Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
File: 3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier: qGd70YaOf07NHq/xQinNuhnhjFPOYd1F9getpOsyDpY=
Subject key identifier: 3B:AA:82:03:9D:96:48:C9:6D:32:EC:73:0C:31:6E:37:32:33:23:22
Certificate issuer: /CN=670A20A98738BBE9772713B95005BD85F6B31348
Certificate serial: 3C68CA5009ED8308281A4B572674F08D272F5239
Authority key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
Signing time: Wed 03 Jan 2024 12:10:32 +0000
ROA not before: Wed 03 Jan 2024 12:05:32 +0000
ROA not after: Wed 01 Jan 2025 12:10:32 +0000
asID: 264022
IP address blocks: 170.245.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:68:ca:50:09:ed:83:08:28:1a:4b:57:26:74:f0:8d:27:2f:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670A20A98738BBE9772713B95005BD85F6B31348
Validity
Not Before: Jan 3 12:05:32 2024 GMT
Not After : Jan 1 12:10:32 2025 GMT
Subject: CN=3BAA82039D9648C96D32EC730C316E3732332322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:76:80:62:5c:ae:ac:12:50:7e:8c:f1:e8:
90:ad:df:31:be:8f:9e:85:29:bc:f5:b9:a4:eb:59:
cd:c0:9c:9f:f0:36:8c:e2:90:35:44:11:55:5c:35:
65:6b:a0:cf:f9:62:62:35:1a:62:3f:1b:85:de:70:
76:fa:41:00:f5:e1:71:37:4c:24:64:c2:06:29:06:
44:c0:4b:27:9a:b9:b6:30:fb:f7:12:3f:7b:af:82:
a3:69:83:64:2a:63:33:3f:bc:97:9b:a2:90:47:08:
b0:b5:5f:ed:f0:20:fb:cf:42:4c:9c:48:85:80:78:
47:68:51:34:c3:16:69:25:11:fe:22:e2:5a:7f:7c:
39:5a:ab:ef:1b:d9:57:8b:fd:b9:cc:fb:3f:32:1d:
d9:36:7d:5f:6f:1b:cd:af:cd:12:dd:d6:34:7c:9b:
e2:30:90:5c:0d:81:c8:30:db:5a:27:31:86:c5:83:
1a:cf:b1:95:53:89:09:99:c4:9b:27:3a:4c:3c:63:
67:f4:8a:fd:8c:ba:f3:a6:fd:9f:93:c3:84:d9:6a:
e9:df:45:1e:3e:aa:e2:96:b5:4a:db:75:ae:ef:e4:
77:db:a0:86:4f:f3:ea:23:b2:62:70:32:43:c7:81:
7a:91:b2:d1:71:77:a1:09:53:a8:ea:de:31:59:af:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:82:03:9D:96:48:C9:6D:32:EC:73:0C:31:6E:37:32:33:23:22
X509v3 Authority Key Identifier:
keyid:67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3137302e3234352e3137322e302f32342d3234203d3e20323634303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b4:39:d6:20:87:9b:9a:7c:ac:c0:0e:f1:1f:29:4e:e1:2d:
64:ca:41:64:ab:c7:17:e5:a4:60:c3:8b:6f:d8:64:b2:e6:c4:
8b:21:f8:77:15:b5:64:20:1b:c0:8b:d7:bc:f5:99:eb:4e:35:
03:c4:66:fa:58:8b:c2:cc:84:65:c7:d1:5e:83:f3:0f:f3:81:
c7:f7:73:e3:20:3d:89:6c:78:c9:70:19:4a:73:89:9b:6c:62:
5c:dc:96:ec:e5:93:00:12:fa:e4:0e:66:88:21:44:2c:95:77:
84:55:37:be:8b:8f:62:fa:bc:1a:4e:ac:2d:75:12:7c:90:29:
57:91:f0:07:d5:e5:76:b4:01:64:21:1e:5c:ad:5f:63:0e:80:
1a:4c:96:48:10:89:12:cd:4b:0a:25:19:3e:43:dd:eb:e7:47:
49:78:05:ba:ed:78:d1:ff:47:af:f2:aa:c0:3c:ec:c5:cb:31:
24:44:73:2b:61:83:1b:c6:74:fa:1c:42:fc:d2:ac:e0:d5:4e:
0d:49:9d:a8:b3:58:bb:1f:8c:a5:3e:b6:e8:1b:96:1c:eb:cd:
65:4c:06:70:79:0d:3e:1b:2a:37:b9:6c:ad:e6:ae:76:e8:1e:
04:9a:b4:01:b8:52:58:31:d0:ca:fa:7a:17:06:df:c3:7d:fc:
ce:65:43:c7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPGjKUAntgwgoGktXJnTwjScvUjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcwQTIwQTk4NzM4QkJFOTc3MjcxM0I5NTAwNUJEODVG
NkIzMTM0ODAeFw0yNDAxMDMxMjA1MzJaFw0yNTAxMDExMjEwMzJaMDMxMTAvBgNV
BAMTKDNCQUE4MjAzOUQ5NjQ4Qzk2RDMyRUM3MzBDMzE2RTM3MzIzMzIzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuonaAYlyurBJQfozx6JCt3zG+
j56FKbz1uaTrWc3AnJ/wNozikDVEEVVcNWVroM/5YmI1GmI/G4XecHb6QQD14XE3
TCRkwgYpBkTASyeaubYw+/cSP3uvgqNpg2QqYzM/vJebopBHCLC1X+3wIPvPQkyc
SIWAeEdoUTTDFmklEf4i4lp/fDlaq+8b2VeL/bnM+z8yHdk2fV9vG82vzRLd1jR8
m+IwkFwNgcgw21onMYbFgxrPsZVTiQmZxJsnOkw8Y2f0iv2MuvOm/Z+Tw4TZaunf
RR4+quKWtUrbda7v5HfboIZP8+ojsmJwMkPHgXqRstFxd6EJU6jq3jFZr6hXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUO6qCA52WSMltMuxzDDFuNzIzIyIwHwYDVR0j
BBgwFoAUZwogqYc4u+l3JxO5UAW9hfazE0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJXTHVYd2N3N0N5Yzh2WGh2YXllM0RHNHJhZkxjZ0xQOVFkQ2UzWXFN
ZHEvMC82NzBBMjBBOTg3MzhCQkU5NzcyNzEzQjk1MDA1QkQ4NUY2QjMxMzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3MEEyMEE5ODczOEJCRTk3
NzI3MTNCOTUwMDVCRDg1RjZCMzEzNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyV0x1WHdjdzdDeWM4dlhodmF5ZTNERzRyYWZMY2dMUDlRZENlM1lxTWRxLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1rDANBgkqhkiG9w0BAQsFAAOCAQEAqLQ5
1iCHm5p8rMAO8R8pTuEtZMpBZKvHF+WkYMOLb9hksubEiyH4dxW1ZCAbwIvXvPWZ
6041A8Rm+liLwsyEZcfRXoPzD/OBx/dz4yA9iWx4yXAZSnOJm2xiXNyW7OWTABL6
5A5miCFELJV3hFU3vouPYvq8Gk6sLXUSfJApV5HwB9XldrQBZCEeXK1fYw6AGkyW
SBCJEs1LCiUZPkPd6+dHSXgFuu140f9Hr/KqwDzsxcsxJERzK2GDG8Z0+hxC/NKs
4NVODUmdqLNYux+MpT626BuWHOvNZUwGcHkNPhsqN7lsreaudugeBJq0AbhSWDHQ
yvp6Fwbfw338zmVDxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org