Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
File: 3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: fXdvOuI1DUbyaRtz+nj3LtoV9N4NP32s1ltkFuUkvAg=
Subject key identifier: 9F:12:7D:21:57:E4:F6:CE:41:48:8F:4E:BE:02:E5:33:FF:15:28:43
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 3ED1E45A6D1695E1F5157BD90745FA42DBAB7983
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:04 +0000
ROA not before: Mon 08 Apr 2024 20:02:04 +0000
ROA not after: Mon 07 Apr 2025 20:07:04 +0000
asID: 28270
IP address blocks: 170.245.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d1:e4:5a:6d:16:95:e1:f5:15:7b:d9:07:45:fa:42:db:ab:79:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:04 2024 GMT
Not After : Apr 7 20:07:04 2025 GMT
Subject: CN=9F127D2157E4F6CE41488F4EBE02E533FF152843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:8d:f3:7b:29:2c:4e:2c:d7:ce:9e:e9:8e:
76:63:c1:40:22:d8:0f:75:cf:d7:68:82:80:4c:d0:
52:35:ff:78:e7:81:f6:db:1e:58:f1:58:7a:08:64:
e3:89:2e:db:34:08:76:52:55:67:d2:3f:ff:ab:14:
21:c1:b4:5a:7d:a0:d0:df:d3:87:6b:e8:89:8d:44:
90:45:4f:0b:6b:59:60:fd:aa:99:33:19:6d:61:e2:
46:6f:8d:40:22:59:d1:77:a8:34:7c:bc:3c:10:77:
ed:f4:87:23:e7:c6:d2:e5:69:54:cc:ac:26:79:df:
8a:38:63:b4:07:d0:d8:02:6a:7a:e4:64:80:ad:b6:
51:37:68:b4:b6:4a:f6:46:4a:46:1d:cd:81:5b:45:
0d:ff:3b:a8:d7:ef:7c:26:36:17:ae:97:a1:5f:b7:
93:e2:fb:e3:55:9c:92:34:f8:61:4f:2b:99:fe:94:
f1:5b:60:d9:69:ff:fb:20:31:11:64:dc:f2:f6:17:
eb:88:43:5d:30:57:fb:74:37:77:57:45:d7:9d:3c:
e1:a0:70:f3:fa:79:91:da:3a:41:a4:fc:74:6f:c4:
1c:6f:18:12:24:a0:cd:ec:ce:50:ce:fe:22:01:91:
5d:5b:de:d1:fd:8e:38:62:2b:50:25:f1:c4:32:fb:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:12:7D:21:57:E4:F6:CE:41:48:8F:4E:BE:02:E5:33:FF:15:28:43
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:4c:a7:7f:ad:c8:94:8e:68:e2:58:e7:b9:94:2d:d5:b0:2b:
b6:ef:ba:0a:7c:67:96:e7:32:cc:0c:31:a4:73:64:8c:19:e3:
82:d9:7f:1a:17:91:52:26:db:3f:85:d2:c4:3e:35:17:2c:d6:
6e:ba:a9:0e:66:71:2d:27:ec:37:f7:c7:1a:a5:a0:30:1c:01:
54:21:fa:62:e4:78:94:d6:10:c4:c4:5c:c0:a8:78:a5:c9:2a:
09:73:df:14:45:5b:15:01:84:0e:fe:f6:a9:1c:a6:41:23:dd:
16:90:99:f9:f2:9f:01:75:79:17:14:53:12:b7:48:3f:08:b8:
73:6f:27:28:5f:8d:37:8d:20:57:c0:0d:bd:32:29:1c:20:4b:
70:4f:41:dc:42:09:9e:43:27:18:b1:eb:22:4a:8b:8a:d7:04:
e8:54:70:02:b8:d6:f7:c7:b9:c5:a2:55:6f:43:4a:f9:35:d9:
0c:5a:53:d1:f4:ff:6a:1f:c2:bb:77:1b:e5:8f:8e:13:cb:e3:
75:68:88:e7:65:0e:5b:59:7e:f4:45:f3:95:a9:51:12:d7:0e:
60:61:0e:05:5e:2d:97:1a:a7:33:a2:bd:f8:9c:0f:ae:44:33:
65:5d:85:61:8f:7b:37:04:94:11:39:d8:bc:77:ac:8b:b3:3f:
8f:c0:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org