Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa
File: 3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa (raw, json)
Hash identifier: xKzZrxpIwgqp6PiVgej4zdNuJg/D0oG8EY+UDKgb2eY=
Subject key identifier: 88:E8:F5:77:F4:0F:DB:D4:6F:36:4F:B9:37:35:1A:73:C7:D2:68:AE
Certificate issuer: /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial: 4FC9FB1A10B42B93CC1F38B9660492D848A2E333
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa
Signing time: Sat 04 Nov 2023 20:00:00 +0000
ROA not before: Sat 04 Nov 2023 19:55:00 +0000
ROA not after: Sat 02 Nov 2024 20:00:00 +0000
asID: 264247
IP address blocks: 138.118.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c9:fb:1a:10:b4:2b:93:cc:1f:38:b9:66:04:92:d8:48:a2:e3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Validity
Not Before: Nov 4 19:55:00 2023 GMT
Not After : Nov 2 20:00:00 2024 GMT
Subject: CN=88E8F577F40FDBD46F364FB937351A73C7D268AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:c8:9c:a6:63:0f:c3:92:2c:83:b8:1a:30:
77:01:86:22:51:3a:d5:5e:65:3d:a9:e6:cd:43:ff:
6a:47:71:c9:4d:39:5e:65:be:88:72:af:58:de:e5:
80:3d:59:6b:d6:a9:5e:09:89:3f:94:84:0e:3d:6b:
3a:12:70:f0:05:0a:0d:80:a3:19:d6:61:d3:fa:d9:
93:2b:03:40:8e:e8:e8:2f:e2:b0:36:41:aa:14:c4:
3d:bb:09:01:c6:e3:b8:78:9b:e0:5a:ef:9c:d3:f9:
3f:60:bc:b7:cc:bb:ce:5d:28:b3:e7:49:ba:a1:ee:
4d:26:fb:aa:9d:45:78:d7:c0:30:7f:0c:1f:a1:ef:
e1:fd:16:43:75:6f:bc:d2:59:aa:e9:06:dd:fe:fa:
15:12:eb:8b:6e:fa:10:39:d8:66:a6:2d:0c:40:34:
76:57:5d:5a:97:42:f9:cd:53:2d:eb:98:ec:19:73:
ee:aa:67:d0:21:3b:22:b5:9c:a2:da:99:1d:82:88:
e4:9b:a7:c3:8c:50:85:1c:37:ea:b1:28:f8:89:47:
0c:7b:82:41:24:0f:13:44:b7:63:b1:92:9a:8d:e1:
5e:c7:93:bd:8a:af:cd:08:fc:a5:28:55:23:3e:7d:
59:f0:e0:6b:7e:81:7c:89:91:38:12:df:c1:84:9f:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:F5:77:F4:0F:DB:D4:6F:36:4F:B9:37:35:1A:73:C7:D2:68:AE
X509v3 Authority Key Identifier:
keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/3133382e3131382e33322e302f32322d3232203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:f7:02:2b:57:b6:53:d8:fa:e5:45:26:09:f3:f1:f9:16:54:
8e:25:05:69:ae:13:48:5a:ce:ce:f4:c6:fa:72:aa:a0:57:7a:
1d:20:a5:1d:f9:b4:2b:ba:ba:e8:e9:55:20:56:2b:39:cf:52:
a7:e6:40:59:df:cd:71:f1:44:46:5f:04:98:2a:55:03:77:0a:
d2:2f:4d:f7:9a:ec:55:00:85:e6:2e:50:99:5d:4c:bd:e8:ce:
54:ea:42:37:f2:ef:4f:8b:70:15:73:ef:37:d3:43:47:60:30:
d1:9d:b2:26:eb:55:f6:d9:0c:0d:d3:b8:22:09:e3:9a:04:14:
f3:cc:54:61:be:be:6f:1b:8d:03:04:62:a8:fc:51:fb:ca:61:
d7:66:87:f2:31:4e:73:eb:56:d2:6f:e5:30:a3:ee:fc:9e:ff:
49:b7:2a:aa:8f:4d:4b:b6:8d:77:7d:b3:07:5e:be:5b:bf:dc:
0a:7b:a5:f5:f3:1f:eb:01:cf:86:f8:cb:90:c6:69:08:6d:dd:
94:21:9e:48:0a:d8:d5:9b:46:56:2d:d3:ac:e3:cc:2c:b4:98:
ea:42:b1:32:bd:6a:43:76:6d:05:21:a2:67:f3:20:d4:54:81:
f1:51:15:29:b9:ab:b1:36:47:e6:87:df:71:b1:46:21:23:d3:
02:1b:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:19 2024 by rpki-client on console.sobornost.net