2:B2:7E:F4:0A:0F:DB:E3:D9:87:DA:ED:A2:AD:DB:47:E3:B2:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C2B27EF40A0FDBE3D987DAEDA2ADDB47E3B237.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:52:c2:ef:a7:a9:d8:c4:5b:23:36:76:2b:4f:28:0e:30:91:
f2:0a:74:e9:39:e0:ff:03:10:9e:8c:ce:7e:3a:5f:d1:5b:51:
da:e8:ae:9a:f3:b5:50:53:1b:e0:4e:f4:d0:5f:67:41:0f:66:
ed:4d:9e:c3:57:51:97:6f:fd:44:2f:ed:6b:d6:ee:87:79:5c:
77:83:19:c3:de:08:8e:c5:2f:fd:34:23:9e:de:2d:93:f1:c0:
8f:c3:aa:b7:9b:ff:3c:5b:12:85:ad:b0:d2:9d:71:55:3e:78:
bc:6d:f0:b5:c1:5c:eb:99:93:b5:f3:ab:a7:b8:84:75:6d:ce:
c3:24:88:d1:e9:e3:b3:35:ec:e0:5e:eb:21:37:d8:ac:aa:2e:
62:42:48:0e:e1:52:58:b9:78:f1:fe:20:94:bd:b3:fa:7d:42:
ed:d1:bd:b3:ad:90:1c:9e:e2:a5:32:6c:7e:ea:fe:da:89:35:
64:4a:8f:26:9c:e6:d5:b5:7a:34:58:25:7a:7e:a3:6e:f2:90:
ee:62:3a:e2:64:8d:98:1c:82:a4:ce:c0:18:71:ef:d2:5e:8f:
5e:3f:48:84:6c:17:52:49:0c:47:54:2d:88:1c:43:3e:8e:6b:
1f:d9:5a:04:5d:25:e1:d4:f5:38:12:bc:52:0d:1c:3a:83:c2:
9e:f9:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org