Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
File: 3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: fTwRBG/y7JSABHA76h88mNmueF7EDLsGlTIF0aeBZ+8=
Subject key identifier: D8:BF:2D:07:BB:A7:E3:B4:B4:A2:3C:C1:08:ED:8A:B2:51:AF:71:40
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 367E3C0B86110B4920795AF98CB5A274C3BBA760
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:14 +0000
ROA not before: Thu 07 Nov 2024 20:35:14 +0000
ROA not after: Thu 06 Nov 2025 20:40:14 +0000
asID: 28270
IP address blocks: 170.245.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7e:3c:0b:86:11:0b:49:20:79:5a:f9:8c:b5:a2:74:c3:bb:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:14 2024 GMT
Not After : Nov 6 20:40:14 2025 GMT
Subject: CN=D8BF2D07BBA7E3B4B4A23CC108ED8AB251AF7140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:c9:83:d6:0d:30:17:90:7b:2a:6f:b7:c1:
d8:48:7f:e7:ae:ab:00:71:5f:3a:ba:14:b3:50:71:
93:bc:7c:6e:3a:54:1e:71:5a:b4:99:79:11:1e:0b:
00:3f:13:bb:8e:54:dd:be:3e:bd:a4:52:da:4c:f7:
c9:f3:f9:7f:f4:34:d9:60:ad:5a:eb:b7:de:eb:93:
69:f4:f9:c3:1f:e3:57:8f:8c:e1:ac:5d:0c:a5:b3:
d0:67:8e:2a:70:72:9f:be:dd:f7:18:b1:97:31:9d:
1b:e5:62:a8:57:79:ea:83:8e:fe:49:b8:85:ea:67:
31:04:15:35:53:db:50:b7:88:62:06:df:c5:0d:f0:
42:02:9d:40:e7:b8:cd:13:3e:46:1d:b7:a1:4f:5b:
50:40:d3:ed:69:95:40:c3:6f:94:6b:80:1e:2c:10:
b8:e8:6a:af:a2:88:db:60:69:05:f5:15:8a:15:f0:
82:3e:12:f4:be:ff:e3:3f:30:51:1a:67:0d:26:29:
8a:53:9c:c9:a7:02:90:6c:46:64:63:49:4f:ad:05:
42:10:d6:15:d9:f5:89:89:81:a2:7b:fe:d8:a5:4c:
3c:28:ab:55:0b:05:28:86:c8:bf:6e:b0:b9:68:ea:
3e:f1:02:b2:07:aa:fa:07:d0:02:45:bb:76:00:40:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:2D:07:BB:A7:E3:B4:B4:A2:3C:C1:08:ED:8A:B2:51:AF:71:40
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:9f:62:64:8a:de:1b:21:37:2f:f0:80:fb:04:77:f7:ee:e1:
e4:f3:ed:43:28:16:ca:e7:da:2e:f1:c3:e1:9f:8d:70:84:52:
48:28:02:81:41:1f:95:53:45:f5:8f:4a:02:2f:1a:0f:a1:49:
a0:ea:d2:63:ed:8d:b7:54:a8:78:44:0f:94:8c:02:7f:ee:e8:
6a:c7:60:f4:e8:3d:59:9f:a8:51:55:68:24:ac:3b:68:a2:79:
ca:0a:9a:c9:ec:63:9f:c6:8b:4d:8b:1c:68:fa:7f:56:54:c7:
46:f5:25:13:22:2c:26:5d:6d:f8:26:c9:6a:25:bf:07:7e:d9:
77:6c:95:cf:04:76:32:f5:42:89:18:09:cd:3d:e2:42:69:c4:
e5:41:9f:1d:de:fe:28:78:7d:65:b0:9b:38:91:ce:cb:68:2d:
d5:ad:2a:38:79:8e:94:34:f8:8e:f8:4e:ca:00:ad:4a:d2:27:
7f:1c:97:54:7e:d2:36:9f:87:6f:09:84:8e:33:c1:cd:26:a1:
9d:e9:05:ad:39:c6:7d:40:7e:c2:9a:b4:14:18:81:03:51:e2:
9e:7e:60:83:82:4d:24:91:ef:7a:d0:22:8d:35:67:c6:c2:a0:
0f:24:fa:af:19:56:d6:91:ce:75:83:34:80:ff:c3:cc:67:80:
f5:53:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org