Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
File: 3137302e302e33322e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier: 14zwWM+N5h6OQ+snZ6vKPwRStDVshIOQcg50VD8v18A=
Subject key identifier: 0B:1F:F8:98:AA:3D:04:F4:77:55:93:3D:AC:CC:C9:9F:85:33:4C:08
Certificate issuer: /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial: 3F3729C2BC80429181AFE34FD798D7BA55D35338
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
Signing time: Wed 04 Dec 2024 03:42:32 +0000
ROA not before: Wed 04 Dec 2024 03:37:32 +0000
ROA not after: Wed 03 Dec 2025 03:42:32 +0000
asID: 264550
IP address blocks: 170.0.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:37:29:c2:bc:80:42:91:81:af:e3:4f:d7:98:d7:ba:55:d3:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Validity
Not Before: Dec 4 03:37:32 2024 GMT
Not After : Dec 3 03:42:32 2025 GMT
Subject: CN=0B1FF898AA3D04F47755933DACCCC99F85334C08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:d3:63:a1:6a:cd:90:e8:ac:00:7c:57:28:
92:cb:67:bc:9b:e2:6c:f0:ea:87:c9:9e:f3:9f:8d:
94:59:93:bc:bd:0a:1b:f6:6f:a7:cd:4a:60:9b:17:
4a:cd:57:cf:53:0f:e4:f7:84:99:29:55:27:df:c0:
a7:31:ac:3e:17:a2:36:3c:b8:7e:79:17:42:44:4f:
4d:c1:10:25:9b:09:29:32:b2:79:c1:93:ec:d2:4b:
87:6d:02:bd:48:2c:e7:c3:f7:3d:7d:9a:09:3d:44:
1a:b1:4b:90:42:a3:d5:24:83:11:95:93:bd:89:c6:
38:c8:f0:b2:21:bf:6e:bd:f2:a1:c9:71:ca:dd:91:
be:4e:38:68:26:64:e6:70:fe:39:3d:05:99:67:44:
6a:b9:e4:29:61:2f:e2:2e:e2:8f:8b:ab:4d:25:b0:
05:6c:07:68:80:64:0b:77:b3:e5:50:3a:c7:64:b7:
a7:12:28:56:ca:af:6d:92:16:d4:17:7f:56:d5:fc:
6c:3c:80:98:09:f4:97:08:98:d6:2d:59:fc:ca:2d:
47:f8:45:5e:ad:f4:2b:bf:f3:b4:4c:bf:f2:b2:1f:
56:7c:9e:1c:f2:8c:ef:1f:42:4b:da:43:66:a9:c5:
27:aa:3e:14:02:17:2d:03:7f:55:c9:b5:fe:a4:fa:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:F8:98:AA:3D:04:F4:77:55:93:3D:AC:CC:C9:9F:85:33:4C:08
X509v3 Authority Key Identifier:
keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.32.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:dd:07:4b:6b:c6:5a:85:b4:59:0b:6f:80:8a:be:92:ce:5f:
23:f8:64:b6:b0:37:88:c8:b2:62:58:dc:43:8d:3d:5b:5f:36:
b3:8a:60:47:3b:38:8d:ff:f9:be:ea:01:81:43:60:8b:06:30:
43:35:c0:50:2c:43:e9:b6:72:eb:cf:37:8b:3a:ea:a9:34:68:
fc:d5:c8:71:f5:dd:6a:7a:12:ec:24:57:97:8f:a7:da:4a:1f:
a0:c2:27:03:4c:07:d2:d9:05:67:73:1e:a5:eb:22:e7:46:5c:
ef:f4:34:f1:30:56:5e:a0:fa:05:68:de:ac:7e:7f:d7:a1:8f:
b5:64:22:29:f2:09:60:27:59:fc:1d:c8:95:d8:b2:53:e1:52:
82:3e:f2:72:45:71:53:fc:16:c8:b4:8e:3a:2a:92:04:78:08:
e0:4d:88:bd:01:1c:22:5d:05:cd:c5:6b:d9:d9:3e:85:84:c4:
9e:9c:2b:d9:f8:cf:0a:f9:ac:c4:33:dc:af:4a:00:56:f2:4b:
c0:91:db:7e:f7:cb:f4:28:ea:ed:7f:96:63:46:97:67:a7:c1:
fb:2e:60:92:cb:7a:e6:3b:46:c7:be:7f:31:b9:52:95:bf:4e:
39:42:ce:09:1b:f4:1a:43:30:34:44:9d:e0:bc:a7:e4:01:32:
1e:c1:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:29:48 2025 by rpki-client