Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32332d3233203d3e203533313533.roa
File: 3138372e36312e39362e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier: /g2/aXEsup04YS+nGK6/G9EAWj+4hJ5ug52/IY9oJZY=
Subject key identifier: 2A:76:BF:6A:AF:C8:CD:4E:5A:98:FF:EF:22:5E:BE:05:C8:46:9D:9A
Certificate issuer: /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial: 1412E478A79ED69B65285396AEB36945BDEB7071
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32332d3233203d3e203533313533.roa
Signing time: Wed 15 Mar 2023 20:08:57 +0000
ROA not before: Wed 15 Mar 2023 20:03:57 +0000
ROA not after: Wed 13 Mar 2024 20:08:57 +0000
asID: 53153
IP address blocks: 187.61.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:12:e4:78:a7:9e:d6:9b:65:28:53:96:ae:b3:69:45:bd:eb:70:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Validity
Not Before: Mar 15 20:03:57 2023 GMT
Not After : Mar 13 20:08:57 2024 GMT
Subject: CN=2A76BF6AAFC8CD4E5A98FFEF225EBE05C8469D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:74:d9:69:d6:e5:1a:88:28:5a:c0:62:f7:
02:08:ce:63:7e:21:7d:f0:56:7b:30:ee:bf:a6:ab:
fa:1a:6e:1e:40:64:43:59:48:23:8b:06:d1:61:b4:
01:f6:0f:ff:78:e9:fb:43:68:0e:7d:21:28:8b:dc:
b4:59:1d:5e:4c:df:8a:34:d8:34:ea:24:d3:1a:fa:
cf:ed:6f:eb:22:51:02:3a:fe:5c:52:8d:88:44:72:
72:5c:45:12:fc:7a:d2:e5:45:c1:32:1a:71:d8:fc:
74:d4:ea:28:a5:89:4c:e2:3e:e6:cf:64:f5:15:d8:
e9:0a:68:bc:f4:15:f4:82:a6:41:da:fd:4e:e7:40:
eb:5c:e4:2e:5e:a9:18:03:a0:83:6d:4a:2c:00:29:
9f:be:1c:e2:5f:26:4e:fd:66:06:23:bd:21:da:55:
b6:df:d1:c7:4b:41:1b:5e:36:3f:5e:e9:e4:cc:3d:
b6:bf:57:5d:ed:6e:b8:cf:18:72:1f:9d:2e:84:f7:
e2:f6:4f:c8:42:26:1f:51:43:97:2b:74:fb:3d:61:
b7:b8:03:4c:d0:8d:5a:68:04:f7:ec:28:c4:7d:21:
19:6c:2b:29:a3:0c:25:da:e2:e6:22:03:fc:d0:f3:
65:96:67:55:d4:65:e2:a4:b5:38:17:30:7c:5e:69:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:BF:6A:AF:C8:CD:4E:5A:98:FF:EF:22:5E:BE:05:C8:46:9D:9A
X509v3 Authority Key Identifier:
keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32332d3233203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.96.0/23
Signature Algorithm: sha256WithRSAEncryption
17:b5:da:05:fe:36:c7:07:1d:f8:a1:3d:f9:df:2d:6d:21:c9:
7f:bc:fa:b3:2d:38:da:43:b2:48:0c:15:98:a9:e0:31:a5:9d:
a6:b2:2f:93:cc:0a:f0:5b:42:8a:95:80:54:25:31:2c:31:3e:
3a:03:e2:24:82:fa:ba:19:dc:9a:b1:fc:46:d0:d1:b0:fe:b3:
4e:09:2a:7e:5f:a5:c4:3f:9d:45:75:e6:77:b2:c9:bb:db:b6:
d9:40:6b:21:67:60:fb:6a:92:cc:71:4b:3b:ac:3f:df:da:e2:
f2:ab:08:23:ce:84:77:63:31:0a:71:93:b5:43:ef:5f:df:3e:
a4:ad:4d:66:54:5f:57:1b:4a:2d:3f:f9:5c:e7:ab:21:f6:2b:
f8:ba:fc:bb:7b:65:8b:ba:38:f6:db:8a:cd:7e:36:ca:6a:80:
fe:5d:07:dd:40:3c:9e:d6:f0:76:03:4a:5d:8d:fb:1b:e5:c5:
e8:16:9e:b4:e4:13:81:65:f3:19:46:05:7a:bb:7b:3b:4e:f0:
50:fb:97:bc:f6:aa:0f:c1:c0:00:8c:7a:9c:a7:39:ac:15:31:
63:fe:73:55:ac:61:c6:76:01:88:3f:84:67:94:78:f9:34:a6:
80:69:8f:65:76:d3:26:e9:88:70:d3:d7:ec:86:c4:d7:03:a3:
ab:93:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:03 2025 by rpki-client