Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323732373936.roa
File: 3136382e39302e33332e302f32342d3234203d3e20323732373936.roa (raw, json)
Hash identifier: If2igDtfHKfHIIkyxEdttacTJ96qENAOcgMpbpN4utM=
Subject key identifier: 3E:15:CB:13:9D:1D:7F:90:AE:F1:9C:03:F0:09:3F:5F:28:E5:64:2E
Certificate issuer: /CN=417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F
Certificate serial: 35B6138DE928C40A71B24549AE2875396D5D27BA
Authority key identifier: 41:75:26:E4:CA:DA:3A:0A:9D:94:AF:16:B1:B3:7A:65:F4:A0:DB:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323732373936.roa
Signing time: Tue 27 Feb 2024 15:03:39 +0000
ROA not before: Tue 27 Feb 2024 14:58:39 +0000
ROA not after: Tue 25 Feb 2025 15:03:39 +0000
asID: 272796
IP address blocks: 168.90.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b6:13:8d:e9:28:c4:0a:71:b2:45:49:ae:28:75:39:6d:5d:27:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F
Validity
Not Before: Feb 27 14:58:39 2024 GMT
Not After : Feb 25 15:03:39 2025 GMT
Subject: CN=3E15CB139D1D7F90AEF19C03F0093F5F28E5642E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:f5:2e:0b:61:52:bb:73:fe:00:3e:95:1a:
96:ed:1b:2c:7d:08:01:3b:bf:43:53:62:77:0e:4c:
7a:45:69:e7:e4:4e:fc:19:04:b6:79:98:f2:4b:a5:
96:3b:54:20:f5:aa:87:32:ec:5d:69:53:44:fa:39:
7d:38:6f:18:e1:a1:64:32:00:b8:65:f2:f0:ff:2b:
ae:04:16:d1:08:8b:d6:33:f3:c2:c3:9e:58:f2:a1:
bf:24:1c:5f:a6:c3:a9:30:99:5a:e4:62:c7:37:66:
9a:76:9c:08:86:12:a5:3a:1c:42:37:d6:be:c5:b4:
90:d1:6d:72:e4:5d:bb:79:57:0b:bc:92:04:d7:76:
c8:22:fa:91:2e:54:4e:7f:4f:9b:d0:e5:01:9b:a4:
91:9f:85:9a:8e:29:48:a9:ff:c5:55:59:56:f2:64:
14:50:46:5a:87:6f:12:7a:61:1c:91:d0:46:85:11:
5d:9e:35:5c:0a:88:d6:ea:42:5f:f1:de:00:ca:c1:
47:4e:d2:bb:ca:fa:80:d6:2a:81:1c:b7:04:87:4a:
ac:48:b9:0d:88:f0:56:0c:fb:49:93:de:86:1e:25:
bd:ff:73:f5:59:34:83:c8:ef:f9:04:43:ba:12:b8:
a6:3d:b7:c2:3d:a6:14:a4:ef:71:3a:9f:d4:34:85:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:CB:13:9D:1D:7F:90:AE:F1:9C:03:F0:09:3F:5F:28:E5:64:2E
X509v3 Authority Key Identifier:
keyid:41:75:26:E4:CA:DA:3A:0A:9D:94:AF:16:B1:B3:7A:65:F4:A0:DB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/417526E4CADA3A0A9D94AF16B1B37A65F4A0DB4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33332e302f32342d3234203d3e20323732373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7d:6f:41:a1:d4:eb:3c:ac:a5:13:97:e8:6e:59:66:65:8c:
b5:18:12:b7:35:f0:ad:83:f7:e1:e8:ed:68:0f:80:4c:f1:ed:
51:d3:5d:b5:cb:43:08:09:43:74:ae:70:b7:90:63:f8:52:d3:
88:d5:58:17:05:fd:31:df:50:e3:8b:57:f9:6a:73:ea:7c:2d:
ed:c6:28:84:0e:c3:e5:61:6f:27:67:e2:18:ea:8a:5e:22:bf:
05:f6:d9:cd:a5:00:da:4f:f1:cb:b2:1d:2a:ca:bb:c2:5b:57:
8c:08:70:bb:7c:a4:cb:f5:e4:f5:84:98:b0:4d:19:64:f4:7b:
e9:d5:69:a2:89:a7:1e:b7:d9:b8:2c:46:a4:61:10:65:6a:a9:
25:87:83:e1:52:d9:bf:f0:cf:23:33:5c:39:9a:fa:e8:e4:9d:
de:d0:3d:af:42:d2:63:77:87:c9:d0:72:12:3e:d3:69:24:a1:
24:d3:66:87:9e:5c:a7:58:0e:87:00:eb:06:24:41:11:57:85:
88:06:96:94:16:ef:8f:66:cf:3e:dd:1b:7b:42:4c:4f:00:91:
1b:11:d5:93:fe:8b:a6:9b:42:ac:a3:4d:ec:ab:f6:7a:1f:86:
80:bf:34:49:70:c5:ab:de:7c:cc:5e:b3:36:f9:7b:bb:d0:92:
c4:34:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org