Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
File: 3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa (raw, json)
Hash identifier: NBvspvXpYUCWx/SgDUAz8RsBlUbtVVjXpIPVZMxYAIQ=
Subject key identifier: 11:CB:73:5C:BA:86:0C:F5:C6:6C:7E:0F:26:39:6E:57:E9:79:9A:A0
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 452255AE2E562EE7875F74CCF8B8834588FC7E2C
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
Signing time: Wed 08 Jan 2025 02:08:04 +0000
ROA not before: Wed 08 Jan 2025 02:03:04 +0000
ROA not after: Wed 07 Jan 2026 02:08:04 +0000
asID: 266020
IP address blocks: 170.245.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:22:55:ae:2e:56:2e:e7:87:5f:74:cc:f8:b8:83:45:88:fc:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Jan 8 02:03:04 2025 GMT
Not After : Jan 7 02:08:04 2026 GMT
Subject: CN=11CB735CBA860CF5C66C7E0F26396E57E9799AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:4c:a8:92:77:56:16:22:71:2d:b6:c8:39:
81:73:9e:4d:cc:77:84:ba:66:62:bd:d0:51:8f:7b:
9f:65:32:68:c8:8b:61:3b:6b:0c:31:ef:a7:9b:24:
02:f0:18:2c:df:09:83:26:7d:f4:a2:07:fc:09:1a:
46:90:2f:51:43:0e:12:26:cc:0a:7a:72:bb:bc:7c:
62:04:52:60:70:42:ff:77:42:b7:3f:c8:1d:b6:52:
35:2f:45:5d:80:2f:20:2d:83:e1:9a:7b:fc:6f:f4:
c1:86:03:21:c5:8b:f2:ea:e7:ea:6d:37:49:ff:c4:
db:f2:85:30:40:97:99:11:81:53:3d:93:1c:82:45:
55:0b:c7:91:f6:81:c6:cb:23:3c:68:3a:ce:a5:67:
20:e8:9e:69:19:93:6f:85:3f:9b:93:9b:4b:19:61:
03:58:75:00:b5:8b:e0:c2:e2:fb:ce:8a:aa:a6:3b:
7e:b8:e4:a4:1d:67:2a:0a:e7:e6:db:7e:4b:66:06:
8e:ab:ca:24:ce:e0:60:5b:ec:e6:80:a1:02:65:c5:
bf:9b:f7:cf:33:00:5a:9b:0d:f8:9b:1a:d5:74:75:
67:c6:26:3e:a0:50:ba:74:36:91:6c:18:2c:c0:18:
01:26:2a:3c:e8:e3:f7:31:fe:bc:c3:c2:4f:3b:f9:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:73:5C:BA:86:0C:F5:C6:6C:7E:0F:26:39:6E:57:E9:79:9A:A0
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.236.0/22
Signature Algorithm: sha256WithRSAEncryption
65:d2:3c:f9:04:0a:70:d8:68:cf:17:00:9b:5f:2e:8f:75:51:
09:4c:55:83:52:50:b9:a7:a3:49:09:b8:8c:65:f7:2b:e4:c3:
29:d2:19:b2:28:0b:6d:93:05:0d:e1:0d:dd:c2:15:23:ab:6b:
91:f4:b2:77:f6:9f:9d:fb:4f:59:17:65:25:94:e0:df:18:2a:
07:5a:66:93:79:d3:91:d0:c0:ae:cc:bd:b8:57:53:b6:43:79:
84:52:43:2c:4b:30:1a:df:80:ff:f9:39:c9:8d:fd:1f:42:f2:
75:fb:1a:ff:4c:0a:85:8a:9a:c8:36:e5:02:c9:79:65:c9:38:
50:0a:28:52:01:25:81:10:e4:16:ca:e3:a6:50:4c:14:f6:e1:
43:67:ad:54:8d:94:3f:7d:0e:68:a9:51:29:d7:1c:f4:a6:27:
3e:0e:df:7f:5f:02:5f:14:cd:9f:71:60:74:94:7b:65:17:30:
02:6a:0c:c6:56:09:16:e1:10:76:55:0a:b8:c3:e4:6e:4a:0a:
d0:22:42:9c:67:03:d1:fd:ff:9b:19:a7:17:a5:1a:56:74:2b:
a8:d3:b2:17:89:f4:73:d1:a3:9a:af:f6:1e:86:a3:99:7e:b5:
32:f9:4b:99:c5:79:83:e6:8e:82:88:89:cd:dd:1e:85:d4:15:
9e:ba:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:47:56 2025 by rpki-client