Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa
File: 3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa (raw, json)
Hash identifier: 9dfOXicUcXMC46nVKudJd09/b1lKhhLQtRH2jOV7SZc=
Subject key identifier: 49:CA:3D:E0:3F:7F:FE:0F:39:04:9A:B1:EC:0A:A2:FC:68:3B:48:94
Certificate issuer: /CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Certificate serial: 051531EBA653D8D17B257398542D0DB3E9B6D9C2
Authority key identifier: 67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa
Signing time: Mon 29 Apr 2024 14:44:05 +0000
ROA not before: Mon 29 Apr 2024 14:39:05 +0000
ROA not after: Mon 28 Apr 2025 14:44:05 +0000
asID: 53087
IP address blocks: 201.216.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:15:31:eb:a6:53:d8:d1:7b:25:73:98:54:2d:0d:b3:e9:b6:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Validity
Not Before: Apr 29 14:39:05 2024 GMT
Not After : Apr 28 14:44:05 2025 GMT
Subject: CN=49CA3DE03F7FFE0F39049AB1EC0AA2FC683B4894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:07:c0:fc:63:7a:01:a3:c9:70:71:f7:fb:58:
7f:38:18:6e:4d:0d:c9:4f:64:f5:74:45:8e:2d:d2:
2d:81:4e:b1:df:0f:a8:e7:e3:ec:77:e7:52:12:bf:
1d:fe:59:ca:68:60:4a:91:9d:b5:51:f3:7b:66:99:
54:71:8d:7e:ef:73:ee:e6:de:1c:4d:39:a2:5f:e9:
8f:06:81:5c:98:c5:71:51:82:1d:be:1f:5d:5a:ce:
a2:d8:f6:d8:d8:1b:0b:7b:20:0a:e1:d9:3e:dc:a9:
18:5f:e1:09:ff:52:f0:29:18:98:ff:50:bd:5c:cc:
82:4a:ab:90:02:51:07:7b:4c:72:dc:57:a8:c2:d8:
45:31:20:64:5e:92:5a:11:47:79:1e:b3:51:fe:0a:
58:27:cb:33:5b:2e:bf:01:a6:3c:1a:c0:87:3c:18:
82:4c:53:10:2d:bc:4a:f5:96:a8:97:81:88:f8:a7:
81:62:f3:81:3f:bd:78:cd:8f:f7:98:5f:ce:fd:4c:
e3:a1:1c:4b:8c:07:1a:43:b8:ff:dc:70:76:61:29:
7e:13:03:fa:39:00:10:d3:fa:67:bb:49:68:e5:fb:
85:98:e9:f6:e9:9e:5a:7c:9e:fc:45:32:c9:d2:52:
2f:60:6d:6b:2a:88:05:8c:3e:db:a7:f5:a4:72:b0:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:3D:E0:3F:7F:FE:0F:39:04:9A:B1:EC:0A:A2:FC:68:3B:48:94
X509v3 Authority Key Identifier:
keyid:67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.216.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:db:99:4a:7d:38:ca:0e:af:74:25:8e:e4:09:d1:2d:72:36:
96:36:75:a5:32:2c:83:20:2c:db:c7:e7:a0:98:80:57:5e:f1:
63:bb:df:6f:26:3d:be:20:1c:a1:12:7f:e1:27:be:25:ee:a8:
79:be:68:87:ec:22:62:8f:bb:91:ec:53:8e:24:5a:5b:d9:ef:
0d:1a:c5:d1:66:ba:f9:38:09:ad:e2:bb:c8:cb:a1:09:e3:35:
a2:a3:07:df:16:20:ca:f7:5d:9f:b8:4c:93:de:f2:17:c0:53:
15:6c:a2:49:78:89:c5:d6:b9:cb:d1:e5:38:54:86:bc:5b:fc:
1c:29:b4:2c:98:8c:e7:88:ba:1c:e9:7c:9b:b8:ae:64:85:d9:
95:53:0e:3c:1a:58:a2:9f:0e:ad:6c:b5:4e:ed:92:15:b4:3e:
35:b7:9c:f9:2a:82:b8:13:39:16:08:0d:0d:88:99:81:fa:9a:
e2:b1:cb:bd:f8:60:8f:9b:76:61:d8:22:c3:be:c8:fd:4a:68:
44:b6:20:5e:f2:19:4f:54:05:12:54:ae:be:86:67:d8:78:c8:
ab:e2:69:69:73:05:9b:25:78:2a:53:39:84:e2:c4:91:fb:24:
72:35:90:6a:02:97:fd:5d:20:0d:66:8c:bb:5e:fb:48:4d:6a:
54:c0:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org