Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/3137302e37382e35322e302f32322d3234203d3e20323635343935.roa
File: 3137302e37382e35322e302f32322d3234203d3e20323635343935.roa (raw, json)
Hash identifier: wKcxByzisjLDMxfjyd1xrTOxcYSgPHY+DfL7Ci8J7XM=
Subject key identifier: 50:6B:D9:81:B9:43:B6:8B:89:50:23:C2:85:8B:3D:1E:47:C9:7B:AE
Certificate issuer: /CN=ACAB551AAA41D00C17FEB2D03995311064730A91
Certificate serial: 20434EE70A609222386E7D9719A7D0E36EEF1098
Authority key identifier: AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/3137302e37382e35322e302f32322d3234203d3e20323635343935.roa
Signing time: Thu 15 Feb 2024 16:33:29 +0000
ROA not before: Thu 15 Feb 2024 16:28:29 +0000
ROA not after: Thu 13 Feb 2025 16:33:29 +0000
asID: 265495
IP address blocks: 170.78.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:43:4e:e7:0a:60:92:22:38:6e:7d:97:19:a7:d0:e3:6e:ef:10:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACAB551AAA41D00C17FEB2D03995311064730A91
Validity
Not Before: Feb 15 16:28:29 2024 GMT
Not After : Feb 13 16:33:29 2025 GMT
Subject: CN=506BD981B943B68B895023C2858B3D1E47C97BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:b1:c9:7a:71:a5:ee:96:90:8d:48:3c:b2:
c7:fa:14:a1:05:3c:3b:59:f9:51:d5:db:bb:dd:c2:
f6:bf:d6:3c:25:78:2a:e7:c7:40:41:d1:3b:65:f5:
02:b6:aa:4d:48:cb:c7:44:d8:06:f2:40:a1:cf:24:
79:59:47:35:71:55:a4:d7:b0:71:c8:03:4a:f7:55:
83:e1:73:00:78:42:a9:54:54:c4:6e:97:a2:c0:a0:
5d:60:d7:59:6a:c7:80:33:e1:3f:d9:bf:1f:ee:56:
42:4d:02:d2:53:2a:ef:a4:c6:5a:6a:92:67:9a:72:
f1:db:63:71:9d:61:c4:fd:cb:a7:e9:f4:22:0c:12:
0a:b9:54:b7:7e:34:7c:ff:b3:7d:f2:d1:79:4e:7f:
5e:52:8c:5f:a5:81:3e:82:d9:e6:51:33:f5:e9:18:
cd:48:85:0b:d4:df:43:5b:da:f9:89:42:41:7c:14:
d9:eb:71:de:c2:d7:bd:b0:9c:ce:c6:f4:c1:75:dd:
91:c2:ef:d1:05:0f:61:18:32:f0:ca:b9:e6:ff:3d:
83:b1:49:12:19:52:58:d8:b5:0b:57:0a:67:57:61:
21:ec:1c:44:51:0c:99:00:88:c1:92:8c:0e:35:4c:
29:a2:81:6f:57:2a:72:73:e7:73:27:be:38:7d:9b:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:D9:81:B9:43:B6:8B:89:50:23:C2:85:8B:3D:1E:47:C9:7B:AE
X509v3 Authority Key Identifier:
keyid:AC:AB:55:1A:AA:41:D0:0C:17:FE:B2:D0:39:95:31:10:64:73:0A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/ACAB551AAA41D00C17FEB2D03995311064730A91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACAB551AAA41D00C17FEB2D03995311064730A91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/3137302e37382e35322e302f32322d3234203d3e20323635343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.52.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e8:e6:cc:d5:97:a3:ac:05:66:8e:b0:43:d3:16:6f:41:f2:
01:9b:12:d2:34:5e:31:e0:49:0e:be:b6:6d:23:8a:2a:c1:a2:
11:2e:5f:a9:79:ef:a6:9d:f6:54:ba:d5:e0:c5:1e:d4:49:72:
26:d5:50:2f:df:3f:44:34:15:da:0b:b8:08:3e:e4:de:e1:89:
a5:ab:9e:bf:57:58:82:7e:b8:8c:b5:89:7a:28:98:f6:8b:ee:
7c:0f:5e:a0:f2:f9:8b:ae:f8:55:07:fd:06:20:8c:0e:34:dd:
aa:3b:77:d3:8e:f5:fc:03:06:28:a6:0a:c7:9e:1c:f2:c0:e2:
d6:96:4e:11:5e:19:cd:93:61:f3:3e:a1:66:38:c6:dd:42:c2:
82:eb:e7:7f:86:6c:b3:4f:b0:bb:4a:6c:cd:e4:13:b7:82:a9:
10:7e:8f:28:36:a0:cf:4f:c9:f4:76:d9:f6:8c:e6:48:b7:d4:
dc:f9:59:9a:29:9c:e1:3e:b6:eb:69:58:c3:30:f7:67:69:18:
63:cb:2c:f2:82:98:33:fa:25:41:42:d1:67:8b:5c:a4:3a:82:
dc:b7:d2:f8:79:a8:75:da:bf:6d:1d:92:6b:82:84:8a:28:f2:
b8:1d:bf:46:72:43:7d:4c:45:98:12:04:36:ab:39:3a:fb:34:
0a:c7:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org