Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
File: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier: 6Gwg7rHXPvP4cj1IUaWdUKFeN3+AKuGK0N103X6Wj/4=
Subject key identifier: A0:4C:67:0A:D2:1F:A3:8D:8D:94:05:7A:CF:51:BC:E8:6C:53:75:6E
Certificate issuer: /CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
Certificate serial: 136A8ADCE303236E24FF31F3C0472EC3C0689194
Authority key identifier: DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
Signing time: Tue 27 Feb 2024 15:17:10 +0000
ROA not before: Tue 27 Feb 2024 15:12:10 +0000
ROA not after: Tue 25 Feb 2025 15:17:10 +0000
asID: 61885
IP address blocks: 131.0.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6a:8a:dc:e3:03:23:6e:24:ff:31:f3:c0:47:2e:c3:c0:68:91:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
Validity
Not Before: Feb 27 15:12:10 2024 GMT
Not After : Feb 25 15:17:10 2025 GMT
Subject: CN=A04C670AD21FA38D8D94057ACF51BCE86C53756E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:e5:10:18:48:16:55:46:ab:f3:6c:64:46:
05:12:be:51:e1:87:41:1f:b3:17:14:ce:15:04:33:
5d:24:24:ea:e1:cd:b4:e1:99:aa:19:f9:48:0d:a9:
97:1f:bc:18:61:87:c2:0a:fb:d9:fa:8e:15:73:3f:
65:41:bb:b4:8d:4e:d3:69:0e:be:9b:5b:37:64:13:
75:0a:af:44:7a:e8:12:0f:1a:bd:7a:f4:f1:43:41:
61:ac:49:01:67:74:46:bf:4a:34:a3:77:2d:21:9e:
8a:67:a9:cf:b4:27:03:81:2d:8a:aa:b9:7d:03:0e:
df:c9:57:e8:a8:18:a3:1e:52:94:18:67:08:25:40:
28:d4:2e:8e:e1:36:bc:72:cb:cb:94:50:80:83:15:
3d:a3:0d:80:ac:66:f6:34:02:d4:c5:d2:23:3c:73:
bf:8c:39:2a:f2:14:25:d5:1f:e6:2b:ed:f3:5e:0f:
44:16:0d:21:31:7e:73:87:bc:d3:a6:38:4c:23:22:
7c:15:ad:5a:48:7d:52:fb:92:c4:2a:72:71:66:4f:
10:4e:da:fd:51:5c:3d:a7:a4:86:2b:8b:ed:37:a7:
b8:fd:e4:2a:e4:2d:50:f5:53:68:99:94:68:50:f9:
7b:74:19:3b:64:01:ae:0b:1c:41:fe:41:84:bd:ac:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:67:0A:D2:1F:A3:8D:8D:94:05:7A:CF:51:BC:E8:6C:53:75:6E
X509v3 Authority Key Identifier:
keyid:DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.143.0/24
Signature Algorithm: sha256WithRSAEncryption
56:28:8e:48:86:db:5e:23:f6:68:af:b1:f5:2e:21:95:58:86:
f7:38:49:7a:81:d7:c5:40:e2:af:4e:38:0a:e3:ea:b2:aa:28:
16:f8:31:0a:e0:fa:d6:3f:8a:8c:5c:f4:a4:02:92:57:f8:e7:
dd:87:92:56:2b:ef:03:fa:bd:b0:b1:82:62:aa:31:6d:69:79:
aa:15:f0:e2:f9:37:9b:95:1d:75:aa:8e:e2:e7:c1:bd:fa:73:
f7:4e:e0:91:40:69:e2:0e:d5:66:dd:92:e1:cf:87:09:47:78:
e1:4d:bf:95:ea:3f:df:ad:00:e3:d5:51:f7:ee:89:07:49:5c:
b6:27:01:07:09:b1:6b:d3:8e:2f:7e:1d:4d:16:b7:47:04:fd:
c1:3e:db:c0:75:81:10:f2:9c:b5:77:19:99:b6:fb:28:ae:86:
ba:ae:0a:87:d6:e6:92:36:b0:39:b6:e4:95:37:f6:44:44:49:
6f:6c:fe:8c:08:37:3a:fb:f8:88:5a:8b:7d:84:67:56:76:98:
07:43:65:7a:1d:e7:99:58:02:59:e2:98:05:cd:c4:ee:7f:7d:
f7:85:4d:c4:43:cf:f2:6d:dc:0b:00:e2:d4:63:7a:68:ff:0e:
13:6d:98:c9:54:15:2f:23:b2:c4:0a:16:7f:9a:24:be:a5:33:
8a:fa:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org