Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32332d3233203d3e20323634393936.roa
File: 3137302e38342e38342e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier: VlbwR3YxqBJODHgquQtte+51OgItekXbjAyTsIVQo5w=
Subject key identifier: F3:F6:38:2F:F6:EA:74:BD:98:DA:FA:73:56:FD:93:63:3F:81:F2:D1
Certificate issuer: /CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Certificate serial: 0CA76AC26E1D7889B4A461E61E80F0F71C107D04
Authority key identifier: 9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32332d3233203d3e20323634393936.roa
Signing time: Fri 23 Jun 2023 20:06:49 +0000
ROA not before: Fri 23 Jun 2023 20:01:49 +0000
ROA not after: Fri 21 Jun 2024 20:06:49 +0000
asID: 264996
IP address blocks: 170.84.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a7:6a:c2:6e:1d:78:89:b4:a4:61:e6:1e:80:f0:f7:1c:10:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E
Validity
Not Before: Jun 23 20:01:49 2023 GMT
Not After : Jun 21 20:06:49 2024 GMT
Subject: CN=F3F6382FF6EA74BD98DAFA7356FD93633F81F2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:ae:c4:78:f4:52:53:d3:53:bd:ac:79:e1:
e3:a2:13:bb:19:3d:de:bc:b8:47:16:f7:dc:cc:18:
bb:45:ca:3f:48:f6:36:35:e7:90:9a:b8:a1:56:ae:
7c:db:43:1f:8a:d8:af:70:f2:f7:64:62:a7:b7:e9:
cb:3a:c7:fb:a2:66:c1:87:6c:a0:92:e9:13:6b:cd:
49:28:9a:f0:b8:1e:fd:80:7c:d8:18:10:ac:c1:ac:
6f:a9:04:99:dc:c6:39:48:7e:36:f2:79:d4:4e:4b:
6c:bd:e4:33:67:7a:d7:68:26:06:c2:10:45:1c:35:
63:9f:3d:65:fb:ef:15:98:bc:fc:79:44:75:cd:50:
c8:04:61:4e:eb:fa:49:62:3e:ac:aa:c5:f6:61:6f:
58:cf:3a:0c:19:75:41:3d:64:5e:79:ba:f1:05:35:
f4:b5:6f:92:48:3b:86:6c:9f:a9:4e:ed:36:b5:47:
49:8f:97:13:37:a9:f0:e8:b5:e1:78:44:e5:90:64:
63:aa:00:d0:a7:12:03:4b:ce:79:f6:70:e0:85:b6:
a5:f8:7b:e1:1b:d2:d5:d2:44:6b:76:49:7b:de:b1:
d1:cb:1b:14:d4:9e:c0:fb:aa:8c:5a:18:e9:3a:7a:
a0:69:26:70:c1:7a:4a:ea:2b:f3:65:cb:d6:5b:ad:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:38:2F:F6:EA:74:BD:98:DA:FA:73:56:FD:93:63:3F:81:F2:D1
X509v3 Authority Key Identifier:
keyid:9A:7D:F1:61:7E:6D:2E:A5:D5:01:7B:A0:00:CA:4D:1D:D6:D6:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7DF1617E6D2EA5D5017BA000CA4D1DD6D62F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/3137302e38342e38342e302f32332d3233203d3e20323634393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.84.0/23
Signature Algorithm: sha256WithRSAEncryption
