Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3137302e38302e36382e302f32322d3234203d3e20323633393035.roa
File: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (raw, json)
Hash identifier: DDD1UJlOGLck5oPa3E98sHCVNDmlb1r6b44+rjJR6ng=
Subject key identifier: 57:86:1D:C8:5D:1D:2A:E1:E7:A7:E1:42:68:E1:2E:40:25:9F:5E:9A
Certificate issuer: /CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
Certificate serial: 1C5748A0CC981558B868CACCB3A2CB1DE8F57EE7
Authority key identifier: 60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3137302e38302e36382e302f32322d3234203d3e20323633393035.roa
Signing time: Mon 08 Apr 2024 17:09:29 +0000
ROA not before: Mon 08 Apr 2024 17:04:29 +0000
ROA not after: Mon 07 Apr 2025 17:09:29 +0000
asID: 263905
IP address blocks: 170.80.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:57:48:a0:cc:98:15:58:b8:68:ca:cc:b3:a2:cb:1d:e8:f5:7e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
Validity
Not Before: Apr 8 17:04:29 2024 GMT
Not After : Apr 7 17:09:29 2025 GMT
Subject: CN=57861DC85D1D2AE1E7A7E14268E12E40259F5E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:52:56:ac:25:e2:a0:cc:ae:0f:23:4e:a4:
ec:e5:e0:e9:d4:88:0f:55:81:0f:97:0c:24:0c:89:
10:09:e1:7f:7d:3e:f1:02:bd:d6:c7:ea:af:a3:5a:
10:01:73:d7:e7:31:f6:8c:ba:9d:27:e9:b0:c6:a7:
62:1c:18:6e:15:6d:1e:3d:78:b6:30:dd:3a:b7:62:
21:ce:4b:de:1d:ec:34:d7:b8:3e:23:e6:33:02:7a:
9e:77:b2:80:8f:26:56:b6:f2:b9:2a:94:b2:98:07:
f8:a7:8a:30:46:6e:94:fa:7b:84:12:3a:6e:f9:ad:
76:5f:7d:14:b3:b6:e1:c6:d6:b8:da:1b:28:cb:db:
69:b2:0a:37:a2:0d:96:6a:97:65:9d:cf:6e:03:3a:
8f:fe:0d:68:75:ea:91:8d:51:73:77:62:73:c4:8c:
16:c8:53:a6:fa:37:7a:f1:1e:2a:f1:d9:be:4c:41:
48:fd:3c:88:00:fc:94:b7:af:d0:fe:84:b0:11:51:
66:ec:3c:92:b3:74:ad:5e:e2:d7:0e:81:7f:82:34:
96:63:13:dc:2c:5d:40:e1:e0:bb:20:19:58:27:e1:
dc:ea:76:59:42:ab:8e:ed:c8:dd:6a:f1:96:ea:88:
a3:d4:57:32:2a:83:66:c5:13:a3:a6:a0:8f:cf:37:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:86:1D:C8:5D:1D:2A:E1:E7:A7:E1:42:68:E1:2E:40:25:9F:5E:9A
X509v3 Authority Key Identifier:
keyid:60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3137302e38302e36382e302f32322d3234203d3e20323633393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.68.0/22
Signature Algorithm: sha256WithRSAEncryption
72:bb:13:6d:c6:96:04:07:21:d1:da:b1:e1:4e:7d:40:56:de:
43:20:43:6d:01:8d:ce:f1:51:96:d6:ac:56:9f:e8:83:bd:0b:
be:70:54:57:26:0a:1f:62:5f:2c:55:1b:ee:44:39:83:a6:f2:
5c:c8:c3:4e:5c:72:97:29:97:1b:dc:32:d1:09:68:c6:45:a4:
ba:a2:8f:1c:b0:86:ff:fb:5c:a1:f0:62:d8:c5:1b:e9:32:f0:
e3:dc:1c:42:51:96:50:bb:9e:3c:db:f7:3e:4e:ef:55:5c:94:
24:bb:2d:e8:5e:52:f6:d3:5a:b0:76:92:79:af:6b:5b:f7:92:
0a:05:97:df:f3:eb:35:ab:56:c0:da:41:d9:3c:d5:9c:52:e0:
48:10:7b:d9:d8:f8:b7:af:e7:a5:f9:a1:fc:95:21:5d:71:bb:
52:01:82:85:62:1f:b3:16:af:81:dd:49:15:ff:b8:80:ac:57:
ed:1d:ed:0b:21:a2:e1:5e:43:a2:28:03:64:01:21:2c:52:bc:
b5:1b:cd:6e:98:be:5c:68:5a:7d:34:c2:74:38:f1:eb:d6:0b:
39:26:2f:5e:95:fd:f7:78:10:cb:1d:03:5c:ff:52:cb:68:55:
23:51:90:1f:cb:5c:68:4c:b4:50:2c:c9:33:31:ef:a9:80:db:
2b:77:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:25:26 2025 by rpki-client