Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/3137302e3234352e3232382e302f32322d3332203d3e20323636303233.roa
File: 3137302e3234352e3232382e302f32322d3332203d3e20323636303233.roa (raw, json)
Hash identifier: RuRDqK5CbJDbeL3BfUOWt3ih0JUgU+3qGI+zTFpketA=
Subject key identifier: 0A:51:0A:6D:E7:73:5D:99:58:F7:C9:CA:6D:2D:38:03:76:5B:77:3B
Certificate issuer: /CN=AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D
Certificate serial: 5BAA0EC17C2012C04AA8548A8EB607BEB26C990A
Authority key identifier: AA:88:D7:F3:E6:7C:02:0D:61:93:B7:3F:F4:F5:E9:7E:22:D4:D7:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/3137302e3234352e3232382e302f32322d3332203d3e20323636303233.roa
Signing time: Thu 23 Feb 2023 16:19:10 +0000
ROA not before: Thu 23 Feb 2023 16:14:10 +0000
ROA not after: Thu 22 Feb 2024 16:19:10 +0000
asID: 266023
IP address blocks: 170.245.228.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:aa:0e:c1:7c:20:12:c0:4a:a8:54:8a:8e:b6:07:be:b2:6c:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D
Validity
Not Before: Feb 23 16:14:10 2023 GMT
Not After : Feb 22 16:19:10 2024 GMT
Subject: CN=0A510A6DE7735D9958F7C9CA6D2D3803765B773B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:d8:b1:b5:ed:61:94:28:ac:63:34:a1:67:
28:30:ed:a3:ce:4c:1b:2f:d1:af:0a:cc:55:6b:ad:
2a:a3:53:53:73:f5:d9:3e:b3:ee:75:aa:91:a3:22:
58:0b:b1:01:22:12:04:10:9d:78:a3:39:c8:a8:4c:
7e:ee:86:92:b4:28:62:4c:61:63:a4:c0:1e:9e:26:
5e:56:5e:4d:3c:5c:ae:92:a4:54:ed:38:00:cc:88:
83:d6:a4:11:ed:66:16:8a:a1:f5:a8:b4:9c:60:d5:
d2:39:ee:fc:90:66:3a:b0:29:89:35:06:f3:1d:72:
00:fe:27:19:e0:7d:40:ee:e1:94:ce:34:49:95:bc:
99:66:05:8a:97:f1:0e:17:da:b8:64:98:62:1a:3b:
f4:9a:2a:cb:b6:bc:9e:30:ec:0c:5e:65:43:5e:33:
0a:12:73:7c:bb:2e:21:5e:17:a5:90:1a:b9:c4:96:
4b:dd:e1:5e:52:66:88:b7:46:86:a4:f6:2a:fa:80:
cd:22:1d:a6:0f:bb:b0:c9:e5:a5:a0:3a:b9:c0:41:
18:bc:fb:4d:3d:6a:23:55:7e:21:92:ed:78:11:f2:
b4:50:82:ff:c3:90:fc:eb:1c:19:da:d3:30:9f:43:
51:b6:0d:a1:3a:fb:0c:14:06:20:7a:42:a2:07:92:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:0A:6D:E7:73:5D:99:58:F7:C9:CA:6D:2D:38:03:76:5B:77:3B
X509v3 Authority Key Identifier:
keyid:AA:88:D7:F3:E6:7C:02:0D:61:93:B7:3F:F4:F5:E9:7E:22:D4:D7:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA88D7F3E67C020D6193B73FF4F5E97E22D4D75D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CUB7hopSNgqzxkrhritU91cXMCTGVn8D9wgpACKQ4KV/0/3137302e3234352e3232382e302f32322d3332203d3e20323636303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:29:09:e0:78:3d:47:5a:ae:75:65:e6:1d:7b:16:ab:ac:94:
a1:a2:bf:cf:4b:42:84:94:5c:d5:76:69:ce:e1:e2:a7:6a:b2:
67:7b:a0:42:cf:18:84:ac:f0:2e:98:66:58:c2:ff:b8:9a:7c:
77:60:a0:f3:1e:67:52:3e:8b:8c:b2:fb:44:75:d1:08:05:e9:
0d:73:09:84:26:66:13:7a:5d:d6:7c:89:50:60:98:16:c2:b0:
af:45:f1:67:76:e3:58:47:77:21:e7:75:50:4c:11:72:62:36:
ff:50:56:49:2d:c0:7d:2c:ae:91:4c:ed:04:b0:a4:a8:b6:0e:
80:c2:c1:92:41:01:5c:46:81:ad:c2:a4:85:ee:16:46:2b:c6:
3e:da:92:19:b4:35:72:f8:5a:6b:5d:d5:3c:96:bf:b7:06:99:
49:03:0a:3a:5a:98:71:ce:8b:a1:09:34:4d:d4:3a:30:3a:99:
16:1f:69:c1:f1:2d:80:2b:b1:30:59:c1:4a:5f:28:45:26:62:
98:0c:ba:97:3e:6b:6c:d2:c5:be:c8:4e:2b:c3:0f:17:9d:32:
2c:5e:3b:b8:97:54:e8:c8:33:bc:9f:5b:cf:d8:cf:b2:cc:df:
b2:9f:89:6c:eb:06:47:53:ff:20:2d:75:88:b7:79:a9:50:55:
ea:de:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:28 2025 by rpki-client