Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
File: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier: tATzskfsZ4Yen8eE8rEovDr3387fNUumvVU/LBer7b8=
Subject key identifier: B5:8A:13:35:47:E3:B8:ED:08:07:E6:A6:0F:87:CD:43:D9:28:6E:97
Certificate issuer: /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial: 03354118A47DBC791B8D614DEA880FAA868BB6E2
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
Signing time: Thu 04 Apr 2024 15:17:11 +0000
ROA not before: Thu 04 Apr 2024 15:12:11 +0000
ROA not after: Thu 03 Apr 2025 15:17:11 +0000
asID: 61885
IP address blocks: 131.0.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:35:41:18:a4:7d:bc:79:1b:8d:61:4d:ea:88:0f:aa:86:8b:b6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Validity
Not Before: Apr 4 15:12:11 2024 GMT
Not After : Apr 3 15:17:11 2025 GMT
Subject: CN=B58A133547E3B8ED0807E6A60F87CD43D9286E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:df:d1:99:62:9c:bb:ee:db:5d:28:01:23:
5c:27:9c:da:65:0a:7c:b1:a7:4f:a7:4d:1a:b1:d9:
6a:ca:d0:b3:d8:6c:ca:f4:30:ea:d9:11:bf:c7:54:
d5:a5:d9:9d:84:df:7c:96:c2:ec:cc:da:8d:af:ef:
69:cf:b2:8a:ae:6c:df:a8:b6:dc:a4:dc:10:ce:98:
9a:42:cf:9e:88:4e:26:e2:11:85:79:f4:40:91:1b:
30:75:21:d6:76:dc:7c:fa:9d:e0:0c:dd:73:5f:5c:
4d:c4:6a:56:9d:1e:ae:72:65:90:83:c2:6e:3f:d8:
f0:ba:65:b4:da:27:b5:1a:36:d2:a3:8f:2d:e1:2d:
3d:19:fa:ef:7b:d2:62:11:6c:74:99:b9:20:90:da:
b3:e0:36:e8:c6:9d:9e:e0:14:aa:6f:45:0c:8c:5d:
f4:1e:1e:95:75:6e:da:28:27:ff:39:c8:20:5a:bc:
60:45:ad:99:1e:ca:a7:59:9f:c9:e6:a0:0e:7d:80:
38:c5:2e:a9:f0:0e:c3:37:6d:8f:9d:96:13:52:45:
9f:91:b7:37:bd:e5:7d:0c:8e:56:5a:2f:b0:53:69:
c2:01:30:a1:44:12:4e:e0:07:3c:af:79:be:a6:8e:
9c:0c:ce:76:ac:17:ff:9e:4d:39:42:3d:83:e9:73:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8A:13:35:47:E3:B8:ED:08:07:E6:A6:0F:87:CD:43:D9:28:6E:97
X509v3 Authority Key Identifier:
keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134332e302f32342d3234203d3e203631383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.143.0/24
Signature Algorithm: sha256WithRSAEncryption
06:27:c8:52:1f:36:67:b7:29:41:4e:1e:41:8c:70:04:8b:9f:
10:ae:f0:b9:fe:4d:fe:b8:fd:73:f0:d0:9b:b7:b0:ca:85:16:
f4:4d:0c:44:17:e4:e0:16:a6:c3:74:44:81:0c:37:d1:42:55:
c9:e6:53:88:69:ee:70:5d:b8:ec:f9:0d:06:14:94:55:1c:1e:
9c:86:43:7d:8a:3e:cc:ae:bd:47:2e:41:36:7a:51:f0:1c:28:
48:35:8c:60:1f:6e:c3:44:2a:5e:8a:fc:2d:a4:f5:70:bb:34:
56:9f:e8:3d:1d:6f:b8:3a:95:d2:25:8b:7b:a6:41:89:08:73:
cc:ae:69:df:f2:22:ec:d1:5d:c1:e5:a7:d5:5c:26:c8:f1:b7:
91:a5:d3:45:9d:46:35:be:76:cb:64:93:86:a5:1b:5a:2a:40:
ba:b9:9f:d1:96:30:0b:79:25:b5:28:0d:62:9b:1d:a8:3a:bc:
59:50:dc:b8:da:7b:9a:e1:f4:23:d2:ed:63:ea:64:35:32:a6:
b3:e7:05:6b:77:f9:41:83:93:ab:48:7a:7b:88:65:a8:6a:5a:
9e:e8:f6:c5:27:ff:3d:1b:52:6b:b6:ac:24:09:5e:24:2b:af:
27:11:3d:7c:d6:d9:39:7d:f2:41:b1:50:8a:92:51:20:0e:23:
cb:c3:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org