17:b7:ed:74:18:c6:85:59:e6:b1:9b:9b:89:81:d8:ea:d7:01:
cd:3c:4b:1e:a0:1d:e4:e6:20:6b:46:22:6b:67:31:12:ed:d8:
80:42:49:4f:65:ed:cc:c5:47:2c:ca:35:82:5a:ac:47:d1:22:
7c:6a:cd:4c:e0:e1:ae:ad:0c:3f:fa:2f:bd:a5:6b:2c:5b:e0:
86:cd:8a:61:3c:1c:da:4a:f4:24:20:58:e5:08:e4:99:bd:03:
b9:43:36:e3:c0:87:0c:4a:c0:40:ec:0e:ac:79:a2:aa:0d:5b:
07:1e:1d:eb:ef:83:e8:0f:cf:f5:14:95:a5:d3:9c:65:5c:ea:
a1:4c:6c:57:32:f4:18:61:19:35:4c:a6:0a:63:5b:35:6f:c4:
0f:d7:9a:2b:49:70:67:1b:9f:41:7b:b5:a4:ea:12:43:ea:a6:
4d:2b:09:51:aa:10:57:22:78:82:ee:34:e7:a3:18:28:dd:ea:
1b:45:ec:d1:81:53:59:c4:85:db:64:d3:d9:f9:be:44:be:d6:
e2:58:b8:98:e1:ad:1f:34:0a:4e:46:0f:86:e8:5e:17:53:d9:
0f:bc:c2:93:cd:e3:90:21:da:bb:09:91:37:8b:95:34:1f:ac:
7c:5c:61:c8:a4:e9:df:c4:f1:95:07:60:d7:03:da:36:11:66:
1c:d2:f3:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDKdqwm4deIm0pGHmHoDw9xwQfQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE3REYxNjE3RTZEMkVBNUQ1MDE3QkEwMDBDQTREMURE
NkQ2MkY4RTAeFw0yMzA2MjMyMDAxNDlaFw0yNDA2MjEyMDA2NDlaMDMxMTAvBgNV
BAMTKEYzRjYzODJGRjZFQTc0QkQ5OERBRkE3MzU2RkQ5MzYzM0Y4MUYyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W67EePRSU9NTvax54eOiE7sZ
Pd68uEcW99zMGLtFyj9I9jY155CauKFWrnzbQx+K2K9w8vdkYqe36cs6x/uiZsGH
bKCS6RNrzUkomvC4Hv2AfNgYEKzBrG+pBJncxjlIfjbyedROS2y95DNnetdoJgbC
EEUcNWOfPWX77xWYvPx5RHXNUMgEYU7r+kliPqyqxfZhb1jPOgwZdUE9ZF55uvEF
NfS1b5JIO4Zsn6lO7Ta1R0mPlxM3qfDoteF4ROWQZGOqANCnEgNLznn2cOCFtqX4
e+Eb0tXSRGt2SXvesdHLGxTUnsD7qoxaGOk6eqBpJnDBekrqK/Nly9ZbrTU7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8/Y4L/bqdL2Y2vpzVv2TYz+B8tEwHwYDVR0j
BBgwFoAUmn3xYX5tLqXVAXugAMpNHdbWL44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMC85QTdERjE2MTdFNkQyRUE1RDUwMTdCQTAwMENBNEQxREQ2RDYyRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBN0RGMTYxN0U2RDJFQTVE
NTAxN0JBMDAwQ0E0RDFERDZENjJGOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzAv
MzEzNzMwMmUzODM0MmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlRUMA0GCSqGSIb3DQEBCwUAA4IBAQAXt+10GMaF
Weaxm5uJgdjq1wHNPEseoB3k5iBrRiJrZzES7diAQklPZe3MxUcsyjWCWqxH0SJ8
as1M4OGurQw/+i+9pWssW+CGzYphPBzaSvQkIFjlCOSZvQO5QzbjwIcMSsBA7A6s
eaKqDVsHHh3r74PoD8/1FJWl05xlXOqhTGxXMvQYYRk1TKYKY1s1b8QP15orSXBn
G59Be7Wk6hJD6qZNKwlRqhBXIniC7jTnoxgo3eobRezRgVNZxIXbZNPZ+b5Evtbi
WLiY4a0fNApORg+G6F4XU9kPvMKTzeOQIdq7CZE3i5U0H6x8XGHIpOnfxPGVB2DX
A9o2EWYc0vOa
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org