Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3233203d3e203631393030.roa
File: 3137302e3234372e362e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier: V8ACBc1QotCeRpGDFCL0iGEoP/eAveQlomyvp5gEf9g=
Subject key identifier: 12:67:EC:EA:1E:73:9D:29:6C:F8:CF:A2:31:20:DB:CE:F6:24:EA:7F
Certificate issuer: /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial: 6F28C0F5ED3B93D8C57AA61F55C40F76D1CFE72D
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3233203d3e203631393030.roa
Signing time: Tue 17 Dec 2024 17:08:28 +0000
ROA not before: Tue 17 Dec 2024 17:03:28 +0000
ROA not after: Tue 16 Dec 2025 17:08:28 +0000
asID: 61900
IP address blocks: 170.247.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:28:c0:f5:ed:3b:93:d8:c5:7a:a6:1f:55:c4:0f:76:d1:cf:e7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Validity
Not Before: Dec 17 17:03:28 2024 GMT
Not After : Dec 16 17:08:28 2025 GMT
Subject: CN=1267ECEA1E739D296CF8CFA23120DBCEF624EA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:8c:83:2d:02:03:e8:51:86:23:fd:0b:af:
dc:53:01:94:0d:82:42:c9:ca:15:c6:c9:9e:42:db:
82:e7:8b:bd:92:82:f1:b0:ff:9e:87:e1:94:3c:70:
74:93:50:97:c7:1a:ce:08:8c:1d:de:3d:5c:2e:a6:
73:16:55:55:3f:5f:25:08:3d:10:f5:2e:13:91:af:
f1:a3:b4:fb:42:69:0d:e7:96:99:00:e3:4c:07:86:
3d:d2:d3:56:4b:2c:e7:f3:ed:70:06:a1:c4:86:61:
0f:d1:a2:5c:ee:8e:01:76:62:c8:a5:58:48:79:fa:
f6:54:fe:91:6d:59:3a:45:62:ef:4c:cd:db:a1:4a:
14:12:80:84:02:e7:51:5d:a6:64:44:79:76:cb:2a:
30:25:46:2b:90:57:cc:d7:3d:59:68:70:b7:5a:5a:
9e:fe:bf:76:e4:6f:dc:59:03:ee:f9:c6:ae:4a:ea:
a2:19:e8:0a:6c:7d:f5:2a:cd:a9:81:9a:15:37:ab:
a2:b9:c5:18:26:6b:b3:18:7b:93:31:fc:b2:8c:5f:
11:4b:99:7f:9f:79:e7:18:72:81:99:2c:79:18:69:
fb:1d:a4:7a:bb:c2:4d:4b:eb:37:07:f0:2a:f6:a0:
c8:b7:5f:28:59:e1:0a:6b:ea:15:5a:0b:8f:80:32:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:EC:EA:1E:73:9D:29:6C:F8:CF:A2:31:20:DB:CE:F6:24:EA:7F
X509v3 Authority Key Identifier:
keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3233203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.6.0/23
Signature Algorithm: sha256WithRSAEncryption
95:a0:e3:b8:f6:3e:ff:bd:a6:d8:3c:22:72:11:3b:f2:5c:01:
3a:e8:19:93:26:2d:2c:8d:bb:75:63:e8:85:65:48:36:5c:3d:
14:67:95:7a:80:70:08:7f:a8:e3:48:88:48:b0:1d:4d:fa:a9:
26:96:be:a2:d5:a4:4a:66:69:ed:a7:9a:2a:17:ae:09:82:70:
c5:b6:a7:fc:8e:a5:d2:07:b3:a7:e3:80:eb:71:72:13:4e:74:
f1:e9:03:a2:4e:2d:0c:ff:24:c6:6f:72:60:40:39:af:1a:1e:
b0:ff:d2:5e:8a:51:5a:07:34:af:60:51:d4:b7:29:e5:1f:d8:
09:97:00:d0:eb:e6:bb:1e:57:15:24:24:3c:9f:67:00:55:db:
da:b9:60:49:0b:dc:fc:36:df:d2:bf:28:21:32:06:9d:35:28:
61:5e:dd:6c:78:64:4d:1b:b6:99:5b:79:64:46:14:78:1e:73:
51:16:15:5e:2d:d8:5b:95:6d:89:84:96:65:2c:03:af:13:81:
d6:d2:26:82:4c:57:da:39:95:27:9b:78:15:70:29:42:78:4a:
9b:22:ed:2e:b9:46:cf:a0:11:f0:89:ce:9d:69:69:27:b8:ed:
70:f0:01:43:d4:0a:10:f1:4f:5e:69:03:dd:1c:5f:4b:b8:12:
20:44:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:23:15 2025 by rpki-client