Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
File: 3230312e37372e38342e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier: cfpKzlJBvSoL+Ig3c8BHI94ggJOEMe61gu3sgm+v0Ko=
Subject key identifier: DB:8E:5B:4F:78:D1:D1:29:5A:64:E2:0D:3A:19:6F:57:88:E1:65:71
Certificate issuer: /CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Certificate serial: 4240683170367E001D694FFE68C86D33FBE30EFD
Authority key identifier: D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
Signing time: Fri 23 Feb 2024 18:28:01 +0000
ROA not before: Fri 23 Feb 2024 18:23:01 +0000
ROA not after: Fri 21 Feb 2025 18:28:01 +0000
asID: 28646
IP address blocks: 201.77.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:40:68:31:70:36:7e:00:1d:69:4f:fe:68:c8:6d:33:fb:e3:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
Validity
Not Before: Feb 23 18:23:01 2024 GMT
Not After : Feb 21 18:28:01 2025 GMT
Subject: CN=DB8E5B4F78D1D1295A64E20D3A196F5788E16571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:f8:2b:aa:9d:ca:14:f7:ce:2f:e4:d3:9f:
59:a2:1e:54:a9:de:3c:fa:86:02:b4:81:53:38:b3:
7d:eb:cc:24:72:23:9c:20:07:6c:e1:49:2e:86:95:
8d:c3:68:4b:a8:19:62:d8:c8:55:bb:34:3d:b8:fc:
55:45:73:d3:3f:bd:6d:21:0c:75:18:f2:30:a8:d8:
8c:b2:12:68:7b:fa:94:e3:de:84:66:34:92:2f:3f:
23:fa:a5:5f:b5:e2:1d:11:14:a0:75:d8:99:ef:71:
73:b8:b5:01:5c:56:d8:12:54:4b:5c:4d:40:04:04:
47:03:9f:fb:0e:13:43:78:80:e4:90:51:a6:2e:15:
11:75:f6:da:b9:ab:65:17:e6:14:da:3d:0c:a5:80:
10:5d:ed:de:71:3f:ae:f7:0b:8d:fa:b1:42:b2:ae:
7a:9d:47:8e:f0:e2:eb:cb:5b:a5:16:fa:db:0f:ac:
f2:3c:63:c0:7c:f3:83:db:3b:19:03:d7:05:4e:bf:
82:7e:3e:44:62:d4:45:ef:d9:20:52:0a:09:ae:9a:
6b:32:ba:c9:e1:99:0a:e9:75:7c:11:7a:2b:88:f4:
17:ab:d4:71:40:89:4a:9a:2c:2c:dd:1a:0f:54:6f:
f4:67:3d:3f:b2:c7:cd:22:50:a2:12:c5:63:66:85:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:5B:4F:78:D1:D1:29:5A:64:E2:0D:3A:19:6F:57:88:E1:65:71
X509v3 Authority Key Identifier:
keyid:D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.84.0/22
Signature Algorithm: sha256WithRSAEncryption
90:62:c1:fc:92:3e:3a:db:4e:cf:63:11:fe:53:25:07:bd:04:
01:81:1f:6a:5f:15:76:2b:4d:38:9d:1a:fe:8c:f6:dc:53:ab:
6a:44:29:77:29:db:b0:b7:e4:60:c5:d3:8a:b2:b4:7d:fc:4a:
92:7e:59:4d:f7:c5:2b:9d:26:83:d3:f7:bb:b0:dc:c7:fa:0b:
59:73:05:77:2b:70:b5:88:96:3f:8a:03:97:9b:9f:21:98:7d:
04:e7:3a:4b:22:2a:c0:75:cf:ab:9a:55:71:b1:86:ca:13:a1:
51:be:e7:79:2e:d7:da:f1:35:a3:93:68:64:e9:db:43:cb:8f:
83:b7:28:43:6b:af:09:92:00:91:f5:72:9c:da:13:21:6f:26:
a8:37:63:42:11:c2:c0:3d:08:d1:22:90:86:52:5c:b0:0d:69:
f0:6c:77:14:ad:9d:0c:a7:f2:30:2d:1f:18:3f:8e:ec:d9:af:
0a:03:5c:2d:86:39:03:e5:72:06:27:9f:ba:6f:fb:1e:ee:ec:
12:ef:b3:93:6f:43:07:68:55:54:8f:6d:f1:5a:11:c5:a2:af:
29:01:78:56:b8:19:17:25:8c:bd:e7:70:e6:62:a5:56:bd:62:
1c:b7:32:58:10:6d:62:c4:08:48:a8:f5:33:6d:dc:3a:20:b1:
93:1f:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:07 2024 by rpki-client on console.sobornost.net