Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/3137392e302e37322e302f32322d3232203d3e20323731343433.roa
File: 3137392e302e37322e302f32322d3232203d3e20323731343433.roa (raw, json)
Hash identifier: 1Dj4pPkP37mcLQtgH1QL84gcz80DCVF7ULVUSV8Iid8=
Subject key identifier: 67:4B:7F:31:B8:6F:13:AA:34:27:A6:B4:55:0D:70:E1:5D:09:6D:10
Certificate issuer: /CN=953C20849494211C871ED33EC10446FED42AF4C7
Certificate serial: 09279CD9FA4E70663358FFE81C1E39E43024C504
Authority key identifier: 95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/3137392e302e37322e302f32322d3232203d3e20323731343433.roa
Signing time: Mon 17 Oct 2022 20:32:43 +0000
ROA not before: Mon 17 Oct 2022 20:27:43 +0000
ROA not after: Mon 16 Oct 2023 20:32:43 +0000
asID: 271443
IP address blocks: 179.0.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:27:9c:d9:fa:4e:70:66:33:58:ff:e8:1c:1e:39:e4:30:24:c5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953C20849494211C871ED33EC10446FED42AF4C7
Validity
Not Before: Oct 17 20:27:43 2022 GMT
Not After : Oct 16 20:32:43 2023 GMT
Subject: CN=674B7F31B86F13AA3427A6B4550D70E15D096D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:e0:fc:9a:03:30:77:2b:f8:1f:0f:90:d8:
da:8d:42:7d:8e:28:df:52:8e:0a:bd:c1:9e:f1:2d:
40:d1:5c:db:0b:85:50:00:45:9f:7b:dd:be:82:15:
e7:6b:97:57:dc:b8:fa:33:10:36:5a:99:63:e1:d2:
e9:8d:90:c8:15:5f:23:cf:0e:11:bd:46:70:34:38:
a2:4d:b5:03:b0:37:c4:00:24:97:e9:34:6b:41:4b:
42:ff:e9:f6:8f:77:24:e3:97:c2:46:97:49:43:90:
4c:04:9f:5d:8a:c7:3a:c2:8b:25:76:4a:1e:a8:83:
e3:79:f1:71:fa:67:70:84:aa:e2:cf:49:5d:07:e1:
01:df:57:86:b2:84:2a:d8:d4:74:f2:85:87:db:7e:
53:ab:f8:a0:a1:c9:52:21:fc:24:df:40:d2:8e:67:
a7:7d:91:06:16:ff:37:83:a8:ad:00:1f:09:b7:45:
86:9b:0a:3e:5b:c0:da:13:bc:b8:2f:6b:91:30:71:
a3:3d:58:76:25:4b:b5:8d:4b:8a:c1:2c:13:c4:6c:
c0:c1:db:67:80:6c:8d:74:fc:89:ab:33:a9:6d:13:
82:a9:64:4d:34:e9:ed:3e:7f:a9:79:b2:17:1d:f2:
b2:4f:39:d3:f6:3d:18:ca:bb:e0:e8:bc:4e:28:5f:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:7F:31:B8:6F:13:AA:34:27:A6:B4:55:0D:70:E1:5D:09:6D:10
X509v3 Authority Key Identifier:
keyid:95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/953C20849494211C871ED33EC10446FED42AF4C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/3137392e302e37322e302f32322d3232203d3e20323731343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.72.0/22
Signature Algorithm: sha256WithRSAEncryption
34:1e:9b:90:d7:c6:3c:4c:ae:a4:5a:9f:01:75:cc:fb:49:6f:
0b:4d:0e:1f:15:9c:e0:ad:af:17:30:f4:ec:9a:6d:1e:48:17:
ec:8a:7d:cc:11:b1:6a:a5:a5:be:4c:31:9b:e0:ad:1a:42:5a:
06:5d:9a:59:f2:c8:36:20:01:ed:e6:25:a9:34:0f:d9:f6:ad:
61:57:65:59:ac:92:9a:a6:b5:8b:c2:fe:aa:92:54:66:6f:32:
3e:ef:a1:75:37:46:05:e6:03:20:cc:04:d5:d0:a1:76:22:dd:
68:bb:5b:00:e2:73:02:95:bb:4c:f1:0f:4c:fe:ad:e8:2b:a1:
67:6b:25:d0:00:bd:0d:7f:65:9a:f4:b1:28:6b:13:56:4d:7b:
34:09:8d:27:ad:cc:ac:32:6e:0b:f4:53:46:62:3b:fb:e4:2b:
a0:7e:de:33:1e:80:8b:ab:9e:55:11:74:03:99:c9:f7:5a:44:
bb:4a:2a:64:de:a3:9a:27:0b:35:ac:3c:61:70:2a:22:66:9f:
34:24:44:43:89:34:f2:87:cf:fb:69:62:aa:84:3d:c5:e1:3d:
4c:67:73:ac:a6:69:9d:f3:ac:d1:86:79:67:a3:fa:ea:aa:d7:
fc:e9:e7:c6:4f:a8:67:fa:68:d4:ec:a9:a9:82:97:40:c9:27:
3f:8e:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:37 2025 by rpki-client