Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31342e302f32342d3234203d3e20323731323531.roa
File: 3137372e38352e31342e302f32342d3234203d3e20323731323531.roa (raw, json)
Hash identifier: fxWZOoiI2UvMSkpwSmIg8KVGMV6xxLOqeek2/E0VSbE=
Subject key identifier: CA:70:8B:76:ED:6D:8C:3E:5E:E2:F6:F3:81:7D:1A:1E:B3:F6:6F:18
Certificate issuer: /CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Certificate serial: 5FB66647D3EBCD56B8CCB6169E82A607A947CB80
Authority key identifier: 28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31342e302f32342d3234203d3e20323731323531.roa
Signing time: Fri 17 Nov 2023 17:36:39 +0000
ROA not before: Fri 17 Nov 2023 17:31:39 +0000
ROA not after: Fri 15 Nov 2024 17:36:39 +0000
asID: 271251
IP address blocks: 177.85.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b6:66:47:d3:eb:cd:56:b8:cc:b6:16:9e:82:a6:07:a9:47:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28AE421F873EEF31551BBDBEE42FCD791F60F68D
Validity
Not Before: Nov 17 17:31:39 2023 GMT
Not After : Nov 15 17:36:39 2024 GMT
Subject: CN=CA708B76ED6D8C3E5EE2F6F3817D1A1EB3F66F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:39:a5:ba:9f:ac:94:15:a8:8e:46:6c:7f:
bf:2e:fb:e3:5e:9e:59:51:6e:e8:18:58:51:58:70:
18:bf:7e:b6:3c:c3:6e:c6:e7:5b:62:41:26:87:7d:
2c:22:8d:ab:bc:7c:38:ca:f2:e3:34:2a:34:a4:27:
d4:32:2f:27:38:e5:d8:dd:4d:1d:d0:ae:fb:9e:56:
de:47:8d:2d:60:48:95:b3:4c:69:e6:8c:e2:8e:ef:
99:e0:2b:94:b6:78:15:cf:4a:c3:86:b1:61:72:b8:
2a:b4:50:aa:85:68:bd:9b:b3:29:25:87:15:13:0a:
62:0d:22:b8:cd:30:c0:5b:c2:be:1b:a5:34:d3:0b:
1a:95:74:fd:57:9c:13:52:ef:b1:2f:b3:06:3d:63:
41:f0:14:14:7e:7a:b8:bc:91:11:fa:fc:61:12:fb:
2f:8d:08:9e:00:3a:f5:aa:be:bd:45:22:34:70:a6:
92:9e:b0:cc:71:af:83:6b:56:28:d2:13:d9:08:c7:
1e:46:84:72:9e:87:66:e7:62:d8:06:6a:8d:f6:3f:
cd:22:82:73:67:7c:d4:ef:d8:ce:6a:8d:69:e0:cb:
8c:a1:15:16:7d:f5:78:0e:d8:84:72:49:c9:a0:3c:
51:20:a3:56:9e:d1:6a:ae:7f:6f:be:3d:c5:de:ea:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:8B:76:ED:6D:8C:3E:5E:E2:F6:F3:81:7D:1A:1E:B3:F6:6F:18
X509v3 Authority Key Identifier:
keyid:28:AE:42:1F:87:3E:EF:31:55:1B:BD:BE:E4:2F:CD:79:1F:60:F6:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28AE421F873EEF31551BBDBEE42FCD791F60F68D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53FFqMk9rG5rqgnC94c7PbjhxAvWUzkdMXgEsT8djdSp/0/3137372e38352e31342e302f32342d3234203d3e20323731323531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.14.0/24
Signature Algorithm: sha256WithRSAEncryption
89:68:26:bf:ae:83:b5:1e:5f:01:d6:fb:8e:96:4c:44:97:08:
03:16:48:dc:dc:bd:40:35:ae:0a:93:14:5e:79:7c:a1:c7:5e:
b0:28:41:1c:eb:42:ad:3f:07:d5:be:7b:de:20:38:3f:f7:e4:
df:4d:a1:84:2b:9d:af:99:f6:cc:5d:f7:cd:f6:77:84:aa:51:
48:03:ef:64:10:02:77:a0:f2:e6:82:95:29:94:7c:6d:2d:92:
49:dd:43:82:b9:6b:7f:62:2f:cb:06:17:8d:f2:b8:e8:ea:da:
e7:57:e5:3f:90:0e:b9:b5:e7:e0:23:59:f5:a5:b2:50:98:a4:
f1:de:df:f0:42:4e:56:21:96:f7:6a:45:13:32:cd:53:b1:dd:
de:1e:d2:c6:c3:b8:c5:50:29:65:bb:b0:f7:50:36:27:ca:69:
ac:24:1b:21:29:e1:49:6f:88:0e:96:88:ad:90:f6:c6:29:43:
b0:a0:6b:8f:5d:81:fd:c5:04:d3:f3:fc:54:f7:c5:d9:67:39:
97:28:d9:ab:9a:aa:9e:4d:d1:04:c4:28:a4:e5:90:c5:3b:af:
7c:c3:3e:23:31:10:ff:7d:ec:f0:62:ab:aa:c5:a3:6a:69:1d:
f0:b7:61:57:30:76:bc:9c:79:66:96:d0:20:6b:72:11:e8:7e:
c3:59:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org