Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
File: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier: n2Hrar6oyP66e+EhonTNcb7s1Ke8A0/Dhw+l2veND2A=
Subject key identifier: 2D:57:08:5C:C0:FB:74:6A:FC:78:D0:11:36:C0:03:01:A8:FB:F1:72
Certificate issuer: /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial: 0256D5E24891AF77F46F9AC91F5CFA679D277007
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
Signing time: Mon 16 Oct 2023 20:45:15 +0000
ROA not before: Mon 16 Oct 2023 20:40:15 +0000
ROA not after: Mon 14 Oct 2024 20:45:15 +0000
asID: 28131
IP address blocks: 170.0.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:56:d5:e2:48:91:af:77:f4:6f:9a:c9:1f:5c:fa:67:9d:27:70:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Validity
Not Before: Oct 16 20:40:15 2023 GMT
Not After : Oct 14 20:45:15 2024 GMT
Subject: CN=2D57085CC0FB746AFC78D01136C00301A8FBF172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:12:3f:87:ea:2f:78:f9:83:8a:2d:12:4c:
68:b1:81:19:d5:09:52:06:c1:94:89:72:48:6e:14:
2d:c1:e1:3c:7f:67:9b:94:d0:42:d9:93:e1:c4:bd:
1c:77:1b:a2:23:40:0c:34:f4:dd:44:53:68:12:6e:
87:d2:43:8c:64:31:29:c8:22:7a:cd:81:1d:c3:ad:
ea:49:07:37:21:d4:9e:5a:7c:49:c6:f6:8c:c7:d6:
a8:5c:a4:c0:2f:1e:1d:60:9e:35:6c:ba:03:37:b7:
c9:24:f2:c6:36:d6:5f:5a:5d:d9:8d:c7:91:11:af:
eb:1d:eb:f6:af:83:ce:97:8b:58:ea:00:2a:23:0b:
78:99:eb:5e:8b:47:08:9b:f2:d2:67:66:c2:55:04:
7e:52:aa:a5:c2:c3:0c:ae:59:97:ba:39:1a:38:52:
9c:d2:32:11:00:ab:24:4f:49:ce:85:4f:2b:bf:28:
31:49:ac:04:d0:b4:48:f1:46:99:8d:b5:a5:37:46:
7e:92:d1:fd:d6:2b:cb:c7:a5:b8:58:e2:4c:8e:12:
6b:1d:cc:aa:68:8c:41:c7:95:39:b8:10:af:4d:2a:
7b:9c:bc:85:80:86:4f:91:5e:14:8a:8a:c3:7f:91:
c1:5c:8d:f2:4e:68:9f:73:31:24:86:b3:67:79:fd:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:08:5C:C0:FB:74:6A:FC:78:D0:11:36:C0:03:01:A8:FB:F1:72
X509v3 Authority Key Identifier:
keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.240.0/22
Signature Algorithm: sha256WithRSAEncryption
23:37:7b:80:a5:bc:e3:a1:80:ce:16:9c:9e:73:70:43:2b:bf:
42:57:17:0a:ad:d9:a3:e8:98:b7:10:0a:58:c7:af:af:d4:d1:
ca:84:b3:c7:ab:33:24:8f:bc:13:48:17:3b:2c:43:f4:b5:ab:
72:37:55:cd:4a:71:c8:d0:b3:d9:d2:b1:4c:48:f9:ad:56:7d:
3b:a9:21:7b:e3:39:33:8a:3b:66:32:e8:27:4c:e3:ed:52:8c:
3e:be:7f:fb:ab:27:27:94:ba:a0:a9:ff:93:16:80:24:94:46:
7a:0f:72:22:bf:13:c2:20:2e:7c:ff:28:38:d7:c1:da:b0:dd:
ba:ae:6a:72:ff:48:95:0c:9a:88:19:fd:45:d3:fa:4e:f5:5c:
88:02:70:79:fa:b7:62:91:2c:62:ca:2a:29:30:67:9a:61:d1:
29:71:c6:1d:9f:86:2b:6a:ae:07:dd:93:77:30:6e:8f:b4:93:
35:1f:6d:14:7a:d1:43:3f:fe:89:c5:91:90:7c:fd:cd:33:a8:
b1:6a:41:96:8d:03:49:47:1a:e4:03:ab:f8:8a:38:14:89:21:
ce:b5:df:2d:23:2e:0f:7d:e0:42:81:94:8f:6f:b2:32:6e:8c:
57:a2:2f:f9:d9:20:fc:9c:5d:c6:d9:6c:a9:06:53:0d:19:59:
a7:52:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org