Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
File: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (raw, json)
Hash identifier: d66dbuDR47wZyRw7Mxm6eiq7qicUguK771CokoJTvi4=
Subject key identifier: E3:4A:B3:72:9E:EB:DA:70:09:6D:E2:41:06:AE:66:20:02:80:E7:80
Certificate issuer: /CN=53DBD8550574BFB1767083FAD3A327CD5351750E
Certificate serial: 6B1C04E1A949B18EECFB1B15511378F50B587D5A
Authority key identifier: 53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
Signing time: Fri 22 Sep 2023 03:52:42 +0000
ROA not before: Fri 22 Sep 2023 03:47:42 +0000
ROA not after: Fri 20 Sep 2024 03:52:42 +0000
asID: 263919
IP address blocks: 170.0.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1c:04:e1:a9:49:b1:8e:ec:fb:1b:15:51:13:78:f5:0b:58:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53DBD8550574BFB1767083FAD3A327CD5351750E
Validity
Not Before: Sep 22 03:47:42 2023 GMT
Not After : Sep 20 03:52:42 2024 GMT
Subject: CN=E34AB3729EEBDA70096DE24106AE66200280E780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:b4:c5:f1:8a:df:10:51:0f:f8:64:e2:18:
44:72:31:43:6c:81:e1:86:28:04:6f:4c:62:b3:e5:
57:66:57:f5:5e:33:a9:dd:c3:a4:60:a9:43:f9:fc:
63:43:e5:ee:58:3f:40:a5:86:94:b2:e2:cc:2a:04:
48:78:60:51:89:fe:68:af:c5:7e:39:53:85:d5:b2:
73:2e:e1:76:84:5c:1d:d3:55:8a:73:ea:00:4c:7e:
02:75:20:15:3c:18:38:65:3a:24:b2:48:50:b9:4b:
7c:bf:07:c8:63:4c:ab:d0:b9:a1:b6:1e:41:fa:b5:
d7:a7:75:34:c8:eb:34:53:de:77:33:34:3b:3d:dd:
79:d9:2b:b7:06:cf:fd:ad:b2:29:ef:f6:42:6c:84:
5a:68:ff:e7:95:20:ef:d6:27:78:d5:e1:75:56:fe:
30:40:0f:a6:32:12:74:1a:a2:e5:8a:b0:98:81:27:
8c:e2:f5:6d:69:ac:a1:87:fe:53:1c:1f:76:3e:d7:
83:ed:57:f5:e5:3c:aa:c3:d1:de:0b:cb:f9:86:fa:
5c:cb:da:1f:88:aa:b2:b8:12:94:5a:36:d3:8f:88:
ad:8a:98:a6:ee:c3:72:88:30:9a:16:99:43:2e:79:
1c:72:4c:f7:62:da:96:43:64:9c:da:79:a2:b7:85:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:B3:72:9E:EB:DA:70:09:6D:E2:41:06:AE:66:20:02:80:E7:80
X509v3 Authority Key Identifier:
keyid:53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.208.0/22
Signature Algorithm: sha256WithRSAEncryption
49:82:88:7b:e8:cb:ac:bb:a4:ac:e0:a6:ba:8c:ca:71:6e:17:
01:aa:db:3f:db:6c:50:97:ec:40:3b:7d:b1:76:57:69:e8:33:
aa:6e:5f:4d:c7:d7:49:86:e4:51:8f:34:98:98:65:09:d5:be:
bd:e3:31:a0:48:7f:d0:88:61:aa:5c:b8:e1:e8:5f:c8:0f:a9:
eb:53:e4:c0:7a:b7:e8:9e:16:61:a5:6e:4f:eb:6a:ce:7d:1f:
c3:f7:c5:19:38:4c:6d:1e:f5:e9:c2:6d:68:43:b5:85:40:5f:
73:be:36:36:45:c4:09:d6:85:12:4d:f5:57:c6:ab:01:11:6b:
75:49:6a:08:01:cf:d0:8e:58:aa:1d:4f:65:fc:6f:0b:3b:52:
5a:40:12:19:14:dc:fc:6b:ce:e7:db:75:0e:02:17:36:0e:bf:
0a:3e:6d:b4:5d:6a:b3:02:91:c7:dc:ca:b5:21:46:37:e9:fa:
36:e1:71:aa:df:93:f8:fa:67:80:ef:81:40:1d:8c:82:10:f6:
7d:29:a6:21:b7:04:bf:07:fd:85:2e:df:7f:1c:69:3c:b0:8e:
bd:b6:a6:93:af:09:11:5e:1f:6f:01:1b:1a:a8:a0:ee:bb:92:
f1:11:9f:8d:1d:a0:b5:83:6b:46:58:4b:7a:02:4f:80:dd:02:
d6:5a:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:19 2025 by rpki-client