Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
File: 3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa (raw, json)
Hash identifier: bC8LhFfJqjp8dkxvzYDY26imc4fA3tjASJ+LVGMvXMk=
Subject key identifier: 41:A0:64:20:E6:59:B7:FD:38:F1:07:F4:B9:2F:36:5B:2A:04:5F:F8
Certificate issuer: /CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Certificate serial: 15C2E23CFAF0CDF0CB0EF9B211EF14DA0DF33227
Authority key identifier: 43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
Signing time: Wed 27 Mar 2024 20:00:00 +0000
ROA not before: Wed 27 Mar 2024 19:55:00 +0000
ROA not after: Wed 26 Mar 2025 20:00:00 +0000
asID: 266353
IP address blocks: 170.239.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c2:e2:3c:fa:f0:cd:f0:cb:0e:f9:b2:11:ef:14:da:0d:f3:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4397BA36879D0CCC02611CE4E0C4F1812A3EC108
Validity
Not Before: Mar 27 19:55:00 2024 GMT
Not After : Mar 26 20:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:95:38:f8:9a:12:49:8b:37:08:54:7f:1f:
d5:d6:da:46:97:6c:4d:38:0b:b9:67:bd:31:3d:4f:
b3:81:71:59:4f:4e:c1:bc:cc:f8:b3:71:33:0a:3f:
e9:86:bf:79:cc:24:c9:8d:81:ef:83:1d:37:6b:18:
8e:fa:f3:0a:8d:26:3e:78:6f:86:a3:23:5b:df:3e:
f5:63:27:31:4e:ec:6b:73:8e:9e:e6:46:0b:c5:43:
d2:89:4a:1a:a5:e8:c9:4c:a1:11:34:f6:5c:6a:20:
5c:aa:e4:84:12:b4:7d:71:92:3e:4d:23:7c:95:8a:
2b:66:bd:64:28:3d:08:be:90:5a:37:b5:74:30:16:
21:33:ab:d9:bf:27:88:05:17:de:7c:14:45:f5:7a:
74:5b:e8:25:96:dd:4c:af:4e:c5:22:95:39:04:12:
98:32:fc:4f:0f:a8:cb:a7:98:11:a3:27:0f:81:8d:
57:54:59:79:2f:a7:50:a6:9d:dc:5c:a4:5d:9e:b7:
f2:39:08:d1:67:e0:51:04:9e:e8:b2:84:06:34:ae:
b7:df:7f:96:a9:75:1e:9c:99:59:81:47:db:e2:c0:
f3:2c:c4:6c:fa:1d:ca:e5:95:d1:8d:46:35:32:d8:
03:7b:3e:77:a3:74:8c:8a:7f:22:64:aa:8b:62:4f:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:64:20:E6:59:B7:FD:38:F1:07:F4:B9:2F:36:5B:2A:04:5F:F8
X509v3 Authority Key Identifier:
keyid:43:97:BA:36:87:9D:0C:CC:02:61:1C:E4:E0:C4:F1:81:2A:3E:C1:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4397BA36879D0CCC02611CE4E0C4F1812A3EC108.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.140.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f4:2a:d8:ff:e3:11:99:ae:e9:08:19:16:23:c5:af:c3:10:
e4:a9:26:ee:ea:ef:20:2c:be:43:aa:a8:d9:0d:4a:5f:72:ae:
fe:85:28:b6:60:f4:8c:71:40:2e:48:ae:6c:78:71:dc:b4:55:
94:cd:d5:e9:73:7e:77:36:52:48:c7:fd:db:f8:e1:36:e6:7e:
64:fc:60:7b:e6:a2:40:bf:83:26:14:f2:e6:41:35:d4:f7:67:
a7:ff:61:3e:40:0c:92:ec:43:a2:33:5e:f1:ee:31:18:54:03:
09:11:24:57:0b:87:a3:32:ab:c4:ae:c1:9e:b9:ab:f8:a6:95:
ad:2a:d0:77:c7:19:cd:85:ca:1e:b2:ea:d8:df:a7:03:bf:60:
9a:bc:e5:b3:52:49:21:7f:5a:29:47:dc:24:45:f2:8a:31:da:
e3:b4:c3:b0:a4:a0:8d:15:b4:54:fe:9e:88:a5:bc:bc:4f:47:
f2:96:24:a5:b6:dc:26:1f:37:05:5f:94:ef:f8:cf:e7:cd:a8:
26:9e:fd:bf:55:33:db:7f:21:57:8c:0b:73:bc:f4:9e:98:51:
c2:e6:19:ed:b0:00:2c:ed:a1:44:5b:a7:12:ee:1e:5a:aa:5b:
81:45:7e:50:56:48:c3:0c:74:05:97:9c:11:fd:1a:d8:9c:7d:
5a:1f:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:15 2025 by rpki-client