Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33352e302f32342d3234203d3e20323635323633.roa
File: 3136382e39302e33352e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier: +VO4ciFdlQnCh/tZCnqkYngA1WbJQzAG7eONu0abULc=
Subject key identifier: B5:68:24:7B:A7:7B:85:06:F8:3A:41:DA:F3:D1:05:E7:9B:C2:03:D4
Certificate issuer: /CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
Certificate serial: 194260108DB95BEDB3C9ADF70307EB67C7389935
Authority key identifier: C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33352e302f32342d3234203d3e20323635323633.roa
Signing time: Sat 01 Apr 2023 20:19:38 +0000
ROA not before: Sat 01 Apr 2023 20:14:38 +0000
ROA not after: Sat 30 Mar 2024 20:19:38 +0000
asID: 265263
IP address blocks: 168.90.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:42:60:10:8d:b9:5b:ed:b3:c9:ad:f7:03:07:eb:67:c7:38:99:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
Validity
Not Before: Apr 1 20:14:38 2023 GMT
Not After : Mar 30 20:19:38 2024 GMT
Subject: CN=B568247BA77B8506F83A41DAF3D105E79BC203D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:53:5d:47:6f:05:25:4b:50:69:23:38:d5:
88:b3:2f:3c:fd:7d:a8:c9:a4:81:5f:dc:dc:4b:b4:
ac:30:17:20:3e:1f:fc:de:af:f9:38:e4:6d:38:2f:
9e:54:81:38:cb:6c:7a:0e:0c:5e:68:32:ab:49:43:
04:2b:03:af:d8:04:88:c0:45:a6:e3:c4:b5:d0:1d:
fc:da:90:db:bd:b1:5e:c7:65:dd:fd:84:e9:a4:8e:
b1:bd:08:9c:47:a4:ab:95:8c:75:4a:01:b2:68:e9:
27:2a:91:c2:43:f6:72:0f:33:57:49:65:44:c9:25:
25:94:7f:59:1c:a4:3b:f6:24:ce:ea:ab:d1:b4:7c:
64:64:8d:db:87:62:6c:73:21:86:77:74:4e:0f:07:
37:c0:8b:a7:8a:85:9b:72:a2:d3:bc:c5:a6:10:4f:
22:49:b2:d4:75:9d:0f:f9:dc:36:2c:46:5d:da:7b:
3c:04:b1:a7:7f:ff:ba:38:1c:4f:39:89:e4:47:8c:
c7:b5:3f:ba:00:34:27:a8:d9:98:8d:9d:12:b3:ad:
31:18:0d:f0:65:11:28:5f:76:87:4a:70:05:d6:eb:
15:a1:d2:d0:1c:ee:e8:24:65:0c:76:dd:6f:ae:49:
2c:c0:78:e3:fd:93:4d:8e:6c:a7:44:a0:e4:c9:e6:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:24:7B:A7:7B:85:06:F8:3A:41:DA:F3:D1:05:E7:9B:C2:03:D4
X509v3 Authority Key Identifier:
keyid:C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33352e302f32342d3234203d3e20323635323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3a:20:39:a0:1f:8a:a7:de:c0:5f:7b:a2:f2:d8:15:ee:d3:
50:51:51:57:e2:5a:99:a0:92:a9:79:05:33:e9:6a:cc:1c:a4:
b6:bd:8a:5c:f3:cd:73:9b:3f:26:d3:b8:56:43:b5:7e:9f:9b:
fa:7c:73:c4:63:b1:76:5a:cf:db:1b:2e:4d:7f:1f:cb:d0:3b:
1c:bc:e9:d7:86:cd:65:99:c2:71:6e:6e:21:2a:25:b3:94:5f:
76:47:ae:ce:15:4d:ea:61:39:82:6b:dd:2e:ee:f1:9d:3c:14:
c4:5b:76:94:ae:f6:c8:1d:3a:7b:17:e6:ef:06:9a:54:e5:3b:
63:ac:1e:f2:20:f1:e0:7d:c6:f6:43:f4:a9:f4:bb:6e:c5:7f:
15:65:ba:34:c8:64:c5:b4:b5:16:f9:1e:0a:1d:61:e5:aa:ab:
d7:01:da:25:28:91:bb:62:f1:c4:1a:0b:41:56:48:5f:fc:26:
2b:c4:96:4d:7e:52:4a:50:99:5d:7a:91:73:03:7a:15:9b:77:
c9:7c:c9:c8:72:2f:9f:1c:c9:b5:29:d5:4c:14:6a:c0:dd:e2:
ba:b6:82:00:ad:af:a4:54:36:8e:6c:dd:e6:6a:59:a0:0b:55:
8d:56:29:3b:e1:fd:91:18:5d:c2:3c:c1:12:91:d8:02:1a:9e:
8f:3a:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org