Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
File: 3137372e37302e3132382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier: Tz59mfFIabEnqWerg9DT3JMiuAO8xS4u6Y7i7N5JTR4=
Subject key identifier: 9B:C8:9A:2F:CF:49:45:E6:A2:6E:06:C4:F2:9F:75:06:4D:0F:F2:24
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 7BE96520AA608B306FE094BEA1258F06BB486602
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:12 +0000
ROA not before: Thu 07 Nov 2024 20:35:12 +0000
ROA not after: Thu 06 Nov 2025 20:40:12 +0000
asID: 28270
IP address blocks: 177.70.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e9:65:20:aa:60:8b:30:6f:e0:94:be:a1:25:8f:06:bb:48:66:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:12 2024 GMT
Not After : Nov 6 20:40:12 2025 GMT
Subject: CN=9BC89A2FCF4945E6A26E06C4F29F75064D0FF224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:99:9b:df:be:f4:7e:ba:95:25:96:39:18:
f9:bd:aa:38:0f:2e:22:84:e7:3e:91:a5:28:63:9c:
bd:85:7d:be:65:10:3e:37:76:50:ef:88:ba:3f:39:
03:db:05:34:23:b3:5f:24:c7:77:e8:8f:79:f3:a1:
84:83:8e:c7:66:ff:90:0f:5f:e7:92:9e:b9:fb:34:
2c:ef:03:e8:7f:3d:d8:e0:c4:11:f8:1d:c1:59:76:
80:be:e4:ad:5b:2a:eb:05:b5:39:e3:7e:2f:0f:e6:
ce:fe:fa:77:b0:60:4a:35:6c:9a:d4:3c:84:8a:e6:
88:1e:bd:16:0e:e2:02:92:7a:f5:3b:08:c3:72:e6:
d7:e4:9f:8d:b6:ad:a5:79:07:b5:69:b1:57:62:c4:
dc:b6:f0:7a:1f:43:60:52:2a:5f:9a:06:f3:ce:44:
70:ce:e5:26:c3:2f:10:9c:bf:8f:00:5b:e3:da:1f:
8e:bb:b4:2a:18:67:6b:a7:33:a2:c9:9b:a4:60:6b:
30:66:e1:1f:0e:72:78:28:1d:2c:cf:1e:c0:b4:5b:
7c:9d:27:3d:64:cc:27:34:71:dc:ab:cc:be:09:6e:
75:28:b7:d8:d6:4b:a6:3c:1a:b1:fa:d1:39:45:a5:
33:8e:ad:f2:e0:2f:63:5d:28:66:7c:b4:0a:79:3d:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:9A:2F:CF:49:45:E6:A2:6E:06:C4:F2:9F:75:06:4D:0F:F2:24
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.128.0/20
Signature Algorithm: sha256WithRSAEncryption
51:32:a1:26:e9:1c:f3:f7:7c:13:be:45:b1:0c:58:f0:d1:6c:
7d:cb:d6:41:75:67:67:61:c8:92:8e:50:2f:5e:61:1b:64:5a:
a1:32:b6:9f:72:f5:1e:f7:34:98:59:67:5c:b5:c2:e3:89:7e:
45:10:3e:70:9c:30:9d:17:d4:5f:22:d2:0b:b7:84:af:0e:92:
96:03:43:89:2a:61:a1:ac:ec:a7:67:b8:27:98:50:0a:ea:5e:
12:3c:9f:4b:84:90:c1:8d:ff:da:f0:4c:c8:8a:4a:d7:63:1a:
ea:a6:b6:0e:75:73:75:75:5c:a1:ad:16:03:99:42:9a:51:0d:
2b:8f:45:a8:4c:67:18:d9:26:ef:e7:1f:02:96:4e:7a:d5:00:
5e:66:c9:63:f9:a5:d0:96:ef:e8:b3:d4:38:03:3b:36:69:a0:
cf:3d:b4:fb:eb:7f:67:ce:1f:05:8a:ca:cc:f7:1a:11:28:f7:
90:d3:b1:39:51:70:cd:49:80:6a:aa:9d:d6:9e:30:20:bb:6f:
43:3d:1c:30:2d:d2:0f:12:9b:ef:90:5e:e3:3e:16:fc:7f:52:
ed:dd:6f:ef:e0:34:36:8f:65:3a:71:f5:52:05:69:e6:68:8c:
93:1d:cd:1a:dc:b2:b3:8c:f0:08:b9:23:d1:8d:d5:5e:86:3d:
7b:05:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org