Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa
File: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (raw, json)
Hash identifier: g3FptgzvOifhf1pzxmcinxrUR/oG31sCMvnWRV/6axE=
Subject key identifier: 7E:1A:74:1E:64:64:94:52:74:AE:25:7F:DF:07:77:73:80:D6:B7:07
Certificate issuer: /CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Certificate serial: 473044F85303E30B529344051A47D9F31C98F15B
Authority key identifier: 3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa
Signing time: Wed 10 Jan 2024 17:00:43 +0000
ROA not before: Wed 10 Jan 2024 16:55:43 +0000
ROA not after: Wed 08 Jan 2025 17:00:43 +0000
asID: 262343
IP address blocks: 177.126.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:30:44:f8:53:03:e3:0b:52:93:44:05:1a:47:d9:f3:1c:98:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
Validity
Not Before: Jan 10 16:55:43 2024 GMT
Not After : Jan 8 17:00:43 2025 GMT
Subject: CN=7E1A741E6464945274AE257FDF07777380D6B707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:bd:bb:fd:97:0d:e3:22:47:61:95:31:ac:
73:ff:73:c2:ab:b8:cc:5b:1d:69:81:89:44:a0:59:
a5:d5:0a:1b:37:22:25:ed:81:fa:6f:04:fe:bf:3c:
b4:56:de:29:f5:94:e3:01:77:52:47:6c:22:f1:48:
bf:9a:e1:4f:c4:f0:b2:be:f0:df:1d:9b:2f:65:1c:
83:e2:ac:ba:eb:fa:11:d5:cc:ec:39:a5:a6:6d:ea:
8a:b9:da:d7:16:61:fe:9a:ac:1a:9a:25:df:14:ce:
d3:bf:40:27:3f:a2:92:3e:32:d1:98:83:0b:ed:b9:
af:f5:16:62:c9:67:f7:98:76:7e:3d:bd:f9:45:e4:
27:12:e4:42:67:55:30:fb:d1:89:3b:7a:39:2c:f7:
55:fd:c3:c5:2a:ec:6c:ea:5f:5c:a3:18:0d:28:e8:
e9:89:40:37:68:d6:0d:8b:06:67:ed:e3:65:45:2b:
df:e1:40:3f:ab:6d:f7:9e:e3:da:d3:1e:46:2a:a1:
2d:d4:c8:a9:91:d6:45:cf:5a:9d:c2:54:b0:95:1a:
e5:3e:ff:2c:e9:a0:69:d9:20:35:5b:ea:da:59:a0:
36:36:94:44:5a:a0:e0:e9:74:e6:0d:6f:e4:38:51:
47:4b:b4:78:d8:a2:b6:dc:80:a2:5b:0d:a2:03:06:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:74:1E:64:64:94:52:74:AE:25:7F:DF:07:77:73:80:D6:B7:07
X509v3 Authority Key Identifier:
keyid:3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.126.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:77:39:78:7a:ff:2d:45:be:de:0f:3e:eb:b1:5e:26:6a:35:
4a:23:63:c0:4d:4f:8d:6a:8d:a6:a0:96:eb:45:e4:35:45:e5:
0a:91:4e:bb:82:4c:bf:f5:b5:87:3b:31:44:5f:ca:6b:ba:70:
81:42:36:6e:eb:a2:3d:80:6f:65:5d:5b:2b:5a:5e:40:a8:51:
76:7b:2a:85:6d:67:34:dc:a7:b5:6c:78:d2:92:74:48:f9:9e:
af:90:f1:70:fa:52:dc:7d:f0:8a:b5:f0:d6:99:75:31:62:6c:
c2:3e:88:36:27:e9:b3:c3:b3:a1:5f:04:b9:66:f9:7f:73:d5:
e6:92:11:c7:ad:3f:76:f2:6e:1b:ba:93:b3:d3:70:d1:4b:17:
92:31:1c:4c:09:3f:96:8a:71:e8:30:73:e5:29:0d:49:b1:d9:
d0:70:c0:d3:18:a4:18:de:7f:fd:1a:e4:9e:43:6a:de:fd:f6:
76:85:b0:87:14:47:d4:90:5e:6d:0e:24:cc:53:fe:2c:77:b0:
4e:c9:39:d1:39:6c:32:3d:f2:97:46:ed:a1:1f:86:ed:1f:5f:
3d:9d:17:4c:ae:17:f7:84:28:5f:a0:a4:fd:20:72:f4:ba:45:
c0:90:a9:ee:28:56:04:a6:71:f5:12:33:8b:12:b9:99:62:bb:
e4:31:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org