Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
File: 3137302e302e3230342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: bThqp67YoW7ebv5/rys8XVmpRi6nvs/e+Btv0sYndkc=
Subject key identifier: E8:74:1E:C3:87:BE:B2:A7:10:6E:D3:58:2B:94:6D:D7:4C:43:E9:F9
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 035BFAB365AD43638BE714BA0B4279DB539F3BE9
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 08 Apr 2024 20:06:58 +0000
ROA not before: Mon 08 Apr 2024 20:01:58 +0000
ROA not after: Mon 07 Apr 2025 20:06:58 +0000
asID: 271724
IP address blocks: 170.0.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:fa:b3:65:ad:43:63:8b:e7:14:ba:0b:42:79:db:53:9f:3b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:01:58 2024 GMT
Not After : Apr 7 20:06:58 2025 GMT
Subject: CN=E8741EC387BEB2A7106ED3582B946DD74C43E9F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:99:95:0d:e2:f8:80:b8:69:23:84:5d:57:
83:e9:c0:59:0a:e2:e9:73:85:5b:ac:8b:00:0a:2b:
ca:54:44:fb:9f:a4:2f:32:d3:45:15:69:87:18:cb:
dc:14:22:fb:39:7e:3f:1b:89:13:65:77:7b:b7:7f:
d2:47:1d:93:df:a8:44:52:90:fa:47:2f:45:dd:16:
c4:48:7e:82:f5:72:5b:a4:88:aa:87:d5:a6:33:f8:
9b:5d:6f:f9:0f:52:cd:15:80:ab:9b:29:b1:85:78:
d1:8e:2d:e6:a7:81:e7:1c:1b:13:04:83:9e:8c:3c:
e5:47:21:a5:c8:6c:ed:d5:99:6e:b6:9e:eb:5f:a6:
31:ee:69:96:25:59:57:f0:59:c8:3c:ad:4e:57:3b:
fd:50:eb:21:8b:5a:8b:91:c3:f0:f2:0f:21:c4:5c:
a5:f8:a4:ef:3b:f9:78:39:13:36:c3:28:c9:7e:57:
ae:bc:eb:3f:9c:f8:77:be:52:3a:2e:12:5d:7f:ed:
d5:13:4f:45:7a:71:6b:e5:28:28:db:ef:01:fe:e3:
ab:a4:c9:53:6f:7f:8e:b4:25:63:d7:3d:ef:71:30:
af:7e:67:08:83:c3:03:06:34:a5:96:2b:38:9b:c6:
75:be:08:33:32:46:86:07:f9:7f:4b:86:a0:f0:2f:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:1E:C3:87:BE:B2:A7:10:6E:D3:58:2B:94:6D:D7:4C:43:E9:F9
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:24:73:90:ba:c7:3b:a1:91:d5:28:cb:b6:bb:93:92:1b:53:
81:be:4a:e4:ac:90:83:0f:71:87:75:ce:8f:08:a4:c5:49:dc:
e4:1e:82:67:f7:9c:51:09:3b:72:1b:ae:ce:79:d5:f9:88:58:
22:1e:f7:6a:e1:31:42:01:fd:92:b9:f2:a5:11:3b:95:ec:5b:
88:ca:5d:92:59:f4:32:b5:a0:a9:57:35:1b:31:eb:a5:ff:7b:
2e:7f:de:59:7e:35:1e:d0:10:56:95:00:35:eb:f3:ff:c9:21:
e9:31:4e:d4:7e:24:ea:21:48:47:ee:f9:72:20:92:3a:b8:dc:
8b:fa:8c:8b:b7:9c:27:62:36:a1:a4:6e:09:d6:7e:f5:54:9f:
ee:cd:7a:b5:58:f6:62:f4:5e:99:20:cd:8f:4d:49:23:e0:ea:
0a:88:2b:4b:2b:3e:42:c8:b2:2a:0c:b6:d0:02:d4:1a:91:7f:
47:6e:93:10:55:31:49:b7:ee:f5:d9:fb:39:29:2e:f9:a8:da:
02:78:9b:b8:d3:c0:b4:a1:de:6b:a7:fb:b9:ef:4d:c9:ef:16:
84:74:c8:56:af:b2:b8:4f:91:71:55:ae:b5:5c:79:a6:d2:22:
54:61:cb:ac:0f:60:b5:67:5a:b1:05:81:01:18:be:c3:95:12:
8a:fe:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:37 2025 by rpki-client