Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
File: 3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (raw, json)
Hash identifier: sBMkp4ssSjVbPq8Awa4d+NTQuUrKDBAjteXkcqleQgA=
Subject key identifier: 68:8F:E0:A0:0D:56:B3:E2:E8:6B:5F:8A:07:36:F8:8A:5D:7E:BF:29
Certificate issuer: /CN=AA7F3B6BBB93519197F744AAD322DACA6D94222A
Certificate serial: 638AB47B3DD6DA68CE23070465CB1B4E8318D536
Authority key identifier: AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
Signing time: Mon 09 Sep 2024 13:45:27 +0000
ROA not before: Mon 09 Sep 2024 13:40:27 +0000
ROA not after: Mon 08 Sep 2025 13:45:27 +0000
asID: 53019
IP address blocks: 177.70.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8a:b4:7b:3d:d6:da:68:ce:23:07:04:65:cb:1b:4e:83:18:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7F3B6BBB93519197F744AAD322DACA6D94222A
Validity
Not Before: Sep 9 13:40:27 2024 GMT
Not After : Sep 8 13:45:27 2025 GMT
Subject: CN=688FE0A00D56B3E2E86B5F8A0736F88A5D7EBF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:e8:3a:ff:60:fe:04:f4:51:d2:c2:cd:85:
31:32:0d:4c:2d:d6:fc:55:08:07:05:34:c8:ad:aa:
d0:e2:32:4f:47:44:d0:68:86:16:02:cc:fd:fc:50:
ff:4d:52:ad:59:c8:c4:13:89:5c:0a:a3:c8:1a:7a:
6a:fc:21:c3:54:53:65:19:96:cb:31:88:2a:83:99:
2a:70:9f:47:99:ef:3b:ff:67:05:a5:0d:ab:fe:4f:
7c:fb:3b:42:c4:70:e9:45:a7:3b:aa:a8:fa:0d:31:
71:a5:4a:be:d0:d3:3b:d8:ed:41:28:dc:e6:25:24:
b7:5b:62:34:12:5b:60:c6:06:54:50:2f:ab:19:17:
29:08:71:f4:77:4f:08:8e:a4:ab:ee:02:8c:b3:a1:
7a:df:ec:2e:8d:32:22:74:b9:12:40:98:65:a0:3f:
5c:56:74:8b:63:f5:f7:2c:ed:f8:d8:e4:e3:c2:8f:
5f:6b:bb:dc:99:e2:09:01:83:de:4a:7a:a8:18:6a:
a1:8e:68:04:52:5d:3e:18:13:88:15:e8:80:c8:4c:
75:f9:f7:b9:01:29:4d:23:43:11:27:de:f8:3b:fb:
a2:d7:61:96:79:e6:7d:47:90:2e:de:ea:c9:87:d4:
e2:9c:51:93:09:65:c1:cf:d1:ac:eb:3d:0f:34:16:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:E0:A0:0D:56:B3:E2:E8:6B:5F:8A:07:36:F8:8A:5D:7E:BF:29
X509v3 Authority Key Identifier:
keyid:AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/AA7F3B6BBB93519197F744AAD322DACA6D94222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.160.0/20
Signature Algorithm: sha256WithRSAEncryption
81:73:e1:37:7b:4c:a8:98:dc:3d:94:c6:2f:e5:c3:f4:4a:a7:
09:f3:08:2e:97:78:d9:aa:d7:07:5f:13:c2:6c:fd:6d:be:11:
1b:45:33:54:a6:a7:13:4d:1b:80:71:25:da:7a:03:f1:d2:01:
16:0e:5a:37:d9:f1:cd:db:f9:68:9f:a8:3c:41:3a:99:5f:22:
d9:e9:8d:f6:4b:9c:ef:45:1b:49:7f:ab:ae:a8:65:9a:22:62:
a4:1f:bb:db:34:7a:80:eb:1e:7d:e0:a6:48:e9:66:6c:86:49:
6f:2b:f3:be:9e:a0:37:f7:f9:c3:1e:cc:c9:62:25:46:e6:e2:
ec:8c:2c:d7:9d:77:18:b2:64:b1:aa:dc:2b:87:93:61:4a:c4:
e1:04:5b:38:cd:ba:0b:7c:26:9d:af:68:98:6a:60:bd:da:d2:
9b:fd:77:c2:5b:1f:61:09:e7:f5:ba:e7:14:d7:45:39:1a:85:
1d:c5:d9:6f:93:c6:67:cd:cb:39:b5:db:d5:da:86:0c:34:18:
d8:10:fb:2f:d4:be:99:b2:c9:ae:88:be:67:07:b0:2a:03:5b:
89:7a:2c:f1:82:ba:15:76:cc:f9:f0:62:01:e8:30:b3:54:f2:
90:d1:54:f6:b4:91:b2:84:18:25:a3:ab:b0:be:ec:96:31:66:
f0:83:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:23 2025 by rpki-client