Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
File: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (raw, json)
Hash identifier: SKuuHq+dVzWtD1JvVY6rMJ0PnNbJDhAmLnPasGfAGJI=
Subject key identifier: 9D:3A:00:D6:32:D1:CB:38:AA:FB:73:68:92:2C:F4:71:09:CB:9D:D9
Certificate issuer: /CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
Certificate serial: 0C22C2315A6D8090C7426F98E5F90CA43285A40C
Authority key identifier: 27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer
Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
Signing time: Tue 12 Mar 2024 12:49:26 +0000
ROA not before: Tue 12 Mar 2024 12:44:26 +0000
ROA not after: Tue 11 Mar 2025 12:49:26 +0000
asID: 264009
IP address blocks: 170.78.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:22:c2:31:5a:6d:80:90:c7:42:6f:98:e5:f9:0c:a4:32:85:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
Validity
Not Before: Mar 12 12:44:26 2024 GMT
Not After : Mar 11 12:49:26 2025 GMT
Subject: CN=9D3A00D632D1CB38AAFB7368922CF47109CB9DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:bf:f8:30:ee:72:b1:2d:b1:12:7b:cd:3e:
98:b9:ed:df:f9:a8:ea:f6:3c:fb:3c:5e:89:6a:af:
5c:9d:c4:db:e8:53:cd:1b:11:b6:fc:dd:7d:71:6a:
e6:96:3e:40:10:5d:6b:96:8e:0a:a9:63:b6:41:53:
07:66:0b:88:fd:26:58:83:2d:5e:54:ef:2c:77:5a:
21:a4:d1:4f:21:e2:ac:5d:d8:bb:ee:c5:79:dd:a3:
e1:85:12:51:59:e1:5d:48:42:61:66:be:26:14:4f:
1a:39:9f:c6:05:8a:c9:6f:79:8a:b4:3a:92:f9:4c:
b9:42:1b:82:b5:4d:33:dd:a6:62:0b:52:97:64:c8:
1a:ad:f7:46:07:34:73:16:23:12:46:5b:c5:52:ea:
82:33:3f:ab:58:15:05:2c:7b:fb:cc:95:8a:da:b3:
ca:64:8c:51:9e:a8:75:9e:19:cc:c8:c2:32:ac:81:
a2:e3:a6:98:16:81:8c:72:f9:74:34:26:a5:e0:d4:
05:59:a6:a4:26:75:e6:2a:63:5c:4d:4c:d3:1f:67:
34:86:6e:2e:eb:e7:b6:47:20:10:bb:bf:ed:e5:40:
0c:50:0e:7b:33:9d:ac:d9:67:c7:70:da:29:ee:48:
bc:13:8d:b1:0b:4c:42:8e:03:50:0f:4e:d8:72:e7:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:00:D6:32:D1:CB:38:AA:FB:73:68:92:2C:F4:71:09:CB:9D:D9
X509v3 Authority Key Identifier:
keyid:27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.120.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ee:ed:5a:17:e3:e3:f1:33:8c:ca:91:af:1b:58:5a:94:a3:
83:14:fb:80:32:78:64:14:eb:98:8d:52:8c:b9:70:d2:03:d9:
b6:e1:93:4b:37:1c:a5:1d:6c:5f:82:e0:46:6e:00:e6:fa:ba:
3f:d5:34:d9:04:45:17:24:3b:c5:8a:c2:19:a4:68:96:94:35:
7f:cc:9f:98:08:81:27:8a:6d:04:16:e4:96:22:d2:de:aa:f4:
e6:af:38:e5:04:f2:72:be:7f:3f:86:b3:cd:a7:5a:44:46:24:
46:c3:5e:91:34:5b:6c:db:61:3b:47:c3:73:32:95:d5:80:eb:
ce:c5:ba:b9:d5:5c:0e:b6:20:77:3f:ee:f9:71:54:9f:d2:69:
c2:bf:1e:f2:de:b4:b4:44:85:f7:3e:e7:e9:b2:dc:21:a9:85:
66:f8:4d:b6:23:18:b0:b0:17:b6:de:e1:00:dc:48:09:2c:2e:
dd:b4:3a:b4:e0:fd:ff:13:e2:4b:ad:d6:12:b3:07:a3:47:1c:
56:0d:0c:d3:21:87:00:11:03:9b:1a:3b:79:de:8e:e9:bd:84:
43:09:8c:35:58:f7:ab:b3:d1:62:08:61:cf:70:a7:8a:3c:ba:
79:ec:9f:6a:72:3a:3e:b2:f1:dd:b9:1e:7e:28:c8:42:39:72:
2e:4a:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org