Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e203238323730.roa
File: 3137302e302e3230342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: psKmc4K0JYPOihSwGuay+JXPD5JdiVivxo4qZ1VRm/0=
Subject key identifier: 97:3E:7D:51:04:6E:1C:8C:A6:ED:6C:04:97:05:CA:18:00:46:44:1B
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 5722E6A3DB9B00ABA470CFA0BC65835294881755
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:06 +0000
ROA not before: Mon 08 Apr 2024 20:02:06 +0000
ROA not after: Mon 07 Apr 2025 20:07:06 +0000
asID: 28270
IP address blocks: 170.0.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:22:e6:a3:db:9b:00:ab:a4:70:cf:a0:bc:65:83:52:94:88:17:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:06 2024 GMT
Not After : Apr 7 20:07:06 2025 GMT
Subject: CN=973E7D51046E1C8CA6ED6C049705CA180046441B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:61:63:4d:1d:63:ad:8c:98:cd:a7:d4:96:
0e:48:d2:99:a1:a0:9a:cd:7b:a9:63:93:30:5e:b5:
90:8b:b9:55:19:fe:2b:47:ac:b9:f7:4a:25:24:37:
65:87:b3:ae:5d:13:cb:42:ae:6a:78:bb:f2:bb:da:
4f:32:12:47:d9:50:75:e3:a6:2c:b8:51:a5:d3:99:
bb:39:41:34:d4:d1:db:d6:24:7e:52:7c:0d:97:6b:
92:49:45:98:d0:d7:bf:9d:cf:6c:30:c1:3d:5e:7f:
a5:74:26:6e:5c:e2:0e:47:94:5e:c7:9f:d9:c6:f3:
35:f4:56:a7:a0:4f:37:52:2a:30:64:f9:d0:4b:80:
dc:8e:80:4d:4e:b1:c0:63:af:57:de:1b:f4:3a:24:
3f:65:1a:2b:43:72:68:b6:f2:73:aa:df:99:6d:ba:
d4:d1:d1:f2:1d:0b:1f:af:94:ef:62:e7:3e:b5:17:
fc:25:0f:1e:2d:52:52:31:18:11:e9:fd:70:79:54:
47:c7:90:0f:45:70:a9:27:9d:84:01:26:40:e8:45:
90:ab:88:f9:8d:76:04:38:5d:b5:79:01:9f:a0:d1:
77:97:0e:2d:79:33:9e:e1:78:41:00:54:24:6a:4e:
23:44:1a:90:13:c3:e5:67:a8:2f:9a:34:5a:96:6e:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:7D:51:04:6E:1C:8C:A6:ED:6C:04:97:05:CA:18:00:46:44:1B
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
af:dd:ec:b6:c0:6a:6f:40:80:10:be:13:ea:cd:82:68:3b:51:
03:a4:ff:3a:7b:1a:fa:9d:f4:9d:62:f6:8f:92:96:a5:ae:b5:
8b:6e:94:29:7a:7d:3e:ff:87:5d:d6:d7:10:b9:c5:37:85:d4:
cc:a2:b0:e1:83:03:8b:b6:0a:ed:3b:47:a7:19:b1:5f:b9:10:
6e:29:49:84:e1:97:22:e6:bc:ba:15:1f:88:27:42:b7:59:f5:
fb:2e:d6:39:61:ec:29:1b:19:5b:57:5e:66:28:ce:15:fc:f0:
f2:8a:f9:46:67:8b:8b:a4:8f:10:17:f0:82:c9:07:4e:ba:b8:
93:62:26:1c:29:d6:6e:59:31:6e:ff:2b:ce:5b:bc:ec:0d:bb:
8b:61:c5:bb:c7:f6:17:79:58:3b:ff:60:37:68:f2:33:61:5c:
f0:25:18:87:35:28:ec:91:50:7b:be:00:a7:5a:b2:5c:48:ad:
c4:49:94:69:be:00:79:50:76:37:38:58:5a:6a:af:35:34:39:
b6:b5:96:4d:50:58:7b:0e:bf:13:68:23:80:69:1e:67:9d:51:
34:6e:26:18:25:0f:89:f8:f2:b5:38:5f:99:6f:52:e6:e1:9c:
10:56:fc:fc:e9:6b:d7:5f:55:54:83:63:40:d4:b9:da:6f:05:
00:47:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org