Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
File: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier: XcPQrtDyjfWXibkbHYL2wTvJAzP2A4ET0tGGBRGCf5o=
Subject key identifier: CA:A9:CB:96:3B:8B:76:19:41:E3:41:98:6C:DA:7C:90:AB:38:3A:8F
Certificate issuer: /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial: 66881F032DAAFC58DE704A72F23E6CA167988B42
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
Signing time: Thu 04 Apr 2024 15:17:10 +0000
ROA not before: Thu 04 Apr 2024 15:12:10 +0000
ROA not after: Thu 03 Apr 2025 15:17:10 +0000
asID: 61885
IP address blocks: 131.0.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:88:1f:03:2d:aa:fc:58:de:70:4a:72:f2:3e:6c:a1:67:98:8b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Validity
Not Before: Apr 4 15:12:10 2024 GMT
Not After : Apr 3 15:17:10 2025 GMT
Subject: CN=CAA9CB963B8B761941E341986CDA7C90AB383A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:48:78:a4:4a:f4:95:bc:d8:e7:da:d7:af:
47:54:36:04:77:15:8a:3d:f7:17:8c:86:79:e2:8d:
8f:6f:03:f5:7c:9a:fc:33:fe:bf:44:b2:d1:e0:48:
ab:43:98:e0:bf:af:31:5c:d2:7d:e1:09:19:7d:fe:
fa:b4:70:85:99:b0:19:95:0f:de:56:f4:23:66:d0:
49:79:e5:6b:cf:e1:07:13:61:e4:47:77:a5:54:44:
4a:44:58:5f:2b:77:16:37:50:5d:59:aa:ca:d4:eb:
4d:f0:16:d7:d2:ca:fa:a5:52:57:5c:5c:0b:77:f9:
73:23:84:c9:c6:94:6a:c3:c9:e5:2d:fa:08:13:a2:
9d:b9:a5:46:fa:ae:ec:01:03:80:ea:ba:98:db:77:
85:f7:59:48:31:dd:81:73:10:5f:30:9e:1d:95:30:
3d:18:b2:db:34:7f:3f:5a:ff:a9:dc:e9:ae:fe:2e:
e2:6a:0a:d6:42:86:fd:76:12:2e:07:3b:a9:8b:a9:
fe:0b:35:1f:99:a2:77:0b:31:b8:34:f6:7f:72:1b:
b9:10:8c:37:d2:79:6c:3b:75:50:9f:d9:fd:74:7b:
c6:c6:1f:57:66:e3:16:55:17:13:3b:a4:99:81:66:
d3:d9:5e:c7:61:70:db:e2:45:a7:2d:57:1d:23:bc:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A9:CB:96:3B:8B:76:19:41:E3:41:98:6C:DA:7C:90:AB:38:3A:8F
X509v3 Authority Key Identifier:
keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134312e302f32342d3234203d3e203631383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:54:5f:7d:e4:e7:b6:18:2a:1b:1d:15:5c:67:ca:69:54:8a:
e8:ec:34:1d:6a:a5:f7:5f:28:76:ca:4f:f5:28:46:3b:cc:aa:
79:29:c5:ff:98:b4:b5:f4:c6:e5:2b:8f:92:65:6a:be:9e:17:
66:e6:e1:9b:f9:96:69:9b:9e:ad:0c:1a:4b:c0:c0:2b:d6:31:
e6:5f:56:61:d0:d6:8d:c6:39:5a:ba:1a:74:5f:07:3a:77:f1:
b5:72:e4:79:54:98:48:88:86:64:a1:36:6d:f7:98:7d:22:c6:
b1:b3:8c:a3:21:e4:04:fe:37:3a:40:03:f5:ab:71:cf:18:cc:
8e:91:2a:21:e6:ed:24:5e:83:1b:2c:9d:bd:f1:6e:0c:27:7a:
7c:2a:86:c1:39:b5:7b:a3:36:1b:b9:ae:28:0f:c5:9f:cf:b5:
ab:36:44:79:20:a5:5d:2d:04:0b:16:47:bc:04:2f:70:c2:d9:
8d:2c:bc:e1:a9:d0:64:3f:d6:64:9d:77:d3:0c:5d:7b:42:22:
f4:37:7a:bf:ac:45:7e:71:20:c3:97:fa:60:c1:51:84:95:d7:
d1:db:21:03:2f:a2:53:3e:7c:da:15:4f:37:6e:c2:ca:4c:27:
00:c9:62:9e:ca:f7:7f:54:46:09:5d:6e:42:f6:79:6f:ab:02:
72:d6:fd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org