Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
File: 3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier: RcOem/q60Ln/SlCWsF9pNIpkQeVV9kUneQCcPHFWbOY=
Subject key identifier: 8B:7B:BC:BC:13:B0:21:B5:99:82:A1:0F:45:8C:89:19:EA:46:34:77
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 2202D53322A4C198218DB50A6CD2027ADC2A756C
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
Signing time: Tue 20 Feb 2024 13:43:44 +0000
ROA not before: Tue 20 Feb 2024 13:38:44 +0000
ROA not after: Tue 18 Feb 2025 13:43:44 +0000
asID: 61587
IP address blocks: 170.254.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:02:d5:33:22:a4:c1:98:21:8d:b5:0a:6c:d2:02:7a:dc:2a:75:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Feb 20 13:38:44 2024 GMT
Not After : Feb 18 13:43:44 2025 GMT
Subject: CN=8B7BBCBC13B021B59982A10F458C8919EA463477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:0a:5b:d2:8d:e2:2e:85:55:73:59:09:a3:
00:78:ad:b9:9d:ff:de:ae:bd:c1:4e:5b:17:63:f9:
f6:7f:ad:66:38:8d:f6:d6:07:a7:da:b4:dc:da:4f:
db:81:2b:4e:e8:c1:01:92:56:1a:00:2f:ba:d3:84:
c3:e7:9a:65:49:80:c4:7d:0d:3a:a6:d1:38:19:e8:
e4:2c:de:e3:33:5f:07:61:f5:df:c1:61:be:b5:2a:
79:0b:d2:82:10:09:1c:e8:c5:4a:10:06:59:a0:0f:
56:b2:63:bc:37:1a:7d:c8:96:af:13:8d:86:3a:1d:
51:c5:72:e8:ff:b0:4e:90:dd:61:a7:49:07:34:c5:
62:fe:42:bb:28:1d:c7:23:1b:b0:75:db:76:81:52:
11:66:6d:fc:c3:64:f1:07:27:db:b6:d1:d3:71:b8:
00:81:fd:1c:32:c3:cd:04:ec:62:0d:9a:ac:47:f0:
1c:04:c3:7e:22:47:43:ac:88:da:39:ce:31:f1:7f:
be:f4:69:6c:4a:18:f9:53:59:6f:4d:68:f0:3c:7b:
10:9a:14:b6:b0:37:6a:e3:2c:cc:d6:2d:ad:ec:d7:
0d:61:a9:9c:5d:af:2e:b7:c6:f2:d5:2a:47:04:62:
bc:5f:cc:d2:12:fb:e9:88:b8:a3:fc:c0:9a:61:64:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7B:BC:BC:13:B0:21:B5:99:82:A1:0F:45:8C:89:19:EA:46:34:77
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:01:68:27:8f:72:98:07:fe:7c:e1:70:81:cd:e2:cf:6a:1e:
f0:cf:bc:0a:ab:dc:c5:c0:14:2f:0f:4d:9c:a1:22:20:94:43:
61:cd:8a:dc:cd:70:76:7f:9a:1f:9b:e0:60:80:4c:06:bc:80:
c7:29:d0:80:fc:9f:2a:5a:6d:47:b0:c9:6f:01:c0:56:56:ff:
a0:50:06:4d:40:bd:fe:95:8d:67:eb:ff:30:60:2c:c7:77:78:
44:d8:48:96:d0:38:5c:d9:88:13:13:1a:8f:68:4f:15:85:2b:
b8:31:4d:f3:83:70:17:bd:85:2c:98:79:96:dd:a2:e8:9a:dd:
a9:06:dd:9e:41:10:a3:9d:dd:18:dc:af:43:7f:98:d8:79:0c:
d3:e4:7c:d8:11:c9:86:0f:d7:90:42:c3:15:3f:62:c4:c6:d4:
02:32:a2:05:8c:b3:81:80:71:8e:2f:34:42:f6:b0:6d:c3:cc:
f0:8d:a2:93:a6:63:d4:9a:ca:aa:e8:3e:57:a9:75:16:20:2f:
92:00:67:09:fc:71:60:e1:5e:d1:af:2c:cc:37:fd:05:53:17:
b3:e5:8f:9a:98:5a:08:73:fd:cc:a6:d6:24:2d:61:53:5d:c3:
50:5f:c6:28:51:0a:0a:03:02:a0:58:7c:16:fb:c8:39:b2:7e:
9d:76:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org