Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
File: 3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: Ed3Hpf9aFcoXapC08rL27EKW9VrPVfYPD/ghfydpFF8=
Subject key identifier: A1:8E:3D:03:DA:4B:5D:89:30:19:6D:C1:76:32:58:8C:E5:5E:FB:6C
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 3B3AE2A08F85C2C482D45C0E9DBB4BD6C260CB5D
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
Signing time: Mon 08 Apr 2024 20:07:05 +0000
ROA not before: Mon 08 Apr 2024 20:02:05 +0000
ROA not after: Mon 07 Apr 2025 20:07:05 +0000
asID: 262509
IP address blocks: 170.247.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3a:e2:a0:8f:85:c2:c4:82:d4:5c:0e:9d:bb:4b:d6:c2:60:cb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:05 2024 GMT
Not After : Apr 7 20:07:05 2025 GMT
Subject: CN=A18E3D03DA4B5D8930196DC17632588CE55EFB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0a:9b:e2:c5:35:dc:67:00:1a:39:c8:81:16:
84:22:23:f4:15:f6:27:1d:03:b0:7d:a6:09:a4:0b:
66:90:e6:c5:03:37:10:f2:e7:f5:b3:64:e6:7c:87:
1c:f3:a6:33:a4:8f:c2:53:6b:de:15:a2:b8:c9:ae:
a8:59:d0:b2:83:da:ad:37:e7:6e:2b:2d:63:23:aa:
35:4d:c6:2c:64:92:92:6d:53:31:2f:c6:57:de:53:
2f:7f:79:1e:a4:db:17:0f:6f:20:63:20:ed:2b:4d:
1f:41:4e:67:54:6f:79:32:ad:0f:ba:25:c9:a7:ec:
b3:9d:46:c5:4c:9b:c3:f3:a3:b0:db:f8:d9:f1:3f:
e8:9e:20:bb:8d:4d:1c:7b:5a:76:e5:7d:ef:f5:af:
18:97:a3:ae:5e:a3:26:de:b2:a7:49:b8:c1:96:6a:
5b:26:ff:8f:d9:1d:c1:83:bc:7d:48:77:de:45:06:
0b:8d:05:9f:bf:0d:a5:14:21:07:39:7c:c8:46:7e:
67:1c:d5:de:55:5d:e0:75:49:87:7b:21:c2:ca:fd:
29:79:78:10:ee:49:c5:61:e2:4d:2e:12:ed:57:4c:
ee:3c:b7:38:a5:7e:c1:b8:79:cb:26:83:ce:0c:2a:
4e:67:0c:7b:42:9e:db:22:48:f1:95:ef:aa:eb:00:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:3D:03:DA:4B:5D:89:30:19:6D:C1:76:32:58:8C:E5:5E:FB:6C
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.52.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6c:dd:aa:b4:6c:3a:26:af:9f:a0:02:4e:7c:b2:69:cf:a8:
e4:05:ba:f1:de:74:79:00:d9:23:7e:f8:ad:85:54:1a:bd:63:
6b:6a:7c:b4:88:36:bd:0b:a1:10:34:fa:06:ed:ba:bc:9a:23:
81:66:c2:d0:54:fb:57:2f:4e:6c:9c:73:ba:da:d0:cf:3b:21:
60:25:2a:d1:b8:f3:7e:8c:dc:f6:7c:74:4a:86:49:32:d8:2a:
8b:28:d0:bb:92:13:90:b7:c2:ac:0d:cd:9f:ed:3c:c4:b5:74:
cf:4f:ac:67:73:f0:5b:3a:69:27:0f:b7:9b:d1:d4:1a:83:da:
8d:5a:2c:11:54:dd:b4:16:49:4b:29:06:a1:89:b2:40:84:65:
32:6e:84:04:84:ec:d8:a8:3a:ee:56:b4:ec:b7:c7:d4:ba:fe:
f5:bc:04:5e:70:2c:93:55:42:91:2e:61:47:91:a6:ec:35:9e:
c5:c9:5e:dd:a6:18:86:2d:c3:bf:f9:ac:16:81:00:02:89:ec:
80:80:40:b2:86:02:2a:37:7b:68:b5:63:82:d2:23:ce:f0:d3:
cb:c5:29:29:52:7c:0e:88:99:a6:3f:78:db:2b:53:7a:a5:de:
19:c4:e2:53:bb:6c:74:30:a9:70:c3:ed:4e:a8:39:99:de:32:
1e:95:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org