Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
File: 3136382e3139342e36302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: RdRrx6nqxWdIDBU8KWJC2nPGegZeTfX4E8+DkE9bAWo=
Subject key identifier: E5:49:12:D9:00:AC:03:A7:9A:6B:BB:7A:D4:44:0E:6F:AF:12:43:61
Certificate issuer: /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial: 540FF6BF5ABEEC646696E564EFCB9F6D7DF7B56B
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
Signing time: Mon 22 Jul 2024 18:02:14 +0000
ROA not before: Mon 22 Jul 2024 17:57:14 +0000
ROA not after: Mon 21 Jul 2025 18:02:14 +0000
asID: 28287
IP address blocks: 168.194.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0f:f6:bf:5a:be:ec:64:66:96:e5:64:ef:cb:9f:6d:7d:f7:b5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
Validity
Not Before: Jul 22 17:57:14 2024 GMT
Not After : Jul 21 18:02:14 2025 GMT
Subject: CN=E54912D900AC03A79A6BBB7AD4440E6FAF124361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:21:69:0d:15:95:42:95:bf:7c:a6:c6:14:
97:81:e1:d1:17:bf:cc:cc:af:9d:2a:24:d9:2b:a1:
ba:2d:db:97:35:57:21:52:30:87:e3:df:7c:d1:da:
5d:35:61:e4:15:e7:2e:3b:43:1d:8d:73:d4:da:0e:
c6:25:11:d8:04:30:24:1e:f0:f7:31:6c:61:c9:fa:
cb:31:a4:48:66:fd:e1:18:9f:c1:df:b6:34:fc:15:
3a:4b:01:fb:a3:7b:30:a4:57:ef:d9:4a:0f:f9:81:
5f:ff:5b:61:5e:af:ba:d3:15:e3:78:e7:3c:60:63:
96:ab:d9:95:4c:26:e4:bc:56:d5:82:90:9d:11:3f:
87:9a:ee:0e:2c:99:ac:86:dc:04:05:4b:96:bf:fc:
3f:f1:36:2c:39:27:23:93:b3:43:03:03:2c:14:db:
98:9d:c4:2f:3b:9a:ef:c5:e7:9d:59:f7:02:ec:d8:
cb:1f:30:a7:48:ec:92:62:4a:b6:97:33:83:8f:9b:
e0:5f:7a:59:00:f4:63:55:8a:9b:7b:ce:06:17:36:
8c:fb:7c:8e:3b:fa:f0:d3:0f:1e:10:70:66:f0:46:
43:7b:1c:f9:c6:97:45:3f:07:50:3e:0f:e0:58:70:
5b:c9:1c:11:a4:32:ee:c7:07:50:23:55:5b:0e:b0:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:12:D9:00:AC:03:A7:9A:6B:BB:7A:D4:44:0E:6F:AF:12:43:61
X509v3 Authority Key Identifier:
keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.60.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b4:e0:5c:38:0a:60:c0:ac:05:b6:35:fa:2b:d3:31:fb:4c:
3e:72:f4:3e:92:9f:43:d9:d8:7a:c1:c6:82:a4:92:99:7a:d2:
97:a8:48:e2:19:76:8e:84:50:08:72:8d:2d:fe:c7:a6:d9:34:
46:35:1a:4f:da:0d:22:93:99:9c:85:d0:2e:75:68:4b:5b:9f:
7f:49:5e:82:0d:74:d2:a5:3c:15:c9:6d:b6:27:b6:ac:7e:8c:
1c:cb:ad:8e:4f:3e:2b:ff:0c:3e:0a:0c:f4:c8:d5:51:83:60:
a6:ff:04:b6:e4:12:13:f7:ae:be:5e:da:12:c3:67:1e:49:77:
12:c0:aa:61:4a:08:f4:52:2d:fa:7d:dc:73:1a:54:29:df:d1:
82:cf:81:26:f4:b5:56:5c:6e:c5:5b:1c:6c:da:e9:74:09:ab:
ee:41:76:ef:7b:1f:0c:8f:79:d6:b7:4a:d4:fa:dd:d1:52:7d:
27:cc:e8:75:82:c3:c7:c5:7c:45:7f:99:27:cb:cd:d3:0a:be:
aa:c2:15:65:c5:c8:f2:c1:ac:c1:79:d0:64:a9:d8:76:51:50:
12:c9:d6:7a:f9:82:2b:8c:63:7b:bf:c8:c4:67:40:c6:da:f3:
bd:f5:93:48:b0:93:2c:84:53:af:a4:99:4b:31:2d:2b:e8:cf:
f5:10:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org