Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
File: 3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa (raw, json)
Hash identifier: o6GyVd9BzfwoEMXjjA/oXppK0kQYVUnEVfyNNfOGRws=
Subject key identifier: F3:11:65:BE:5A:94:A7:FE:FF:E7:45:25:D0:CD:ED:0E:A3:4D:2A:6A
Certificate issuer: /CN=259481EEE5B47AA88639E34B0669E6971794C977
Certificate serial: 1ADF8A4162CBB9CE0009246576F84A50E018EF47
Authority key identifier: 25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
Signing time: Thu 18 Jan 2024 18:43:14 +0000
ROA not before: Thu 18 Jan 2024 18:38:14 +0000
ROA not after: Thu 16 Jan 2025 18:43:14 +0000
asID: 264293
IP address blocks: 138.121.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:df:8a:41:62:cb:b9:ce:00:09:24:65:76:f8:4a:50:e0:18:ef:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259481EEE5B47AA88639E34B0669E6971794C977
Validity
Not Before: Jan 18 18:38:14 2024 GMT
Not After : Jan 16 18:43:14 2025 GMT
Subject: CN=F31165BE5A94A7FEFFE74525D0CDED0EA34D2A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:d1:eb:37:da:86:4d:5d:9e:73:02:7c:73:
ed:ab:34:03:f5:55:c7:0d:0f:29:68:e4:02:84:52:
3d:24:f9:6d:53:cd:76:c0:dc:5a:0e:4e:9b:f1:74:
57:3c:ac:cc:c9:bb:d1:fc:1a:a9:12:87:9e:2c:82:
0b:5c:e2:4b:67:55:d8:95:ac:8b:08:d8:3a:61:86:
42:b9:d5:f9:fa:97:58:c7:7f:53:3f:ba:f1:96:67:
1e:67:42:8e:ad:61:4f:8a:5c:63:ec:55:97:0c:02:
95:39:9f:62:35:20:3b:af:4e:fa:b4:1b:05:22:2a:
8f:94:2f:44:a5:70:87:b2:00:09:01:f3:81:38:ec:
27:07:30:e6:f4:13:a2:47:13:a8:1c:63:a9:fc:28:
b1:c9:55:26:97:f6:20:e0:06:37:9b:fa:bb:d1:b1:
ea:a1:ab:c6:68:a5:66:17:65:1f:94:dc:49:6b:f3:
c7:12:69:d2:35:50:cc:c2:5f:bb:2c:d4:3c:81:49:
b3:73:cd:c3:5c:03:23:28:1e:33:d8:cf:09:8d:89:
ad:a1:c3:71:33:67:37:8b:09:23:ca:f2:12:ff:b9:
63:83:97:87:05:5a:52:d2:e5:f2:56:4b:e5:2d:c5:
54:3a:09:7f:4d:a8:45:8a:20:28:94:f5:3d:a5:8b:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:65:BE:5A:94:A7:FE:FF:E7:45:25:D0:CD:ED:0E:A3:4D:2A:6A
X509v3 Authority Key Identifier:
keyid:25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32332d3233203d3e20323634323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.120.0/23
Signature Algorithm: sha256WithRSAEncryption
56:a6:16:ab:12:fd:14:d0:e7:d3:c5:86:e3:20:4d:58:9f:a3:
63:c8:88:b5:b2:9a:f0:2e:03:b3:3c:11:ee:48:a0:38:4d:90:
dc:65:6b:dc:8e:9f:76:1f:23:55:a2:54:66:21:46:75:d3:76:
15:3d:7f:1c:bf:e1:98:e1:16:84:03:68:bc:24:65:9f:00:a4:
36:1c:6b:1d:3e:4e:a7:a6:73:70:63:89:dd:e7:1f:5f:78:34:
fe:73:a9:dd:f4:0e:98:b8:80:85:db:86:78:80:08:df:4e:11:
d9:60:c7:32:d7:6d:70:9a:74:d0:23:84:38:67:83:0e:7d:fe:
06:40:48:0b:5a:ba:27:58:76:c3:f6:76:03:d9:ec:57:7a:88:
bc:3b:7d:e2:3b:90:58:f1:de:9a:b6:8b:46:df:47:6f:ef:27:
85:ca:47:97:01:5e:7a:14:12:0d:e9:42:69:98:b9:59:4b:f6:
76:60:7c:ed:0b:25:ae:fb:17:aa:9a:6d:89:03:6c:ef:36:10:
da:70:11:50:93:e9:35:6e:dd:2c:de:91:f4:97:e2:90:1e:6b:
f5:f8:d6:5d:13:d0:3e:40:7c:16:98:18:92:f4:f4:9b:a8:1e:
10:ea:30:78:11:18:c3:11:cc:0d:f4:dd:96:aa:2b:5d:d7:77:
63:ad:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org