Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
File: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier: ERghthTZc/2iQBRFtzL0o8oFt4WUBrPVopjli2qx7pE=
Subject key identifier: 4B:7E:A3:C9:EB:61:C1:D2:55:9F:83:CF:50:C6:92:0D:81:68:C5:C8
Certificate issuer: /CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
Certificate serial: EF27BAEA0ADED93E9B490EE6A97B14CCBCE7E6
Authority key identifier: DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
Signing time: Tue 27 Feb 2024 15:17:01 +0000
ROA not before: Tue 27 Feb 2024 15:12:01 +0000
ROA not after: Tue 25 Feb 2025 15:17:01 +0000
asID: 61885
IP address blocks: 131.0.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ef:27:ba:ea:0a:de:d9:3e:9b:49:0e:e6:a9:7b:14:cc:bc:e7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
Validity
Not Before: Feb 27 15:12:01 2024 GMT
Not After : Feb 25 15:17:01 2025 GMT
Subject: CN=4B7EA3C9EB61C1D2559F83CF50C6920D8168C5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:70:58:6e:e6:ad:fd:c2:56:81:00:aa:90:
79:0e:1d:4a:f1:2f:38:da:89:0f:54:1d:94:3d:1b:
29:26:ed:7a:bd:3f:4b:5c:df:ad:45:8d:34:af:f5:
3b:4e:7d:a4:01:14:ca:5b:b3:47:0a:3a:76:d9:1f:
18:dd:35:93:f1:e1:4d:37:bd:71:d5:11:3c:35:92:
a2:da:56:50:23:c6:be:7c:1e:49:3b:57:b5:4c:ed:
05:63:3b:1c:75:4e:69:29:f3:f7:71:c2:58:51:72:
d5:67:b5:f7:bb:28:75:87:40:c1:ae:ae:ff:05:28:
45:d8:b6:33:14:79:72:ec:06:ef:fc:27:64:26:c6:
e6:bf:08:89:bc:6f:ef:51:ec:9a:6b:57:25:e7:cb:
11:5f:a1:09:af:63:9c:1d:f4:9d:37:47:a6:81:64:
61:6d:a1:7c:57:a5:5a:56:2c:bc:6c:1a:9e:a0:46:
85:6b:f8:1a:51:3b:25:57:c9:48:01:85:8f:9a:b2:
92:c9:7b:cb:74:a6:be:4a:5e:39:ef:dd:8c:37:67:
02:71:4b:39:3c:b1:40:aa:06:1e:52:eb:39:37:c7:
b5:00:39:61:a9:25:9c:81:3b:03:6f:7d:2b:6b:85:
31:99:eb:f8:12:98:95:bd:c1:13:c7:a9:9d:ed:69:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:A3:C9:EB:61:C1:D2:55:9F:83:CF:50:C6:92:0D:81:68:C5:C8
X509v3 Authority Key Identifier:
keyid:DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dc:52:6a:72:76:a8:19:05:b9:0c:20:ba:1a:d8:b5:f6:fb:
02:57:99:51:3e:08:77:fb:72:1e:69:21:cc:5f:f1:7b:83:15:
2f:32:81:fc:98:69:1e:ff:04:24:59:ae:15:03:b7:54:62:40:
89:73:c7:02:92:87:f9:7b:c7:7c:28:f0:cd:f8:59:e4:3b:8c:
a2:ef:4e:a1:93:1c:1a:e5:d7:a0:3d:42:09:eb:9a:8c:36:12:
77:9d:14:be:f0:ac:07:7f:f1:3a:dc:e8:10:1c:c2:d1:e1:33:
b7:29:57:ac:5b:cf:e8:b0:4b:28:fc:36:5a:a2:f4:8c:d1:0e:
19:a9:0f:54:98:64:72:64:db:6a:28:94:3b:e7:94:23:73:cf:
d3:28:17:3c:08:d2:77:00:ad:4e:53:f5:45:f9:c5:a9:a6:18:
37:cf:32:4d:b2:c6:a1:ad:62:e7:3e:c1:12:83:a2:f2:ba:06:
66:b6:d6:3c:e3:e7:62:ea:51:16:21:11:30:84:13:7f:70:02:
68:25:7c:69:90:9b:99:94:2d:4e:8a:cd:3a:62:0c:f0:81:48:
4b:af:61:cc:81:07:8c:78:ec:f2:3f:90:38:94:dd:88:16:ad:
cc:60:df:e7:7b:05:37:fb:7a:5c:f2:ff:28:07:b7:79:66:06:
74:2a:8f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org