Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32322d3232203d3e20323634323432.roa
File: 3133382e3131372e3134342e302f32322d3232203d3e20323634323432.roa (raw, json)
Hash identifier: CsPhhuQTO1kDqNJ10dhLF6bImjxSwsqCXZTzGrWhKRI=
Subject key identifier: 5C:F7:3F:69:E9:38:C4:51:99:74:8F:0E:CD:AD:AC:5A:59:07:4F:07
Certificate issuer: /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial: 3B4BFFBAA6C9B9BF0408689B4F5A8B0DC6608374
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32322d3232203d3e20323634323432.roa
Signing time: Thu 26 Jan 2023 07:03:24 +0000
ROA not before: Thu 26 Jan 2023 06:58:24 +0000
ROA not after: Thu 25 Jan 2024 07:03:24 +0000
asID: 264242
IP address blocks: 138.117.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4b:ff:ba:a6:c9:b9:bf:04:08:68:9b:4f:5a:8b:0d:c6:60:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Validity
Not Before: Jan 26 06:58:24 2023 GMT
Not After : Jan 25 07:03:24 2024 GMT
Subject: CN=5CF73F69E938C45199748F0ECDADAC5A59074F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:5a:4b:26:ba:6b:22:59:c4:1b:5a:1e:90:
f2:69:39:cc:79:9d:98:9a:55:ac:93:27:4d:12:08:
23:39:94:cd:d9:87:74:dd:2c:03:4d:fe:63:bd:d6:
d4:4d:23:d6:4c:b7:4c:70:71:29:a6:6b:76:9a:95:
b0:02:a0:5d:c9:60:c9:90:9c:12:e9:4b:ae:67:5d:
c5:0a:fb:c3:2c:62:db:e5:9b:14:7b:cf:73:c8:c0:
27:e4:49:d0:1c:b5:93:c1:59:32:59:f0:89:9b:2e:
7a:86:f2:7a:4a:af:cd:dd:6a:8c:bb:b9:d1:5d:82:
93:56:69:d1:df:9a:b9:0f:0a:44:e3:52:15:e2:c1:
5e:97:58:b7:14:33:33:41:1f:a7:70:36:c6:f7:8e:
19:dd:4e:44:9a:ed:39:83:93:ec:8b:cb:f0:a7:9d:
1a:b1:54:d3:0f:36:d8:ea:1d:e0:82:c8:a2:11:cd:
7e:7e:e2:6e:b2:61:10:28:f0:b4:83:49:27:af:c8:
a3:b4:76:59:b9:18:cd:8b:2c:de:28:27:6b:e5:a4:
81:6b:61:c9:37:9d:8a:d4:2b:99:98:80:43:50:c7:
b5:3d:73:c8:9a:fe:d8:41:27:f9:e4:78:9e:41:c8:
c6:5b:68:c2:4a:e4:65:94:d7:d5:a9:50:a2:d8:5d:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F7:3F:69:E9:38:C4:51:99:74:8F:0E:CD:AD:AC:5A:59:07:4F:07
X509v3 Authority Key Identifier:
keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32322d3232203d3e20323634323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:57:cc:d6:32:ce:30:1a:39:95:5f:f2:2f:c1:ed:80:e0:7c:
70:86:4e:e0:a3:76:db:b4:4e:b8:50:e7:a1:63:f1:57:2a:79:
fb:ee:9a:64:05:d0:eb:c0:c0:82:b8:87:23:33:69:41:fb:b5:
19:bc:c4:4e:1f:e8:21:9e:a5:5e:55:8e:25:ab:52:21:34:a9:
d2:33:a8:63:d1:46:72:66:e8:00:8b:cc:c0:80:cd:a9:5d:bd:
3b:91:47:2d:c1:5d:99:52:eb:08:cb:07:5c:e2:a2:7b:de:e7:
6b:30:ab:22:17:74:5b:d2:0c:28:df:3e:03:d0:19:f0:d4:79:
22:5e:e7:95:1d:e6:a8:7f:8a:a1:55:14:f3:ed:4a:6c:c6:be:
1d:78:74:03:2c:9c:27:b2:0b:17:df:99:38:4d:af:ea:2c:ca:
bf:24:c0:22:e2:44:4b:f9:db:66:bd:2b:54:e2:0b:b8:c9:0e:
41:47:24:8b:1e:e2:e4:d0:39:f4:a6:30:ec:a6:00:9a:ad:d9:
e3:05:8b:50:dd:5b:bc:8a:33:25:9e:72:ad:27:85:16:c1:b0:
dc:48:37:45:6c:32:82:9f:fc:79:d9:a1:d7:88:36:ce:17:23:
44:a6:46:f1:25:98:a2:de:83:20:93:9e:6b:9a:3b:78:9b:06:
ec:5d:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org