Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
File: 3137372e36372e342e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: 3tEqZLIGeVyUxnM7/hx5sSXk/pqFW89msR+f9CVXEEo=
Subject key identifier: 57:FA:BF:B7:ED:1A:74:E6:36:05:2E:2F:4A:BB:3B:9E:3C:60:91:CB
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 57DC3E589A134BC27B581A2FD417E705A6492450
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 262509
IP address blocks: 177.67.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:dc:3e:58:9a:13:4b:c2:7b:58:1a:2f:d4:17:e7:05:a6:49:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=57FABFB7ED1A74E636052E2F4ABB3B9E3C6091CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:01:ce:2a:32:c1:fb:d4:98:e3:79:1f:2a:
40:35:c4:97:0c:f1:fe:f3:23:43:ab:7d:a1:0c:4f:
ee:30:2a:a0:76:63:ff:fb:88:e0:7f:58:90:ad:a6:
a8:5d:3b:13:d7:0b:72:24:5c:13:e9:24:43:23:fb:
99:95:99:18:17:c7:33:27:9c:1c:94:2a:4a:f0:88:
e2:67:f1:fe:7d:c9:bf:bc:dc:c4:1c:c9:15:82:09:
18:78:c4:a2:7c:eb:99:e5:8e:a1:c5:af:0a:be:45:
c2:b6:06:c3:98:8e:1b:a7:99:65:12:2e:f6:ab:3a:
b8:9c:71:c3:75:23:2a:1a:a9:e2:59:be:83:e8:ba:
cb:52:14:69:b2:61:0e:69:d0:b7:8b:8e:4b:b0:08:
d0:5e:19:7f:9c:f7:2d:a2:b7:66:ad:14:12:e5:21:
d6:83:dc:a5:90:9f:21:37:70:fc:cb:eb:16:f0:52:
d5:20:ae:5e:e7:4c:14:67:b0:28:a5:0e:a6:5d:36:
cf:dc:71:52:0b:5e:72:ef:93:27:61:9a:b7:22:7d:
8f:e5:54:6a:0c:67:55:2f:5e:be:9c:b4:af:7e:83:
fc:cd:be:04:68:ac:cc:da:82:fa:ea:51:ae:4b:e7:
12:41:ec:9e:c1:bb:5b:98:25:ef:1c:fd:73:61:a0:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:BF:B7:ED:1A:74:E6:36:05:2E:2F:4A:BB:3B:9E:3C:60:91:CB
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.4.0/24
Signature Algorithm: sha256WithRSAEncryption
03:32:54:8c:7c:b2:d4:ad:50:29:69:f7:34:8f:52:28:5f:8a:
5e:05:d1:3d:62:75:07:7f:b4:f4:fd:45:b8:9c:fb:0d:3b:20:
65:93:4b:9e:ef:cd:93:33:6e:1e:51:7d:e0:92:52:50:ac:c4:
1c:4e:af:fe:1e:ed:27:60:3c:9e:59:f7:21:52:c6:c4:b1:f9:
a3:13:81:b3:5f:c1:47:f8:5a:9b:9d:3b:5f:33:73:89:74:62:
b9:6f:f7:de:ae:4b:00:00:dc:8d:f4:bf:f9:56:5e:2a:0b:8c:
c1:77:08:52:a8:63:85:41:4a:48:bf:09:cd:91:d9:33:ef:c4:
d4:ae:ab:27:3f:a8:21:f1:87:1a:d3:1c:a2:1c:8f:44:2d:ec:
10:94:58:f0:b6:58:b4:fc:32:6d:94:bf:f3:9a:9e:1f:fc:8e:
65:f2:a8:83:b2:50:46:68:a1:9a:bc:77:ae:e0:aa:99:09:6b:
3f:08:f2:b8:fb:c1:e8:d7:78:1f:4a:74:bd:fe:2d:6b:70:1a:
0a:03:63:6e:9b:69:cd:89:1c:81:33:8c:62:e8:3a:8d:42:07:
f5:b7:dc:40:36:00:5e:4b:2a:78:e6:be:88:bf:29:37:d0:97:
6e:df:07:7a:8d:3b:a8:14:bd:2d:f6:d5:bd:be:7d:18:34:16:
11:22:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org