Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
File: 3137372e36372e352e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: hbM1SJIzSynlrTxP6QogUdg/zXTSgwvylup5rSnzayA=
Subject key identifier: 2D:C2:C9:45:45:64:AA:FF:B5:D5:FF:38:C3:38:01:2F:60:ED:BA:97
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 6D8AFD4C21A8DDEC47A1612A6BC306AD3A5DD9FC
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
Signing time: Thu 07 Nov 2024 20:40:16 +0000
ROA not before: Thu 07 Nov 2024 20:35:16 +0000
ROA not after: Thu 06 Nov 2025 20:40:16 +0000
asID: 262509
IP address blocks: 177.67.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8a:fd:4c:21:a8:dd:ec:47:a1:61:2a:6b:c3:06:ad:3a:5d:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:16 2024 GMT
Not After : Nov 6 20:40:16 2025 GMT
Subject: CN=2DC2C9454564AAFFB5D5FF38C338012F60EDBA97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:bf:e2:13:1d:b7:21:96:f8:39:ee:f5:cd:
8d:f6:1e:08:a3:db:28:56:dd:83:6c:33:93:2c:69:
a8:0a:bd:ae:3f:25:ad:8a:76:40:7d:78:b9:2a:9c:
22:35:d2:71:af:a6:ea:b7:b3:f9:75:0e:53:87:8a:
ae:48:c2:4d:7c:93:ce:ee:8f:2f:76:a5:5e:5c:94:
7a:4c:4f:36:35:04:30:7f:37:95:8b:c1:6d:4a:77:
ee:25:0e:57:1d:4e:d0:87:ab:14:f7:90:e7:53:00:
00:2f:69:6f:4d:64:f8:be:88:54:c5:2b:30:97:9e:
67:28:db:b0:f7:fa:d4:d6:c4:c4:c4:b7:71:ec:80:
4d:11:5b:64:4c:c4:36:dd:97:47:a6:95:04:66:2d:
2a:d8:b0:c6:cf:87:d2:c7:03:d4:6b:21:75:df:e4:
af:10:b2:16:1d:cd:b1:3f:e6:68:d3:64:70:88:ee:
c2:73:78:59:e2:7a:4e:c7:b5:3c:81:53:09:32:30:
60:ea:08:3a:62:04:03:5b:d0:d9:d5:86:f3:b4:54:
2f:8a:13:2c:a1:40:4f:b0:32:a9:75:dc:56:99:3d:
6e:db:e9:80:a1:43:a7:02:7d:b5:c2:ec:5b:38:31:
b2:eb:fc:1b:ea:86:2e:8c:d1:e7:47:2e:60:31:4d:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:C9:45:45:64:AA:FF:B5:D5:FF:38:C3:38:01:2F:60:ED:BA:97
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.5.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d6:f7:8b:48:c0:1c:ce:b3:f7:22:0e:4f:c6:d1:32:6f:d0:
57:85:dc:64:b9:ba:36:e8:a9:ef:60:ef:f8:52:d4:f3:5e:fe:
be:0c:55:fe:1c:bb:31:23:0c:85:d6:7e:86:f7:7e:01:36:83:
63:0c:e5:5c:df:d5:bd:f1:6b:39:1b:c6:ba:a3:ad:f4:c1:9c:
90:d5:d9:e1:9c:17:9a:12:96:e2:b3:c7:2b:81:fa:6d:82:a7:
e2:e5:9a:dc:6b:6a:a8:a3:8c:8f:df:dc:c2:fa:57:61:47:ee:
cd:71:63:27:bf:a1:c3:05:0c:26:9c:9f:ed:10:e5:db:9c:de:
8c:a6:45:45:d0:99:a0:f1:a1:65:e6:a4:a9:f5:b6:cb:d7:02:
44:00:ef:eb:13:ea:1a:57:70:cd:75:59:dc:59:75:f8:0f:c8:
1e:18:70:09:31:bc:92:e4:01:f4:5e:c5:a5:2a:6d:88:3a:0d:
53:25:99:95:ee:70:8a:5f:10:85:4b:1d:cb:ea:8c:5a:aa:ef:
e4:e6:fc:fc:2f:81:43:5c:5c:3b:18:28:c8:9a:e4:b2:9b:fb:
31:2c:2f:b4:9b:23:db:3f:74:a8:a1:7e:e1:b4:a5:55:a9:8a:
df:7f:8b:a5:b7:93:88:c1:c3:36:53:3e:6f:dc:22:f7:13:05:
dc:d7:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org