Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e203238323730.roa
File: 3137372e36372e332e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: XqKMZRzoiYJJk8u4ArpIS3joIuzmBustz+uicncWpng=
Subject key identifier: 89:C8:4E:9E:99:9B:26:D0:8A:CB:9D:3D:CA:DD:BB:54:21:AE:E8:3C
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 5AD81B3745C5F5D4BD101E06474C6E5AC760D821
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:13 +0000
ROA not before: Thu 07 Nov 2024 20:35:13 +0000
ROA not after: Thu 06 Nov 2025 20:40:13 +0000
asID: 28270
IP address blocks: 177.67.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d8:1b:37:45:c5:f5:d4:bd:10:1e:06:47:4c:6e:5a:c7:60:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:13 2024 GMT
Not After : Nov 6 20:40:13 2025 GMT
Subject: CN=89C84E9E999B26D08ACB9D3DCADDBB5421AEE83C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:2d:e3:a3:df:99:94:4f:d7:3e:3d:d7:cd:
08:c3:bb:88:8a:1b:90:1c:e4:2e:03:53:98:ac:79:
ff:9a:a9:bf:7f:1d:d9:74:77:01:2a:dc:62:c4:e4:
4d:9e:c5:13:38:b0:33:22:6e:ed:f8:d2:00:ab:fd:
f7:28:ed:25:c8:95:a9:3a:dd:5b:35:26:d6:22:74:
41:fc:03:6d:71:2c:14:2d:b4:8c:b3:bb:ba:d1:ba:
af:6a:2f:3c:dc:66:3d:4e:29:78:db:ae:c4:93:1f:
6a:99:38:76:6f:24:58:f6:f4:39:ad:f9:a6:43:b1:
72:e8:f5:f5:17:25:26:9b:8c:0f:8a:a8:25:fa:e0:
07:bb:7c:48:d9:45:6c:fe:d9:ac:73:a2:3f:b0:66:
8b:13:27:1d:ba:c3:ef:d1:a3:4f:31:cd:d5:3e:08:
56:b9:a6:85:ad:56:20:df:8c:ef:86:cf:aa:a1:7a:
61:08:82:26:c3:9f:da:24:29:98:82:3a:59:5e:78:
d4:b1:4e:a0:1a:c0:d8:3c:07:67:2b:8e:f9:7c:d4:
da:79:70:d2:d0:3a:2c:43:2b:06:08:b8:f6:3c:6f:
2c:70:7a:67:63:d3:3d:f1:ff:9f:24:19:26:f4:fe:
e6:18:11:0c:49:84:fe:c1:57:95:62:08:23:34:aa:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:4E:9E:99:9B:26:D0:8A:CB:9D:3D:CA:DD:BB:54:21:AE:E8:3C
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f9:97:20:78:bf:4a:b1:be:06:48:9d:48:eb:83:17:a0:75:
d3:25:16:8d:a8:d2:2e:11:37:7b:ee:24:d9:ea:ca:8b:9c:cc:
45:cc:a2:1f:1d:7f:e4:39:4f:f5:7c:b0:e7:dd:c2:50:49:d3:
9f:e8:78:79:28:12:cb:b2:35:b8:cb:5e:72:d0:49:51:0b:ed:
a2:ae:40:9c:7f:54:43:88:51:bb:1d:2f:a4:28:cf:83:50:38:
40:52:97:5e:71:c1:0b:81:e3:7c:1b:61:ba:e0:42:26:b0:67:
d8:e8:0c:fb:0b:88:1d:2f:a2:c0:3a:73:85:6d:17:17:8a:d5:
bd:04:34:f9:05:fb:18:03:bf:8e:3e:e2:a0:5e:87:fc:9b:75:
e2:77:23:30:40:11:65:34:de:53:fb:86:19:ff:7a:71:0c:6c:
30:e7:cc:e0:9c:6c:56:7a:91:8f:0d:7f:90:c6:50:80:d9:4a:
87:f6:40:92:05:5c:c5:f1:01:4f:bc:56:8c:6c:87:af:37:5d:
ce:b7:96:ed:82:b2:b8:3a:67:20:48:1d:9b:9b:2b:e6:11:ce:
62:e1:78:2d:f2:26:3a:0a:47:2d:dd:04:2c:ff:b0:2e:67:f9:
60:60:56:5d:00:90:f5:7b:2b:8f:db:f1:aa:1d:40:10:30:70:
06:64:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org