Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
File: 3137302e302e3230342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: dk9W1/yXrlK6paIUgefrY9lVgkVEZ1GEDsy2nzI2InA=
Subject key identifier: D0:0B:16:FE:9B:C7:9B:6A:AA:B5:DB:D2:4C:55:38:21:2C:55:C1:4F
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 2ED6C84E963A13A6875048CB1B727AC8345F293D
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 271724
IP address blocks: 170.0.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d6:c8:4e:96:3a:13:a6:87:50:48:cb:1b:72:7a:c8:34:5f:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=D00B16FE9BC79B6AAAB5DBD24C5538212C55C14F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:3e:4a:c6:fb:cd:7d:c7:65:a6:cb:52:0c:
47:1e:73:27:61:13:73:c0:62:64:0d:c1:65:76:6a:
9e:d6:99:37:c8:4b:c5:c6:64:6a:bd:18:3b:4b:30:
cc:e0:0c:d5:f9:69:1b:94:b7:e9:65:83:7c:4b:73:
3c:56:6d:6a:4d:7f:49:6e:df:60:35:ef:a8:7d:f6:
92:83:d7:4e:38:ff:10:0a:c1:4a:e1:f6:b3:cd:56:
f9:ae:8c:ad:ac:67:b9:64:0b:48:51:83:3b:59:9b:
cb:db:27:eb:cc:70:8c:0e:d8:f1:6a:bf:14:ce:e6:
64:42:72:9d:9f:88:c3:54:6f:ff:b0:a6:29:03:88:
f7:5c:fd:1a:42:68:91:b9:f6:88:35:cc:e9:d4:79:
40:f4:8e:ba:4b:1c:3a:5a:f8:a4:43:40:80:f7:d3:
98:c8:17:10:9f:23:6c:c4:d5:45:e1:1b:d2:38:51:
e6:59:00:4d:3e:6d:f0:d0:2b:d6:f5:50:c5:62:f8:
88:c7:b7:0f:bd:ca:59:8b:d3:4c:81:d1:5c:42:37:
3f:d9:53:e9:0b:77:22:0f:f2:19:24:de:d2:a3:de:
e0:95:fa:93:1a:59:b4:e2:c1:bb:2c:b4:72:d8:5b:
c0:f0:91:f6:64:a0:84:14:a9:e6:3d:f2:4e:82:7a:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:16:FE:9B:C7:9B:6A:AA:B5:DB:D2:4C:55:38:21:2C:55:C1:4F
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f7:be:8b:45:a5:fc:76:05:f4:14:f4:78:22:f9:66:19:83:
ae:6b:04:ba:c4:b6:f6:25:84:b5:e1:16:97:d7:cb:f4:fb:b3:
89:34:51:f5:fe:50:27:7e:99:c4:f0:10:0e:da:72:f2:db:32:
3d:b6:d7:1a:6a:99:a1:c1:4d:47:44:7c:63:6f:d0:4d:a2:65:
28:76:8f:d2:f3:03:9d:85:16:44:a1:94:99:aa:d0:74:20:97:
df:c8:c3:ec:17:3f:6c:30:ef:53:b8:ca:f3:c8:b4:80:0a:0e:
aa:1a:e5:03:05:e2:0a:6f:19:0e:f8:ba:7a:62:ff:31:21:54:
df:83:c1:92:a6:db:e8:f6:bd:83:ac:bc:92:7f:db:95:d2:00:
2c:c3:fb:db:cf:2e:18:31:ed:73:19:90:2b:db:0a:2a:72:cd:
bd:3b:04:6b:b0:ac:3a:32:06:33:54:87:0e:a1:82:06:85:04:
60:d7:6a:1a:89:f9:3b:c1:83:e2:a7:b0:5c:4f:43:54:38:98:
4a:3e:f4:03:0f:24:03:9d:32:e4:b9:f9:a7:65:a8:51:55:e0:
2a:8f:01:bd:52:c2:25:2d:b0:55:28:38:a8:1b:4d:af:77:a3:
b0:c8:55:d4:d5:d7:df:34:34:d2:42:10:67:82:95:d3:e3:d1:
d2:09:18:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:05:56 2025 by rpki-client