Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
File: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (raw, json)
Hash identifier: zHvOXGHFf9UL4J6aOa1F9d9hz/YqWVR78n9SDQSRfQY=
Subject key identifier: FA:2A:A9:BD:65:4B:64:98:E9:00:24:82:4D:F2:A6:F1:64:65:FC:44
Certificate issuer: /CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
Certificate serial: 24ACB4A155A750CCE937DE0FF59C649F609E6FE5
Authority key identifier: CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
Signing time: Mon 15 Jan 2024 20:41:11 +0000
ROA not before: Mon 15 Jan 2024 20:36:11 +0000
ROA not after: Mon 13 Jan 2025 20:41:11 +0000
asID: 265385
IP address blocks: 170.254.248.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ac:b4:a1:55:a7:50:cc:e9:37:de:0f:f5:9c:64:9f:60:9e:6f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
Validity
Not Before: Jan 15 20:36:11 2024 GMT
Not After : Jan 13 20:41:11 2025 GMT
Subject: CN=FA2AA9BD654B6498E90024824DF2A6F16465FC44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:1d:98:3f:6a:d9:f6:89:32:4b:f2:81:24:
40:22:b5:4b:0f:56:c6:b9:c3:d7:92:bc:59:69:72:
9c:3f:ea:f9:3e:a1:cc:ea:07:f1:1a:0d:e6:20:b3:
ee:ed:58:58:f3:9f:1c:d0:ff:d2:84:95:de:b2:b0:
b7:f7:d7:94:50:6f:3d:75:c0:fe:c3:73:97:14:86:
b1:54:45:9b:eb:53:b5:9e:79:cc:75:17:ce:73:40:
10:4d:86:f5:84:41:84:4c:88:1d:d2:92:ea:02:00:
76:d5:ba:81:94:94:b0:a7:72:41:9e:b4:c9:a3:74:
4e:cb:00:80:42:9f:30:1e:36:7e:ae:b0:b9:8f:48:
98:6d:ab:d6:89:cf:21:03:cc:1b:c2:91:90:d4:28:
ef:18:a7:62:6f:17:e6:34:a6:a7:a1:0a:ae:25:28:
5b:a3:94:b3:ad:d0:bf:5f:58:4c:2f:9f:80:b1:f3:
74:42:23:84:d1:4b:9a:40:be:e8:d3:bf:15:6e:d3:
0f:e4:36:48:c2:f9:f3:ff:c4:47:b3:2a:aa:c7:7f:
e4:60:2d:c2:2d:7f:d6:39:40:40:ef:46:a5:8b:8c:
42:b6:4a:bf:e4:93:bb:fe:ce:83:0c:25:54:03:42:
98:cc:3c:d7:60:73:f7:85:2e:68:a2:c4:17:2f:12:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:A9:BD:65:4B:64:98:E9:00:24:82:4D:F2:A6:F1:64:65:FC:44
X509v3 Authority Key Identifier:
keyid:CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.248.0/22
Signature Algorithm: sha256WithRSAEncryption
26:a5:3c:c7:cf:57:7c:c7:de:dc:0b:78:33:8f:d8:c5:a0:77:
eb:f9:a2:32:3d:9e:3e:fe:2e:60:f5:f0:27:40:fc:60:06:42:
f8:cb:ce:8c:01:4a:a0:5a:bf:b2:25:b1:1b:94:e0:98:85:f9:
85:e1:59:7f:12:ba:db:d6:ba:70:29:f9:fc:b8:60:62:78:e5:
58:72:8e:62:94:61:a5:0b:ae:26:6b:32:29:cf:d5:ec:80:69:
92:3b:33:ae:5f:33:4d:d2:8d:1b:4a:27:12:cf:67:48:52:2a:
9c:51:c2:68:8e:40:e3:33:3f:78:5f:4d:0d:9e:c8:2d:bd:4d:
dd:7b:a8:26:2c:d2:3c:51:63:4f:17:3b:d3:86:17:6a:63:0a:
f1:41:a4:9a:d2:fe:9d:79:85:ab:8f:de:b0:42:b1:75:47:49:
75:9e:14:6f:44:e4:79:c4:ba:69:79:99:78:a7:b5:36:5f:cb:
63:51:68:7c:26:7c:33:73:c1:fa:be:f4:65:5c:a2:76:1e:7b:
63:8e:70:69:2c:a4:39:63:c1:22:70:a6:62:06:ae:60:f8:00:
b5:c4:40:30:48:c0:72:0d:6e:82:aa:2c:77:9f:52:68:2d:78:
40:d5:68:52:e0:55:55:48:1b:a0:63:e4:11:ca:ba:ef:89:51:
73:50:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org