Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa
File: 3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa (raw, json)
Hash identifier: Y7YnfSqT+NHrHZYaaDRHewziOWltodED01/4BZbKexU=
Subject key identifier: 61:20:5A:39:AD:AE:F0:EA:70:09:A0:09:5F:66:1E:9C:6E:C7:44:67
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 1E33938A14C1EE162DE6243BF713436B9D2523AB
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:12:50 +0000
ROA not before: Wed 28 Feb 2024 14:07:50 +0000
ROA not after: Wed 26 Feb 2025 14:12:50 +0000
asID: 262532
IP address blocks: 128.201.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:33:93:8a:14:c1:ee:16:2d:e6:24:3b:f7:13:43:6b:9d:25:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:07:50 2024 GMT
Not After : Feb 26 14:12:50 2025 GMT
Subject: CN=61205A39ADAEF0EA7009A0095F661E9C6EC74467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:1b:0b:3f:d1:7f:f8:5a:5c:e3:db:cd:24:
27:1b:fa:32:f9:a5:4b:ef:dd:5f:ab:e8:31:9c:40:
04:85:ca:24:a4:81:85:44:7c:24:8d:db:38:17:94:
ea:e7:1b:97:98:e0:af:7c:2f:7b:39:ae:9d:76:7b:
ac:66:d9:11:c0:7e:b9:4b:c4:d2:04:e2:ec:0e:61:
f7:a7:e2:7c:5b:77:1c:18:f9:4d:de:81:47:69:93:
34:10:7e:7d:15:98:7d:48:79:d4:01:dc:88:f6:ce:
db:db:13:35:5a:e4:46:37:1e:ed:74:f8:14:39:73:
23:b2:12:b7:72:67:9e:77:c6:92:94:a2:92:01:37:
88:4a:6b:87:43:bc:9c:9d:59:7f:2f:a2:88:5d:8c:
88:df:63:df:6d:d4:71:06:eb:59:ee:84:ca:44:52:
0c:14:5c:84:07:5b:7f:10:0a:12:1b:ad:5c:bd:f1:
d4:1f:ce:78:ce:1c:6c:5c:b5:8a:85:7b:e2:af:82:
72:d3:e4:58:57:90:4b:47:c8:ca:86:c3:1a:da:43:
ba:c5:5d:b1:9b:07:ad:5f:00:75:bf:9f:7e:1f:c6:
f2:da:fd:44:16:d5:b9:80:78:e1:f2:96:95:60:f3:
57:8c:46:58:40:3d:64:22:a5:9e:cf:dd:9f:cf:e7:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:5A:39:AD:AE:F0:EA:70:09:A0:09:5F:66:1E:9C:6E:C7:44:67
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:04:7a:eb:b2:52:db:aa:d2:0f:90:c7:99:a3:86:a0:fe:2a:
1e:34:e3:b4:5f:df:5c:9e:04:de:72:45:3a:96:12:84:8d:63:
18:fa:09:4e:01:a0:4d:e9:bd:ef:d0:1b:76:a5:fb:46:d7:e1:
92:36:dd:d4:95:39:fa:4c:3e:b0:b8:27:24:71:d5:7c:1d:b4:
09:19:9c:a2:ed:07:61:ae:89:b2:cc:82:0b:1d:e8:5d:d3:95:
33:93:60:48:47:db:68:a4:66:0d:23:9d:31:73:08:c9:7a:e0:
58:e0:aa:5e:c6:f8:d3:d5:f9:12:8e:54:17:d1:7a:ea:e6:d7:
8d:cd:94:3c:27:b9:17:c4:0d:84:75:3e:ef:90:4b:9e:29:ac:
63:c1:6a:0f:4e:5c:a5:33:7b:03:00:b2:57:bd:0d:ac:2d:1c:
cd:8f:59:82:bb:38:5a:e2:2e:93:f6:c2:33:2c:96:37:b0:36:
1d:3a:29:52:2d:98:28:ef:b9:b0:3b:ca:70:50:73:53:6a:ee:
6b:55:1a:8f:e9:d5:07:e8:3e:c0:bc:5b:5a:af:b2:66:79:c4:
7e:27:4a:69:71:60:6f:15:10:79:99:23:96:3e:55:d8:bf:a1:
fc:2c:41:17:34:41:f9:2d:f8:5b:ad:5c:97:96:19:7c:4c:85:
32:23:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org