Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa
File: 3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier: b6agEfclIzRSXh4qV0tLPvNnPMKyZSgsBNediRWTdnc=
Subject key identifier: FB:19:0F:59:6C:98:DF:F1:98:2B:ED:63:78:D3:E8:36:AB:88:F3:86
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 79DED913C335BFB2E0D0BD7427DA77F4E5050752
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:45:43 +0000
ROA not before: Tue 24 Oct 2023 12:40:43 +0000
ROA not after: Tue 22 Oct 2024 12:45:43 +0000
asID: 61678
IP address blocks: 170.246.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:de:d9:13:c3:35:bf:b2:e0:d0:bd:74:27:da:77:f4:e5:05:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:40:43 2023 GMT
Not After : Oct 22 12:45:43 2024 GMT
Subject: CN=FB190F596C98DFF1982BED6378D3E836AB88F386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:57:b8:a4:38:84:13:3e:eb:af:0e:7f:e5:
62:12:e2:60:2f:0e:ce:76:22:47:af:54:76:ca:4e:
cd:09:47:59:2c:0a:09:3d:8d:be:6b:0b:d8:59:aa:
16:ae:2c:ed:bc:c2:63:87:75:a7:57:35:6f:5b:e6:
f6:cd:27:12:99:e3:15:de:d5:a1:87:86:6f:f3:57:
b7:e6:03:d6:28:71:4e:78:d7:3f:08:27:40:f4:6c:
b7:d0:e3:1a:00:0a:df:c5:33:c5:21:05:6b:57:ea:
18:fe:cd:fe:33:40:ed:b5:b0:00:05:5e:08:57:31:
c2:59:2b:01:56:2b:d7:3b:11:c5:c5:57:cb:e1:8a:
38:f8:c0:3a:19:f2:d0:02:a4:1a:37:2d:00:76:c1:
00:8f:c3:e8:3a:cf:a0:bd:ce:71:b6:cf:6b:78:92:
e2:51:e4:7b:03:53:36:20:1f:99:f6:c7:9c:84:39:
cf:85:df:1e:57:23:48:dc:ae:d3:92:7c:f4:a2:46:
a2:84:51:0a:44:a4:9a:fe:8a:a5:4d:54:cb:f5:1b:
7b:ea:ba:d1:4a:d5:9e:2b:b6:c0:2d:05:50:c8:ca:
aa:7b:94:3d:50:9c:fc:a4:b2:64:78:26:3b:e3:32:
96:ba:b8:ec:c3:7e:a1:fb:43:fd:8a:cf:c1:9b:5e:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:0F:59:6C:98:DF:F1:98:2B:ED:63:78:D3:E8:36:AB:88:F3:86
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32332d3233203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.236.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c6:1f:7e:1b:6a:35:0e:97:f3:ce:bd:03:94:89:e9:06:92:
f6:9c:d7:17:a5:dd:7d:bc:f8:ae:5d:d9:37:bd:e6:96:d5:26:
82:1c:78:b9:9b:e8:ad:50:52:da:e0:41:4f:d9:e1:c1:6a:99:
e9:f3:8c:be:1b:17:07:a2:e3:f8:a2:46:8f:5f:eb:40:14:e0:
d9:8e:9b:3b:66:bb:97:7e:d0:82:37:ad:03:e5:85:82:0c:76:
ee:c6:9e:20:06:14:19:1b:47:9d:e8:ca:cc:61:62:97:ba:09:
44:cb:16:2c:d3:10:a9:19:42:e8:95:86:b5:5b:2b:88:11:9d:
bf:b6:54:b8:0b:ed:bb:d0:a3:a4:d7:d9:e7:7c:22:d7:a1:94:
0b:12:72:2a:27:36:4a:ad:3e:04:0e:52:d7:6b:e1:1a:fd:95:
6b:dc:b2:4c:e8:79:dd:7f:a2:16:b0:a6:b5:ad:88:ca:ac:56:
78:27:a0:d0:58:89:8e:b0:9e:b8:91:26:e5:01:12:a6:1a:95:
1b:48:a1:81:f6:90:d7:cd:6e:84:80:2f:3e:71:c2:c9:55:bc:
34:b1:9c:7e:3e:ce:54:17:e1:62:c9:6f:79:fc:53:3f:7b:e0:
79:5c:55:d8:a4:fe:3e:19:da:00:fe:cd:29:c0:f7:9b:8c:35:
94:ee:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:52 2025 by rpki-client