Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa
File: 3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa (raw, json)
Hash identifier: 4yQPVQpM/xiw/X2tGbVdJuK1dlVa8jUbP46PQlzWJPA=
Subject key identifier: 66:62:84:C4:4C:FC:03:72:8F:A0:87:C1:27:3A:A5:05:D2:47:76:0F
Certificate issuer: /CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Certificate serial: 499E3EA05BBEA5B30919F90AFAF53800CEC200E7
Authority key identifier: 12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa
Signing time: Thu 25 Jan 2024 00:59:10 +0000
ROA not before: Thu 25 Jan 2024 00:54:10 +0000
ROA not after: Thu 23 Jan 2025 00:59:10 +0000
asID: 266611
IP address blocks: 128.201.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9e:3e:a0:5b:be:a5:b3:09:19:f9:0a:fa:f5:38:00:ce:c2:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128E3DF9D967032A562E804D2E781DB1DC454A79
Validity
Not Before: Jan 25 00:54:10 2024 GMT
Not After : Jan 23 00:59:10 2025 GMT
Subject: CN=666284C44CFC03728FA087C1273AA505D247760F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:ff:bd:b7:0b:4d:a0:50:dd:de:e8:d0:54:
e9:6e:8b:e9:d2:2d:37:5e:78:1a:b1:1e:be:1b:d4:
5d:fc:66:7f:07:d9:8f:f9:09:f9:45:59:8e:bf:cc:
53:e2:23:ac:2b:f8:66:10:ed:18:4e:2c:62:cf:a1:
3f:a6:23:26:24:63:ee:1b:7a:61:00:69:68:8d:6b:
bf:78:4e:39:eb:70:b4:74:41:4c:25:a0:07:99:d9:
3f:15:82:92:fe:ad:a1:f9:64:8e:b9:76:6f:2e:b0:
3c:db:32:e1:31:5f:ff:58:2f:2e:a9:77:7e:aa:74:
f7:8e:f5:f2:1c:d4:4a:09:06:9d:ce:b6:12:a5:35:
c9:46:87:91:19:e9:d1:2f:99:bd:29:86:e9:fa:93:
b3:d0:a6:df:09:8c:3b:ea:b6:26:44:c8:c9:51:f0:
57:7c:54:ed:fe:3c:42:6f:32:8a:d2:42:87:6c:8b:
54:df:0f:11:d5:79:a7:ac:dc:ef:50:f7:34:9a:da:
4d:41:bb:30:67:50:2d:d2:8f:43:2f:34:f4:d9:a0:
fb:83:b2:45:0f:5d:5b:03:6e:fe:8f:a8:68:c3:ac:
29:0e:71:71:c3:ea:ff:a4:cf:cd:68:be:1a:30:7d:
63:82:c8:dc:d5:62:69:18:30:65:d5:ef:16:96:53:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:84:C4:4C:FC:03:72:8F:A0:87:C1:27:3A:A5:05:D2:47:76:0F
X509v3 Authority Key Identifier:
keyid:12:8E:3D:F9:D9:67:03:2A:56:2E:80:4D:2E:78:1D:B1:DC:45:4A:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/128E3DF9D967032A562E804D2E781DB1DC454A79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E3DF9D967032A562E804D2E781DB1DC454A79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.30.0/23
Signature Algorithm: sha256WithRSAEncryption
71:31:11:ff:d7:7e:39:7f:81:9e:82:1a:38:99:90:6d:3e:97:
a1:36:ef:82:6f:e4:6c:51:0c:59:c6:06:e3:83:65:f7:88:4a:
1f:d5:03:99:98:6f:85:53:21:53:a2:24:fe:d7:02:3b:5a:c9:
1e:70:74:c5:a4:31:22:ca:5a:e2:2b:36:f4:da:d7:3b:0a:22:
e7:c7:31:95:36:57:60:83:ac:7b:b9:8e:b5:f2:b3:24:4d:6c:
11:98:d5:98:8c:dc:88:b2:7f:44:46:17:84:08:52:1e:2f:33:
45:0b:3e:f6:25:a9:49:97:ad:ff:f7:4f:eb:6d:1c:05:d2:5c:
53:3e:f0:ae:c8:e4:ec:d0:15:27:e1:0f:39:31:37:b7:b7:09:
2b:61:b4:7d:bd:b8:b9:8b:e6:de:68:21:fa:73:f4:e4:49:d5:
22:63:55:dc:67:7c:97:68:20:69:52:36:13:d3:73:aa:48:c5:
53:c4:13:8e:59:1c:a3:6f:f9:a8:65:f4:cc:72:bf:bf:93:3b:
7d:c0:41:54:fb:5c:4a:9a:ea:f0:25:dc:04:22:aa:0e:97:ce:
94:c3:cf:28:a5:2e:14:84:39:85:90:9f:28:57:b1:67:69:53:
b9:73:9f:0d:4a:ef:40:61:93:8c:4a:62:6b:b6:7a:96:5d:3c:
ac:af:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org