Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
File: 3133382e302e3131322e302f32322d3234203d3e20323634353434.roa (raw, json)
Hash identifier: iDpdGwzW9hFuS7WrsH3xHNQZT9FgBbfLO6PSP8QG/v0=
Subject key identifier: 9B:7D:5A:ED:2A:A9:70:D6:FE:BA:ED:FD:A5:C3:19:E9:57:BE:90:31
Certificate issuer: /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial: 50296D916844BB08DAB6A29D45E176E6A4DAF43F
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
Signing time: Sat 22 Apr 2023 17:02:58 +0000
ROA not before: Sat 22 Apr 2023 16:57:58 +0000
ROA not after: Sat 20 Apr 2024 17:02:58 +0000
asID: 264544
IP address blocks: 138.0.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:29:6d:91:68:44:bb:08:da:b6:a2:9d:45:e1:76:e6:a4:da:f4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Validity
Not Before: Apr 22 16:57:58 2023 GMT
Not After : Apr 20 17:02:58 2024 GMT
Subject: CN=9B7D5AED2AA970D6FEBAEDFDA5C319E957BE9031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:eb:b6:aa:98:19:db:58:1a:a8:22:9c:af:
5e:67:ac:3d:70:8f:0f:2e:5a:f2:8d:2d:7f:c2:de:
56:c6:b1:6e:2d:6e:ec:38:8c:4d:57:82:2e:fc:fe:
f8:6d:34:04:30:b7:95:df:60:d7:fb:91:fb:f8:91:
68:df:63:1e:c0:88:98:05:52:99:f1:8e:3e:c6:4c:
6f:fe:06:a2:64:cb:8a:8c:0c:d7:3f:95:4f:d1:9c:
53:cb:fe:ef:d2:c3:9b:4b:4a:3a:d0:1e:8d:ac:90:
b2:58:2a:55:68:36:92:98:6c:f8:93:8f:52:b7:20:
0a:50:a7:f2:83:47:40:83:dc:f0:7b:d9:1f:27:fa:
a7:c6:2f:69:c4:9e:11:d5:92:33:90:a9:6e:62:e6:
d0:55:fd:21:fe:68:16:eb:d6:97:db:19:0f:0e:96:
4a:01:61:9d:36:60:24:ff:c7:91:82:c8:6f:22:87:
0c:91:7f:da:bb:41:94:65:f8:03:17:1d:8c:17:52:
53:29:3a:c4:97:b4:fb:fe:19:49:30:46:43:10:fe:
4e:b5:af:c1:18:60:c8:df:92:df:80:4f:64:d6:9d:
18:c6:3e:60:45:6f:35:54:67:78:6f:47:46:e9:e9:
a4:87:87:ea:ba:71:14:87:6b:a4:21:ab:26:21:7a:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:5A:ED:2A:A9:70:D6:FE:BA:ED:FD:A5:C3:19:E9:57:BE:90:31
X509v3 Authority Key Identifier:
keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.112.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b7:12:95:02:ac:48:38:77:f8:0e:aa:64:57:c1:dd:7e:f6:
fe:58:d6:2d:ed:f6:7b:d9:52:da:22:57:4c:bf:33:ba:ce:5c:
ac:92:df:0d:39:9e:a1:72:8b:fa:da:00:d4:66:92:2e:75:17:
dc:a0:d3:44:98:a1:0b:3d:af:f7:64:30:d0:cf:b6:5f:c9:da:
3a:f8:db:d3:7e:98:ed:ff:4e:94:7f:2a:ff:5d:19:6c:1e:a6:
f1:8d:54:19:3c:98:3f:ac:c1:72:ac:9f:c4:9f:6f:6a:04:f5:
fb:6e:db:b5:23:78:b7:44:c8:80:48:9b:60:d0:c4:b6:42:7c:
22:10:55:1a:b6:69:3b:6c:df:1c:01:37:51:13:10:99:21:db:
f3:51:69:95:49:69:9e:84:e3:06:2b:f9:76:36:ec:d5:a4:02:
78:e9:0a:88:aa:dc:77:d6:7f:02:f0:dc:e4:7b:dc:a6:71:ee:
b7:3f:d8:99:ba:30:6c:06:89:a1:01:6a:8e:00:82:13:24:5a:
43:46:2a:46:b9:7d:7d:16:7f:ba:4e:fd:46:1d:c6:b0:be:85:
e9:ad:43:ed:73:3f:96:d8:3e:65:6a:17:a5:0c:ba:91:2a:71:
4b:db:62:0a:73:e9:98:f2:32:c5:34:cf:2b:7b:ac:e2:6f:4a:
4a:dd:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net