Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3332203d3e20323033.roa
File: 3137302e38332e33362e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier: fXG/BeqhaM5xa/xwWlCHlfmrlRS3SMFDfm9IGwydoKk=
Subject key identifier: D1:4A:EC:2E:A7:D1:9E:DE:AF:B4:16:15:2D:09:E6:B6:D3:98:C4:B5
Certificate issuer: /CN=548D6970267EF22027E90B3D68AB2E122A2BA170
Certificate serial: 01F65AF93B0866BB4ECB009C5B419A9FCC166B0C
Authority key identifier: 54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3332203d3e20323033.roa
Signing time: Thu 22 Feb 2024 13:11:35 +0000
ROA not before: Thu 22 Feb 2024 13:06:35 +0000
ROA not after: Thu 20 Feb 2025 13:11:35 +0000
asID: 203
IP address blocks: 170.83.36.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f6:5a:f9:3b:08:66:bb:4e:cb:00:9c:5b:41:9a:9f:cc:16:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548D6970267EF22027E90B3D68AB2E122A2BA170
Validity
Not Before: Feb 22 13:06:35 2024 GMT
Not After : Feb 20 13:11:35 2025 GMT
Subject: CN=D14AEC2EA7D19EDEAFB416152D09E6B6D398C4B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:c1:8d:02:a8:ad:bb:6f:aa:4f:7d:f6:0a:
8a:15:53:5c:86:94:89:83:53:f8:dc:3f:a3:31:af:
c9:f2:5a:0c:32:a5:48:a1:11:2c:3c:da:8a:2b:e1:
02:6b:ed:29:16:8c:03:72:eb:fe:39:ea:d9:a7:f0:
59:cb:c5:68:cd:58:44:51:7f:9a:0b:d9:9f:31:6f:
0a:9a:64:23:be:ce:3b:eb:95:6e:b0:38:ce:6d:a5:
87:14:05:54:c3:69:8f:53:81:f0:3f:19:bf:c5:62:
76:e2:9e:0b:92:12:3f:1b:ff:36:a9:4e:5a:50:8c:
ce:61:5a:7c:c2:72:9c:0a:90:11:03:9b:a3:f9:02:
f4:23:aa:fd:1b:96:1c:03:80:d1:64:a6:97:dd:30:
bf:98:73:8f:23:0c:10:62:43:00:50:48:7a:1e:0b:
95:8a:a4:4d:21:4b:46:de:b0:bd:98:24:96:ba:49:
7f:96:90:e1:37:5d:fb:49:23:4f:0d:ef:e1:ff:c4:
9e:35:5e:0c:f2:55:d7:cf:fe:63:19:69:0e:df:e8:
11:d8:f6:84:1b:77:18:84:88:e1:31:d8:3c:fa:ab:
58:03:18:f9:f5:d5:10:b9:cc:64:98:12:a8:8f:c1:
23:3f:cc:1f:7d:cb:b3:e3:3a:19:43:b7:64:6f:77:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:EC:2E:A7:D1:9E:DE:AF:B4:16:15:2D:09:E6:B6:D3:98:C4:B5
X509v3 Authority Key Identifier:
keyid:54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/3137302e38332e33362e302f32322d3332203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:49:0d:f1:9f:ac:2d:04:14:a9:d1:e2:e5:22:22:00:2c:14:
fd:50:41:7f:da:d5:00:8c:01:95:ab:e8:ca:eb:f8:27:d4:96:
4f:a7:62:55:56:c8:ec:25:8b:74:5e:58:e9:43:45:dc:cc:19:
fd:2d:22:ab:2a:28:25:8e:ae:2d:57:52:8a:11:a5:46:12:ae:
fd:24:53:5e:9c:85:69:73:0e:31:32:6c:b0:f6:38:f9:c0:e8:
85:db:83:3a:fa:47:62:74:a6:1a:7e:5c:cb:a9:38:a4:9b:1e:
d2:02:44:af:89:05:bd:56:16:fc:da:f8:e2:ce:37:7f:c1:55:
25:18:cc:04:6d:24:c1:cd:7b:0d:c4:78:d7:00:0e:60:05:40:
37:c4:4f:f9:fc:b6:0d:2e:2f:37:97:58:c7:48:c0:50:fd:ca:
60:31:13:d0:7c:5e:e7:dc:1e:53:98:fb:40:69:58:86:41:22:
76:4e:29:58:73:71:f7:d3:2c:89:2f:bc:8e:e1:b5:95:dd:4e:
a3:59:71:c1:90:7f:ff:02:e3:bb:2d:01:38:5c:8a:bb:ed:d2:
57:ca:1b:4b:3e:7a:65:4b:58:5c:bc:61:10:fc:0d:b2:39:17:
04:e1:76:5e:86:5b:dd:71:8b:1c:c6:4f:06:cc:f4:d2:26:db:
8e:fc:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org