Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e203238323730.roa
File: 3137372e36372e322e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: fVJ5KwUOGj2wtX2e4zUnX58DdZJwF0JSmx5Dc4CcMuU=
Subject key identifier: 86:F5:A0:32:AB:98:4E:8C:AD:E8:40:66:14:73:22:56:30:49:58:99
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 3D971089410876BE3E1E0199A96E250E0B247B
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:11 +0000
ROA not before: Thu 07 Nov 2024 20:35:11 +0000
ROA not after: Thu 06 Nov 2025 20:40:11 +0000
asID: 28270
IP address blocks: 177.67.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:97:10:89:41:08:76:be:3e:1e:01:99:a9:6e:25:0e:0b:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:11 2024 GMT
Not After : Nov 6 20:40:11 2025 GMT
Subject: CN=86F5A032AB984E8CADE840661473225630495899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:c3:23:dc:6f:80:9c:a3:dd:70:ec:b5:e7:
e9:0a:75:93:13:c6:b0:d6:8c:38:0c:29:33:60:66:
b1:60:f5:5a:8c:7d:7a:06:80:59:63:2f:87:38:f3:
b7:0a:c4:03:49:54:6f:c9:6d:8b:7e:99:3b:24:e2:
07:b0:b2:6b:79:5e:7b:26:c6:13:5b:dd:15:c0:de:
3a:f6:8b:bc:22:bd:89:1f:90:89:0f:67:89:aa:c4:
45:4c:f5:14:0b:76:a6:55:96:80:eb:ec:a2:d9:05:
ba:c8:cc:df:37:dc:55:0c:16:26:aa:97:c6:26:f3:
15:9b:16:ab:b9:1a:dc:45:73:ca:fe:d7:33:8a:13:
22:38:b5:30:ed:cb:72:9b:ae:c5:14:69:d3:1e:34:
66:b0:5e:45:c0:07:9b:41:0c:07:1c:81:f2:1e:99:
f3:e2:1a:5a:6a:fa:7b:61:be:06:15:9a:d5:c0:f4:
51:5e:7b:70:fa:d5:76:61:22:60:ee:f5:ab:e6:42:
09:9d:f4:ed:ba:60:4d:2a:16:c2:0e:5a:01:b9:2b:
01:98:2f:1d:3d:2a:99:c1:08:05:db:5c:76:0c:54:
f8:a0:ba:75:2a:6c:c7:af:22:72:c6:37:cc:0c:6a:
7a:83:e0:10:3d:4e:c6:30:e6:ff:ae:03:59:01:81:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:A0:32:AB:98:4E:8C:AD:E8:40:66:14:73:22:56:30:49:58:99
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.2.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0c:39:f4:71:80:e8:4f:ca:7f:a2:2a:c5:7a:6c:e1:1d:ad:
f7:ac:55:79:ac:a6:ea:cd:0f:cd:70:ad:28:f2:14:0b:36:e5:
64:a5:5b:fb:e4:47:27:6d:fd:0e:2c:64:d1:ce:ee:51:d2:37:
b9:1b:a5:35:b5:f2:7d:55:55:86:50:2d:4d:5d:d8:74:f3:ca:
0e:19:bf:fb:52:6c:1d:a9:e2:ee:78:df:6d:30:b3:b5:f5:3c:
75:af:37:d6:60:ae:11:e5:5b:5f:27:f4:2f:e7:cd:c5:cc:a1:
fb:07:2f:5d:76:50:7b:c3:5f:59:07:33:33:20:e0:db:5b:cf:
62:5d:4e:57:7e:a1:c8:20:6e:0d:3e:d4:14:41:2c:7a:c5:79:
58:4f:ed:5f:c0:cd:46:77:2e:f1:ee:a7:12:ad:b3:00:b2:0d:
ab:1d:dc:aa:22:73:cd:69:fc:1c:4a:a7:49:af:20:f6:37:aa:
bc:da:f2:bb:f3:35:65:b7:be:64:38:d7:f1:c3:b1:fa:7e:f8:
bd:0b:68:5c:92:cf:d9:88:46:1f:ff:6b:e5:4f:f4:c7:b9:36:
a3:f6:a3:30:48:95:27:71:64:5a:59:bb:fd:51:30:be:5d:22:
61:12:b6:f0:5c:ef:fd:6a:35:c9:3f:b8:53:97:1b:fa:90:c3:
a9:9c:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org