Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa
File: 3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa (raw, json)
Hash identifier: BxjzwlMDEAg+rYTTURR0hzhfDNkE5vBBISFrCsIqwHY=
Subject key identifier: 57:55:4F:26:7E:61:06:43:53:E3:E6:10:76:61:04:20:18:B7:65:A7
Certificate issuer: /CN=FB16D49E1AC4BE9524150A7FB2C98D0147D2757C
Certificate serial: 2163D22551D6EF644ECB618A1E7918ED27DBEDBE
Authority key identifier: FB:16:D4:9E:1A:C4:BE:95:24:15:0A:7F:B2:C9:8D:01:47:D2:75:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa
Signing time: Tue 06 Aug 2024 18:41:32 +0000
ROA not before: Tue 06 Aug 2024 18:36:32 +0000
ROA not after: Tue 05 Aug 2025 18:41:32 +0000
asID: 265085
IP address blocks: 170.233.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:63:d2:25:51:d6:ef:64:4e:cb:61:8a:1e:79:18:ed:27:db:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB16D49E1AC4BE9524150A7FB2C98D0147D2757C
Validity
Not Before: Aug 6 18:36:32 2024 GMT
Not After : Aug 5 18:41:32 2025 GMT
Subject: CN=57554F267E61064353E3E6107661042018B765A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:57:ed:f2:62:bd:ba:8c:a3:90:b1:47:5a:
c0:96:86:4e:e4:24:2f:66:dc:bb:3a:a1:56:ff:63:
f9:cb:cc:53:73:f9:aa:d2:08:d0:d1:36:56:1f:0d:
ca:87:d3:24:c3:a0:87:22:3f:fd:93:5e:e5:3b:ae:
ea:dd:aa:b3:8e:d1:bd:2c:39:96:94:8e:37:9a:ff:
3d:8a:6f:71:2d:17:77:9b:cf:d8:75:f7:8c:e8:54:
b6:a8:5f:cb:ec:1e:37:ae:b6:fb:3e:b5:b8:4c:67:
81:09:73:75:97:07:ba:bb:f3:e6:25:cc:0f:09:ab:
ab:7a:96:4f:bd:d7:87:32:8c:91:c1:94:a8:2b:b2:
94:4b:24:6b:b6:95:c9:39:5c:14:16:92:ac:9d:9b:
52:93:33:1b:06:3e:3a:1f:96:ae:fc:b7:16:f6:74:
f4:98:83:03:bc:cb:3b:52:be:16:bd:c3:da:f6:95:
dd:6e:06:95:83:1d:6e:4e:e4:2e:d4:5b:73:eb:4f:
4a:c5:37:9b:78:1b:cc:67:b0:44:f3:0d:08:7b:40:
52:ec:1f:35:1b:dd:d9:9d:c7:23:03:50:36:09:0e:
0d:7f:6b:75:02:0e:2b:62:0d:9a:4c:b0:dc:05:67:
7b:b9:74:36:5d:19:68:59:e0:1d:14:0f:f8:0e:ea:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:4F:26:7E:61:06:43:53:E3:E6:10:76:61:04:20:18:B7:65:A7
X509v3 Authority Key Identifier:
keyid:FB:16:D4:9E:1A:C4:BE:95:24:15:0A:7F:B2:C9:8D:01:47:D2:75:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB16D49E1AC4BE9524150A7FB2C98D0147D2757C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:40:65:0b:1c:38:3f:d5:1c:9b:98:2b:43:03:fb:46:77:07:
82:d3:fd:be:8c:cb:ba:f0:86:a1:4b:06:68:f2:d1:7b:78:69:
b3:74:81:98:fb:9f:0e:50:6c:28:9f:c7:81:33:a9:c1:7b:fd:
bc:75:88:61:53:cc:91:42:4f:b9:96:0f:40:fb:c7:de:cb:2d:
cf:92:71:42:e6:cb:de:27:a1:f4:fa:ef:3d:48:0d:41:f7:d2:
d5:cc:77:28:2b:ad:42:28:f1:f8:87:3c:47:56:22:18:b3:fe:
34:69:22:30:d5:5d:86:ba:e7:d1:cc:93:f0:0a:4c:67:12:a9:
23:51:b6:9e:d3:43:74:8e:eb:19:51:a4:02:1f:c7:fe:2a:80:
96:8e:b4:9a:62:76:34:6a:05:8b:e0:b2:83:26:94:53:2c:3c:
39:79:45:c4:43:06:4a:e5:39:0c:41:bc:15:71:f0:66:ac:1e:
91:de:1e:0b:05:f2:7e:83:39:41:d0:10:9b:4b:54:45:88:42:
29:db:af:08:6f:ac:fb:6f:80:49:c5:ca:13:e1:45:c6:e4:87:
9f:78:3f:14:c7:23:74:c2:ab:e2:9c:2a:e3:7b:05:14:d7:e9:
cf:68:4c:fc:44:05:2f:11:80:ce:c3:7d:9f:35:27:c8:20:fc:
e1:2b:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:21 2025 by rpki-client