Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
File: 3137372e36372e302e302f32312d3231203d3e20323632353039.roa (raw, json)
Hash identifier: 1kjhTQMsdB9LnNY9H+Rn7bOuZNPsEtqNLZhgNRTJyhk=
Subject key identifier: 6F:74:75:52:6B:9C:E5:FA:3A:91:95:22:5A:D0:23:B1:A2:36:4D:5F
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 0DA0432C7AB9D1EAE1F6299C3473A080ECC822AF
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
Signing time: Mon 08 Apr 2024 20:07:01 +0000
ROA not before: Mon 08 Apr 2024 20:02:01 +0000
ROA not after: Mon 07 Apr 2025 20:07:01 +0000
asID: 262509
IP address blocks: 177.67.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a0:43:2c:7a:b9:d1:ea:e1:f6:29:9c:34:73:a0:80:ec:c8:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:01 2024 GMT
Not After : Apr 7 20:07:01 2025 GMT
Subject: CN=6F7475526B9CE5FA3A9195225AD023B1A2364D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:52:86:ae:d8:1b:55:41:48:09:8d:5b:93:
b1:5d:35:49:af:5a:d3:ad:fe:a5:dc:6a:19:ad:5b:
43:e6:7d:db:4a:96:a9:93:35:3d:a9:60:32:f0:b2:
fc:ab:5d:34:d0:28:35:26:ad:f9:f6:52:f6:49:cc:
14:3f:57:dd:96:dc:2b:9a:3d:68:85:48:82:7a:70:
db:fe:40:dd:3f:8a:2c:6e:e3:d9:61:78:89:78:35:
d9:4c:9c:6f:fa:9b:4f:61:b1:71:05:aa:df:cc:41:
61:32:33:50:15:65:ef:b7:34:c5:1e:2a:ec:bc:86:
07:f7:b9:6c:08:12:d1:22:69:a7:2e:7d:25:df:aa:
f5:aa:32:8b:91:ca:99:4b:45:ff:f2:5f:aa:c2:63:
90:bf:04:b0:a8:cf:9a:8d:0d:47:90:64:d4:5e:1c:
2a:3d:41:40:f3:69:94:40:db:5f:a5:cb:24:59:b4:
1c:42:b0:72:13:db:63:f6:29:dc:ed:3e:63:94:0a:
f4:c2:93:ad:6c:dc:60:75:cd:19:c8:f1:47:93:e8:
3a:c2:e7:c2:bd:ed:45:35:41:5d:98:d0:d2:ad:cf:
4f:84:07:00:39:75:a7:4e:ff:2e:81:a0:2b:2c:75:
53:a8:01:b5:06:1d:ab:03:68:8c:76:01:54:d6:ef:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:75:52:6B:9C:E5:FA:3A:91:95:22:5A:D0:23:B1:A2:36:4D:5F
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3231203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:49:b9:6f:6f:f0:1b:83:ec:76:fb:e4:99:0d:f6:23:1e:d3:
b9:cf:d4:b1:c9:93:6e:67:64:c6:f8:86:45:49:a1:ae:bd:b0:
af:ac:83:2b:f9:17:ed:2d:28:f4:5a:66:b0:3b:e8:53:e6:bb:
28:4f:c1:41:7f:a8:b4:5f:86:7b:f2:46:3e:85:fe:c7:c5:95:
c8:84:cf:c5:59:23:fd:6b:1c:76:f5:2c:aa:ae:f2:6b:0a:f3:
a9:3f:99:43:c9:e5:93:13:bc:44:f8:c0:25:ff:0d:77:00:c0:
6b:96:a8:db:c3:f5:4f:01:7b:c5:4e:50:99:f4:99:51:df:07:
16:3f:f6:55:c4:f0:35:b8:f9:bf:30:bd:f4:89:60:1a:6c:2f:
ee:5a:df:3b:d8:b0:4a:28:a9:fc:4b:1b:36:48:a1:a9:bb:a9:
96:94:bf:1f:4a:f9:25:83:33:59:52:24:e1:a8:8b:98:64:68:
3e:c1:dd:ad:44:af:5a:7a:70:45:1a:43:39:0f:3c:40:c7:83:
5d:51:44:27:9c:2f:71:e5:4b:72:58:c6:8d:53:8c:c8:91:32:
52:26:06:b2:19:34:7f:11:50:7e:e0:83:54:7c:ef:b1:d2:34:
aa:b4:df:cf:6f:2b:ef:37:40:1d:9d:70:35:f3:64:d1:4e:f3:
be:14:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org