Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32322d3232203d3e20323634353936.roa
File: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (raw, json)
Hash identifier: P7dCDKAQVAnI6JceXkZGk5uf7tiwEEVEhDE/Y5SXMA4=
Subject key identifier: 3F:AB:E7:41:DA:6C:B7:C6:66:27:00:AF:B1:4D:DB:46:96:BB:08:D2
Certificate issuer: /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial: 12E80CC20F05236FC0BC63C3B0DD4A2B1695B458
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32322d3232203d3e20323634353936.roa
Signing time: Tue 05 Mar 2024 16:05:17 +0000
ROA not before: Tue 05 Mar 2024 16:00:17 +0000
ROA not after: Tue 04 Mar 2025 16:05:17 +0000
asID: 264596
IP address blocks: 138.59.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e8:0c:c2:0f:05:23:6f:c0:bc:63:c3:b0:dd:4a:2b:16:95:b4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Validity
Not Before: Mar 5 16:00:17 2024 GMT
Not After : Mar 4 16:05:17 2025 GMT
Subject: CN=3FABE741DA6CB7C6662700AFB14DDB4696BB08D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:77:76:46:04:a7:f6:e1:2e:01:e3:20:30:
97:5b:1a:ab:fa:0a:6c:6c:a7:d9:2a:ea:55:ba:02:
5f:f7:b0:dc:16:23:22:70:1d:22:b0:5d:e3:8d:09:
5c:87:7c:f3:89:a3:64:57:7f:c4:74:71:f8:f5:44:
11:bf:69:a6:9c:23:e6:55:b7:3f:f5:36:74:f8:c1:
d3:d0:7a:de:74:86:a6:80:29:1f:a0:f0:d5:f9:96:
6f:82:c2:fe:58:75:6e:cf:36:d4:9b:06:3c:36:f9:
d4:97:cf:10:a5:d4:35:a2:c8:9e:63:f3:0e:ba:05:
87:ac:fa:64:74:06:b4:0c:c3:62:9c:2f:16:47:09:
58:94:78:3a:50:aa:78:f0:40:c9:58:4a:86:7e:5c:
7d:95:53:2b:ab:69:00:f1:dc:68:1e:a3:38:b6:d1:
bb:8f:84:88:be:1d:17:60:05:83:95:13:b6:6e:bd:
4b:59:1d:2d:f4:94:c3:ac:cf:8a:5c:b9:e1:d1:79:
04:ac:47:c9:92:06:ab:ff:7e:03:fb:7a:8b:b9:16:
55:56:78:27:d9:b6:8b:c5:3e:dc:ac:66:db:52:05:
03:2e:69:a6:a1:ef:76:8b:b1:04:ca:ff:91:68:5c:
09:a6:59:55:c3:e6:6d:b9:fd:17:f9:09:f8:d7:a6:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:E7:41:DA:6C:B7:C6:66:27:00:AF:B1:4D:DB:46:96:BB:08:D2
X509v3 Authority Key Identifier:
keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32322d3232203d3e20323634353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.40.0/22
Signature Algorithm: sha256WithRSAEncryption
94:bc:d7:df:66:76:12:0a:e3:58:34:7e:71:46:70:d9:33:fc:
0a:71:77:01:1a:5e:cf:c8:5e:09:56:bb:eb:ad:d0:1e:6a:a6:
ac:5e:08:6e:c5:c1:d3:c9:01:70:81:c9:d9:94:72:04:70:6d:
5b:3f:9c:56:2d:01:43:d4:c2:95:b5:45:fb:de:13:47:c5:c7:
b5:63:c6:65:7f:cb:28:d3:29:96:81:ee:87:66:81:9f:df:51:
ab:ec:48:8e:5f:ec:46:7d:de:12:91:6b:fc:26:4f:39:9b:b4:
75:24:66:e3:c9:71:42:0c:cd:fb:ff:6e:25:44:0d:e6:ce:f2:
3a:24:67:a3:94:43:20:6b:fd:ca:b9:c4:e8:8a:41:59:e7:7f:
2b:2c:1c:10:48:35:69:14:04:31:c9:0f:5b:fb:a2:56:67:03:
76:f7:7c:fe:16:f0:36:40:c2:9e:1c:2e:29:4b:6d:da:ae:e7:
6a:16:96:77:7c:71:37:2b:2b:8f:a0:0a:09:64:96:b7:82:1f:
83:b8:ee:55:a4:12:f7:62:7b:16:ce:ba:2b:80:08:77:de:60:
fa:25:7f:2e:e7:27:4d:c8:65:e2:84:80:2d:68:f6:06:6d:bc:
9c:45:39:43:57:f5:08:71:1d:70:11:87:10:de:46:31:92:44:
32:df:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:11 2024 by rpki-client on console.sobornost.net