Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa
File: 3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa (raw, json)
Hash identifier: UVVFvLIjkPKIcqve5jKGPsXzv1Ii50hTkzkc3BjViMk=
Subject key identifier: BA:29:28:06:4F:10:E5:2A:B4:2E:82:3C:A7:5B:9F:90:26:0F:B8:51
Certificate issuer: /CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
Certificate serial: 0C1950BF1919904825C6692C886CB0F0A6765E09
Authority key identifier: 2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa
Signing time: Fri 08 Mar 2024 14:06:48 +0000
ROA not before: Fri 08 Mar 2024 14:01:48 +0000
ROA not after: Fri 07 Mar 2025 14:06:48 +0000
asID: 266293
IP address blocks: 170.79.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:19:50:bf:19:19:90:48:25:c6:69:2c:88:6c:b0:f0:a6:76:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
Validity
Not Before: Mar 8 14:01:48 2024 GMT
Not After : Mar 7 14:06:48 2025 GMT
Subject: CN=BA2928064F10E52AB42E823CA75B9F90260FB851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:dc:2c:40:b2:5d:20:98:8b:c2:3d:3c:fe:
41:1c:1b:ef:d6:00:ba:f2:a8:13:72:8b:a1:4b:e9:
c9:12:96:69:6f:99:9d:20:72:06:6a:a0:09:f5:23:
e1:42:28:47:54:14:b0:e2:1c:2a:11:7d:df:eb:ad:
b4:84:82:d7:ee:11:6e:9c:4b:9a:d5:76:61:fb:d4:
e1:56:ad:c9:e7:9c:4a:aa:12:ce:e7:ba:83:0a:38:
f0:dd:39:60:87:80:96:81:40:ae:63:28:9a:dd:a6:
80:15:27:5c:93:0f:c7:45:bb:76:a9:9e:48:f6:da:
93:43:8a:8d:12:ad:22:2a:39:15:b9:b0:59:e3:81:
16:37:af:49:44:a2:d5:95:8d:8d:63:aa:1b:09:f0:
0f:7e:cf:e0:12:0a:a5:5f:b6:87:47:84:4d:ba:55:
36:5c:a9:26:3f:9d:61:19:7d:35:ea:97:56:7e:98:
4a:8d:af:80:9a:ac:7b:2a:53:0b:0e:fc:fb:04:e6:
ee:5c:e2:34:72:89:03:c4:18:b0:91:86:ff:e4:0f:
0c:fe:3f:07:4e:fb:d2:74:85:0a:2d:6c:d3:f5:9a:
0d:e7:bf:ba:80:ff:5a:e6:71:a6:ba:1a:ee:77:61:
5b:46:93:47:a5:ee:54:08:4a:83:7a:d7:42:b0:6c:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:28:06:4F:10:E5:2A:B4:2E:82:3C:A7:5B:9F:90:26:0F:B8:51
X509v3 Authority Key Identifier:
keyid:2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.132.0/22
Signature Algorithm: sha256WithRSAEncryption
57:72:9d:b6:2d:b4:3c:10:22:53:0f:77:df:62:ea:51:f3:b4:
bc:08:de:28:10:b6:29:fc:b6:31:0b:00:06:8b:be:b1:88:11:
b3:19:9f:a6:9a:67:d9:7f:29:d3:5a:50:85:de:51:9b:54:ec:
b0:2e:a0:0c:1b:7d:8a:19:fd:b8:8f:b1:68:d1:8a:0c:8d:e5:
18:6a:45:ff:78:1b:48:cb:97:52:a2:78:85:68:ca:22:ff:fa:
ca:61:20:31:57:d6:e0:5e:bd:7b:bf:82:b4:4c:e6:78:33:8a:
71:59:11:44:75:65:6a:2f:91:b7:76:f5:31:a0:65:5f:83:e1:
4b:db:10:76:6c:e0:ec:ec:2b:c3:4b:09:4e:3d:ca:0a:76:6c:
e5:72:7d:b4:71:00:83:d2:a4:75:bf:c6:8b:0c:c1:25:d1:b4:
98:c5:60:6c:5c:21:ab:24:c0:d9:20:e2:d9:fb:77:51:09:2a:
4a:59:e6:fe:07:8c:af:e2:f2:df:ae:81:1c:aa:cd:d1:e4:3f:
be:12:bb:4d:60:8f:1d:40:79:82:21:9e:97:79:68:90:9d:a3:
94:5c:80:41:ca:b9:96:3b:a2:e5:fb:59:0b:fc:6d:58:f0:48:
93:2a:1a:4a:05:43:47:ac:a0:f8:92:9d:56:84:e5:ec:2e:1b:
dc:a5:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org