Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234312e302f32342d3234203d3e203631353739.roa
File: 3137302e37392e3234312e302f32342d3234203d3e203631353739.roa (raw, json)
Hash identifier: hUxMxAxajOGM5+GcrNI3DZqfVDMlXoCPjJfKboh7Jkc=
Subject key identifier: 2B:CE:48:4C:0D:9B:79:18:F8:D8:52:72:F9:23:2D:0B:61:58:88:0C
Certificate issuer: /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial: 19E2972784BF08A64C03560385B010F78C7B5130
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234312e302f32342d3234203d3e203631353739.roa
Signing time: Tue 06 Feb 2024 12:01:38 +0000
ROA not before: Tue 06 Feb 2024 11:56:38 +0000
ROA not after: Tue 04 Feb 2025 12:01:38 +0000
asID: 61579
IP address blocks: 170.79.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e2:97:27:84:bf:08:a6:4c:03:56:03:85:b0:10:f7:8c:7b:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Validity
Not Before: Feb 6 11:56:38 2024 GMT
Not After : Feb 4 12:01:38 2025 GMT
Subject: CN=2BCE484C0D9B7918F8D85272F9232D0B6158880C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:9e:68:c9:0c:b4:7a:64:f5:ee:4c:e8:58:
63:8d:66:91:ea:05:14:86:ca:ef:c1:a3:3b:91:09:
b1:74:cc:9d:cc:7f:f8:23:b9:5b:46:aa:90:fc:44:
f4:da:54:e5:7f:b3:16:21:d6:aa:f4:d2:73:0a:fb:
83:3d:6e:f3:5e:98:ac:25:ed:a1:49:df:1f:57:8f:
e1:7d:6e:9f:21:7d:c7:8a:63:75:95:e0:41:f7:cd:
cc:0f:3c:15:ea:60:77:2c:54:f0:57:5a:51:82:3d:
07:3b:a4:41:ca:5f:9b:aa:48:55:ec:7d:9a:fe:49:
c7:f8:66:aa:6d:7b:ac:97:7e:b9:22:0d:27:60:b1:
70:21:b7:36:3a:6f:78:a6:c0:b9:a5:68:60:ea:cc:
0e:10:0c:05:0a:30:1d:13:83:94:d1:25:79:8d:25:
0f:ab:14:e6:02:d6:32:fb:24:47:11:4f:ce:f6:3d:
45:ac:a9:f8:aa:cc:7b:44:7d:91:b8:f5:f5:c9:56:
0e:1a:b7:47:14:0c:b6:6a:06:c2:07:9e:40:f1:3c:
be:1c:73:0d:ae:77:f2:58:2c:23:45:70:04:a3:ff:
bb:1a:0e:d2:c8:99:c6:03:72:96:6c:19:a1:01:aa:
e6:77:71:e6:61:e0:41:85:ee:f7:0e:bf:21:e6:2f:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:48:4C:0D:9B:79:18:F8:D8:52:72:F9:23:2D:0B:61:58:88:0C
X509v3 Authority Key Identifier:
keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234312e302f32342d3234203d3e203631353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.241.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:65:75:fd:c6:86:78:d5:e7:ce:f3:5d:5c:9a:e8:d3:73:
9a:d8:63:2a:ff:96:22:6a:69:2c:d1:a9:86:f9:c3:c7:40:05:
5c:3f:22:aa:c1:79:41:2d:cf:46:35:68:a7:b0:22:da:ce:05:
04:65:db:b6:e5:61:e5:9a:1f:8c:03:29:76:be:88:81:ff:5a:
82:68:05:92:af:77:42:8d:83:53:f3:3d:05:c1:3d:f1:9c:75:
dc:49:3d:f0:0a:35:ef:c0:74:3a:8f:5c:b4:65:6e:b8:6b:cf:
01:5c:d0:f5:9f:01:1c:ba:af:31:67:d4:fc:7c:31:75:cf:2a:
c4:ad:ee:25:4d:89:2d:16:92:63:be:64:d9:23:dc:e0:48:1f:
c8:92:1e:56:98:89:6b:35:78:f4:39:d6:32:ee:c2:69:a6:73:
4f:e0:a8:3b:59:e9:62:c8:dc:dc:d0:e1:e7:25:14:66:8f:15:
8b:eb:21:5a:34:eb:b8:07:f1:00:e5:d5:0c:b8:10:6a:f3:fb:
e1:0c:fc:a7:0b:c6:db:c0:1e:ba:44:1d:1f:0b:77:57:f1:42:
93:85:70:1e:8b:fa:a2:31:07:cc:f8:25:16:a9:5c:1a:7a:9d:
20:6a:c5:18:7c:44:71:91:5a:6a:5a:17:66:36:64:58:87:90:
30:93:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:51 2025 by rpki-client