Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa
File: 3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa (raw, json)
Hash identifier: u5X9uI/NdlpB4j3e+SOtcPCubEOcl0wF2P7F051OE68=
Subject key identifier: 28:F5:03:CE:0F:5D:BA:D2:9B:3F:F9:9E:6B:7D:AC:AE:E7:85:25:AF
Certificate issuer: /CN=32511338FC4EB1C67F8A3C1EFE0E693913272E1F
Certificate serial: 57063175468A010FF548BF81C27206C1CD2025C7
Authority key identifier: 32:51:13:38:FC:4E:B1:C6:7F:8A:3C:1E:FE:0E:69:39:13:27:2E:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32511338FC4EB1C67F8A3C1EFE0E693913272E1F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa
Signing time: Tue 30 Jan 2024 12:05:44 +0000
ROA not before: Tue 30 Jan 2024 12:00:44 +0000
ROA not after: Tue 28 Jan 2025 12:05:44 +0000
asID: 270595
IP address blocks: 177.152.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:06:31:75:46:8a:01:0f:f5:48:bf:81:c2:72:06:c1:cd:20:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32511338FC4EB1C67F8A3C1EFE0E693913272E1F
Validity
Not Before: Jan 30 12:00:44 2024 GMT
Not After : Jan 28 12:05:44 2025 GMT
Subject: CN=28F503CE0F5DBAD29B3FF99E6B7DACAEE78525AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:94:e4:ad:10:fe:9a:d2:80:b8:27:e2:ac:
d3:3e:62:80:c4:d9:40:f4:f0:c2:ae:33:cf:6e:af:
f7:da:8f:74:b2:9f:cc:ff:c9:0d:c8:d7:92:f1:4b:
59:c8:da:eb:8d:d6:60:00:ef:20:18:63:b9:b8:92:
ec:d3:12:b2:da:16:be:9c:29:93:4f:58:2e:93:12:
b4:9c:db:47:26:b7:93:72:cf:5a:ff:42:66:37:96:
17:d0:77:79:8d:19:10:9e:de:97:86:d2:a8:d7:ba:
bc:55:45:08:0b:36:44:3f:8c:7b:60:99:8b:2b:dc:
39:48:a4:1d:f9:eb:2e:63:c3:63:4c:46:3d:0a:27:
21:b1:8c:83:0e:ba:40:33:b3:87:4d:a1:8a:18:e5:
a1:49:ef:35:0f:da:34:36:f7:f7:95:f3:41:34:3d:
ec:87:af:c8:cc:78:42:0a:34:a3:f2:90:b4:17:ad:
4f:48:84:8e:b5:0f:af:b8:28:ec:bf:ee:ca:25:f7:
85:66:1d:a1:2d:85:35:fd:2b:48:b1:39:cc:f3:bf:
ae:c2:1b:70:e3:6f:1a:25:c7:0a:6f:72:cd:73:b9:
15:3b:be:77:13:ab:fe:fb:b6:39:28:0e:3c:64:fb:
0b:87:fc:18:f2:3b:9f:39:af:2b:9b:d1:02:00:f3:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:03:CE:0F:5D:BA:D2:9B:3F:F9:9E:6B:7D:AC:AE:E7:85:25:AF
X509v3 Authority Key Identifier:
keyid:32:51:13:38:FC:4E:B1:C6:7F:8A:3C:1E:FE:0E:69:39:13:27:2E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/32511338FC4EB1C67F8A3C1EFE0E693913272E1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32511338FC4EB1C67F8A3C1EFE0E693913272E1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.152.108.0/24
Signature Algorithm: sha256WithRSAEncryption
32:31:7a:ce:8b:0b:21:e9:98:ac:48:ad:70:c3:8d:5d:0e:f3:
68:dc:4e:00:88:00:74:c1:be:7a:b6:25:da:5d:5a:09:1b:39:
4d:99:8e:8f:06:23:c0:49:4a:52:10:7e:7b:b0:5b:4b:18:44:
39:65:c3:6b:76:bc:d8:57:6e:9a:49:be:dc:19:6f:4c:bf:fb:
9c:5f:36:30:65:3f:64:ee:cd:f3:7f:8e:7a:75:20:02:63:c5:
76:7a:5d:9d:89:d0:93:c6:e5:49:c2:04:ae:b4:0a:f3:8a:e2:
f2:ea:9d:1c:dc:96:e4:f9:c5:88:9a:39:0e:8d:f5:b9:3c:c6:
66:e6:08:6b:43:d5:71:8b:72:b8:84:66:80:6d:34:00:77:42:
ef:d8:c3:2a:0d:ab:71:c1:0a:dd:17:0e:2a:c4:da:24:b5:02:
66:26:42:27:6e:a6:cc:44:bf:7b:c5:66:c5:dd:6a:c6:28:55:
8e:93:ab:1e:a9:04:c7:48:f3:ba:11:83:9f:7a:d4:37:ea:22:
b3:b8:e7:1a:b6:48:ed:ed:df:36:16:a1:4f:62:20:be:ad:48:
ef:ca:33:6f:dd:e5:70:0c:e8:9a:a4:5e:05:3e:52:4c:a4:e8:
1a:34:2f:f5:d3:85:93:60:08:8a:3b:56:25:3a:9d:0c:03:5f:
5b:c6:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org