Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3234203d3e20323636333934.roa
File: 3137302e38312e37362e302f32322d3234203d3e20323636333934.roa (raw, json)
Hash identifier: WrgPf2SowAORaLH86cXn8WXTAGjwmB7kt+l0mWLrbT8=
Subject key identifier: 04:7D:6D:3C:4E:71:C7:1A:F2:7A:71:F5:8A:0C:C2:7D:72:4B:E1:14
Certificate issuer: /CN=23EA9A431B801C70D987D17DAC30F48448D22E50
Certificate serial: 79C060632F510B7913788A3826F600D6C5D23F6B
Authority key identifier: 23:EA:9A:43:1B:80:1C:70:D9:87:D1:7D:AC:30:F4:84:48:D2:2E:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23EA9A431B801C70D987D17DAC30F48448D22E50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3234203d3e20323636333934.roa
Signing time: Mon 15 Jan 2024 14:07:59 +0000
ROA not before: Mon 15 Jan 2024 14:02:59 +0000
ROA not after: Mon 13 Jan 2025 14:07:59 +0000
asID: 266394
IP address blocks: 170.81.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c0:60:63:2f:51:0b:79:13:78:8a:38:26:f6:00:d6:c5:d2:3f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23EA9A431B801C70D987D17DAC30F48448D22E50
Validity
Not Before: Jan 15 14:02:59 2024 GMT
Not After : Jan 13 14:07:59 2025 GMT
Subject: CN=047D6D3C4E71C71AF27A71F58A0CC27D724BE114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9a:dc:f2:f6:7d:bc:7f:2e:b3:72:af:3a:03:
59:d5:7b:4b:19:4b:4d:4c:10:9b:78:40:9e:17:61:
50:b8:0a:c5:76:6f:6b:58:3f:22:bd:b2:14:42:9c:
a2:ef:e8:df:9d:33:88:9d:69:cf:ec:a5:41:c7:40:
ee:d8:bb:96:fc:89:13:10:61:45:61:41:c7:ce:18:
c5:90:a0:bc:04:36:c6:8b:da:6b:96:52:96:8c:c7:
ad:21:dc:05:9a:4f:3c:80:a6:c4:b5:20:8a:d1:dd:
6a:28:2e:ae:e7:62:e8:95:0e:39:19:67:11:e0:ab:
8a:d0:52:75:ee:5c:6a:d6:1d:5b:c7:ef:43:5c:1f:
c0:89:e4:64:72:ae:6c:fd:ae:5d:9e:d4:7c:70:c6:
40:44:39:f2:9e:cd:98:1e:3e:2b:64:c1:56:55:0c:
8d:0d:5f:19:de:6d:d9:f0:9f:44:8c:e1:4d:9a:9a:
11:ea:5d:09:0e:a6:dd:16:12:7b:43:9f:f8:92:be:
7e:7e:f0:c8:b7:c1:52:99:11:89:59:6a:ff:3d:a5:
32:8c:be:41:5b:e6:77:16:90:64:6e:9e:fe:18:ef:
35:0f:13:18:c6:cf:9e:7d:16:31:18:74:a2:3f:a5:
8e:96:f0:48:47:0a:66:b4:c7:36:1a:10:dd:63:eb:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:6D:3C:4E:71:C7:1A:F2:7A:71:F5:8A:0C:C2:7D:72:4B:E1:14
X509v3 Authority Key Identifier:
keyid:23:EA:9A:43:1B:80:1C:70:D9:87:D1:7D:AC:30:F4:84:48:D2:2E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23EA9A431B801C70D987D17DAC30F48448D22E50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3234203d3e20323636333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.76.0/22
Signature Algorithm: sha256WithRSAEncryption
29:88:cf:1f:f5:68:3b:3f:8e:c5:55:6b:62:4c:ea:c5:dc:df:
e8:e3:a0:33:12:93:63:4f:34:a3:30:ab:c8:70:cd:3a:ea:c9:
23:a8:9e:8a:9f:29:53:29:c6:4a:df:dc:c7:42:c4:f7:19:78:
c3:e2:84:f2:1e:5a:83:b1:91:65:a6:28:15:b6:03:da:51:a2:
cb:f3:16:ff:f7:95:d8:c5:57:93:8f:09:f1:ea:2c:c9:fd:53:
7d:92:6d:23:d2:6a:d4:83:bf:9e:6c:4f:cf:2a:c9:02:a5:41:
73:c4:21:0b:a0:a4:d7:73:b9:bc:95:8c:78:fb:2d:64:33:6b:
a3:bd:2d:bd:91:4e:0c:d8:9d:fe:b7:42:26:04:9f:58:02:b7:
c4:f8:84:fd:0b:35:02:ee:2d:2f:52:61:bc:36:e0:6c:fc:80:
02:b3:f4:a3:de:cc:96:30:34:b0:97:8a:42:45:de:4f:72:84:
39:9b:7a:04:da:cb:52:03:12:7f:1f:48:34:10:81:f5:7a:b4:
2e:8e:9b:85:d6:68:34:a6:ed:fe:cc:9b:5d:1e:10:4c:c7:23:
c9:c4:72:75:5c:75:46:09:5e:c7:2f:f8:9c:c7:ef:7c:e5:fb:
e9:84:f7:f0:2e:fc:84:fe:10:97:cc:1e:0f:2b:d8:41:c0:cb:
a9:8b:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:09 2025 by rpki-client