Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa
File: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (raw, json)
Hash identifier: USN4H0UibeJWE4jJ+kqowFTFrlNHAmv58x+CH4DHmdw=
Subject key identifier: D9:08:EC:5E:CD:28:65:AD:2C:AB:CB:63:3F:4E:D8:3F:D8:67:BF:4A
Certificate issuer: /CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
Certificate serial: 1A345C351107E57E05FD448ACBD58FC9988EBB3E
Authority key identifier: B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa
Signing time: Fri 26 Jan 2024 12:43:33 +0000
ROA not before: Fri 26 Jan 2024 12:38:33 +0000
ROA not after: Fri 24 Jan 2025 12:43:33 +0000
asID: 266360
IP address blocks: 170.239.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:34:5c:35:11:07:e5:7e:05:fd:44:8a:cb:d5:8f:c9:98:8e:bb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B928C789E5CF21532927DA25F3DD79DBEF62E896
Validity
Not Before: Jan 26 12:38:33 2024 GMT
Not After : Jan 24 12:43:33 2025 GMT
Subject: CN=D908EC5ECD2865AD2CABCB633F4ED83FD867BF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:f1:1a:9c:b6:dd:55:63:c1:02:bc:8d:8a:
e0:8d:99:c2:c8:79:49:1a:5f:b2:d2:93:04:c1:a0:
7d:ee:70:a0:ce:17:e1:e5:91:e3:d7:f2:80:91:c1:
56:26:2c:95:47:33:32:d5:e5:da:a2:87:81:a0:7d:
04:f1:f5:7c:14:f1:76:86:82:09:3d:a1:a7:14:18:
e9:ba:07:da:88:96:e0:1b:57:e4:d6:cd:f4:fc:61:
3d:d7:33:37:64:0a:40:50:f9:f6:93:83:e9:82:18:
c4:46:1f:de:8f:77:f6:a2:0e:5d:a6:4c:04:d4:f0:
01:f8:22:e9:8c:8a:fc:01:7a:48:eb:7a:a4:1b:84:
e8:99:3a:c6:f7:ba:17:92:2f:7d:6f:03:1d:74:57:
d8:f0:f1:c6:02:0b:fb:02:d5:57:ad:bd:8d:85:05:
06:82:fe:c6:e4:65:8e:e3:11:d5:43:26:5e:04:f8:
e3:96:42:ca:ff:83:be:5c:d7:ea:d2:4c:d5:dd:6d:
42:83:0f:8e:66:8c:b1:d1:ac:a7:f6:0d:80:c2:28:
62:cc:1a:41:7b:89:bc:7d:22:75:3d:5a:72:54:4c:
0d:8b:05:65:98:16:f0:37:65:2f:42:91:39:94:34:
9a:c1:49:9f:29:22:83:5b:ab:4b:c3:3d:cc:e8:49:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:08:EC:5E:CD:28:65:AD:2C:AB:CB:63:3F:4E:D8:3F:D8:67:BF:4A
X509v3 Authority Key Identifier:
keyid:B9:28:C7:89:E5:CF:21:53:29:27:DA:25:F3:DD:79:DB:EF:62:E8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B928C789E5CF21532927DA25F3DD79DBEF62E896.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a7:1c:16:36:b4:3d:13:fc:7d:99:f0:11:d0:16:d4:29:18:
3a:30:83:86:e7:8c:a5:94:f2:30:a0:89:66:57:40:f3:ce:79:
79:0d:07:b4:b0:a5:56:f0:2b:85:2d:9e:d3:dc:e7:d1:88:12:
6e:37:28:f1:24:b7:b8:be:e1:c0:a7:bf:9b:17:22:af:c6:c1:
c6:ae:65:74:95:94:3e:2b:11:e4:5d:e4:e8:53:ca:28:7c:bd:
cd:92:a7:e7:73:a2:33:08:62:ff:d2:a4:49:8d:8f:d0:df:88:
e2:3d:4c:46:71:23:07:88:91:54:8a:f2:df:2d:e5:5c:13:bd:
86:50:67:72:38:d3:96:e9:a6:fc:d5:ea:74:09:cd:d9:c8:23:
f3:dd:ed:47:18:89:cc:38:42:93:55:a3:88:70:d8:df:79:68:
d3:2b:8e:28:ca:33:a9:64:4e:61:f1:ac:d1:36:da:13:be:54:
c8:fe:a1:46:bd:e1:e1:56:38:2d:4e:1b:c8:d8:81:24:b0:5c:
aa:86:c2:39:06:7b:32:d2:6b:3a:8e:bd:18:a0:d7:13:cb:e7:
c8:9b:66:18:e8:11:ed:19:78:f2:a0:6e:7c:8a:f7:ed:5e:02:
7e:97:86:05:68:7f:ec:02:3b:22:7d:e1:84:63:53:67:bf:7a:
aa:2b:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org