Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35342e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: PIQDaRh9FE8L8q/f3BZmfJUwkd6gSwO5N/kHhjpT56k=
Subject key identifier: AF:5F:2D:9D:38:D5:C2:0C:2E:37:3F:A3:CA:3D:66:E6:2D:46:DA:86
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 207C68479215F578D3EFB2AD6EDD643DA4472F02
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:48 +0000
ROA not before: Mon 14 Oct 2024 01:44:48 +0000
ROA not after: Mon 13 Oct 2025 01:49:48 +0000
asID: 28270
IP address blocks: 168.121.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7c:68:47:92:15:f5:78:d3:ef:b2:ad:6e:dd:64:3d:a4:47:2f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:48 2024 GMT
Not After : Oct 13 01:49:48 2025 GMT
Subject: CN=AF5F2D9D38D5C20C2E373FA3CA3D66E62D46DA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:e8:bd:50:67:9f:6d:4a:f1:6d:d2:46:b9:
f8:78:e3:f0:07:bf:e0:77:a4:f3:f3:66:4d:73:e1:
19:54:a4:a4:d2:ca:17:d4:e0:59:9a:35:b1:ae:d7:
c7:ed:c5:97:68:cd:ee:3f:6a:99:54:3f:20:e0:8c:
be:57:8d:bb:9e:87:37:7c:65:11:94:e8:7a:d2:d1:
0c:8f:6f:a3:fd:ba:7e:c4:95:5a:cf:fe:8b:8a:8f:
a8:1f:b6:8b:c3:ce:54:f0:f7:a4:75:bb:3b:87:21:
7f:a4:d0:e7:29:99:e6:77:e4:ff:16:71:6b:e6:99:
7c:dd:51:dc:00:22:c0:a3:6a:1e:72:07:eb:ca:26:
b5:f0:ad:03:f1:56:ab:a2:fd:e8:f8:81:14:c2:a5:
77:15:3a:cc:e9:af:33:e2:94:1c:2c:40:4b:c3:75:
96:05:90:d2:6e:f3:54:4c:4e:c6:06:ab:10:35:02:
34:55:29:ce:5f:d7:11:86:7d:3c:af:55:0b:5b:88:
14:d6:06:63:54:a7:37:1c:7d:d7:af:89:79:60:54:
05:24:b8:e0:44:7a:f5:0e:9a:02:2f:ec:ad:ee:cb:
d8:e1:8e:f6:71:51:8e:38:53:e6:1b:4a:bd:52:81:
7a:de:15:4a:c7:a5:0e:60:64:51:ca:f6:4c:81:3f:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5F:2D:9D:38:D5:C2:0C:2E:37:3F:A3:CA:3D:66:E6:2D:46:DA:86
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.54.0/24
Signature Algorithm: sha256WithRSAEncryption
18:93:34:f3:35:1a:0a:84:c7:8d:35:bc:f8:12:70:b3:9f:aa:
89:5c:a7:a0:ac:c7:4a:3e:00:7d:fb:30:6a:2d:49:5d:29:d6:
ea:b6:43:6b:c4:9d:35:57:d7:8e:ed:40:af:d9:7a:ca:f7:ec:
ac:2d:0e:c2:cd:d9:a3:63:22:6b:fa:29:58:db:e4:b6:ed:34:
a1:28:fa:b7:19:6e:bb:3f:81:43:ec:39:15:e2:74:09:d3:2f:
de:62:dc:a2:bb:be:74:76:ab:72:60:12:bb:51:1a:47:98:5d:
a0:9f:6a:26:80:fb:84:9d:26:c6:0c:17:e8:e7:50:10:e8:62:
60:6f:9e:49:19:24:8d:33:61:4e:01:07:3d:12:12:62:d7:52:
83:cd:93:68:ba:90:a8:9a:96:6e:32:d2:cc:a1:6d:7e:79:98:
67:ef:5b:e5:f6:3f:30:08:7f:50:bb:ec:37:12:66:3f:68:13:
25:fe:71:f6:9f:24:89:27:13:c6:a9:56:ec:f2:95:ce:0f:38:
97:b1:74:98:bc:7a:2c:4d:34:d7:13:4a:9c:3d:fe:a0:39:b6:
d8:f5:0d:89:06:d3:16:b3:29:26:18:a1:91:72:00:70:e1:41:
07:9b:5f:d0:d4:2f:33:72:e9:79:f1:05:07:21:da:82:a2:21:
d1:74:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net