Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
File: 3137302e302e3138382e302f32322d3234203d3e20323634393735.roa (raw, json)
Hash identifier: sTDVuPjke0LVhWrry0U3kNYMC5dp9CgUWlZQghV6+7g=
Subject key identifier: 76:D7:52:8B:5B:8B:01:FE:D9:78:7D:AA:46:9F:9A:2A:78:1D:AD:E0
Certificate issuer: /CN=8755FEBCF039857E1AF03ECE2861AB7D18E1F04C
Certificate serial: 59CDD908FD2F76A9CA21914CE5B838248066D4FE
Authority key identifier: 87:55:FE:BC:F0:39:85:7E:1A:F0:3E:CE:28:61:AB:7D:18:E1:F0:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
Signing time: Sat 09 Mar 2024 15:08:18 +0000
ROA not before: Sat 09 Mar 2024 15:03:18 +0000
ROA not after: Sat 08 Mar 2025 15:08:18 +0000
asID: 264975
IP address blocks: 170.0.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cd:d9:08:fd:2f:76:a9:ca:21:91:4c:e5:b8:38:24:80:66:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8755FEBCF039857E1AF03ECE2861AB7D18E1F04C
Validity
Not Before: Mar 9 15:03:18 2024 GMT
Not After : Mar 8 15:08:18 2025 GMT
Subject: CN=76D7528B5B8B01FED9787DAA469F9A2A781DADE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:5e:a9:76:88:d6:26:9b:e5:a1:1c:38:7e:
d4:5f:1b:07:78:af:52:62:e5:40:05:d0:e0:3d:eb:
ee:62:b7:53:f9:5a:73:1c:2b:60:86:b8:0a:74:2f:
38:f2:ac:d2:77:0b:ac:f1:ed:4d:48:8e:79:77:f7:
bc:62:b8:56:43:cf:ae:42:3c:c8:2b:9d:18:ac:65:
68:06:a4:ca:34:b4:b1:21:1f:f2:68:8b:64:3c:57:
89:86:f9:94:01:2c:6d:e0:eb:b0:01:43:9a:ed:90:
ef:80:b2:ce:d3:47:53:74:09:11:9e:55:e3:79:ef:
4b:ce:94:2b:20:c5:cf:60:7f:40:fb:ba:a3:2b:e4:
d7:40:bc:ad:15:42:d8:a9:6a:ec:b8:82:30:4c:d3:
61:d8:7a:ff:e7:fa:4f:97:91:b6:49:76:b5:06:d1:
39:df:92:eb:e5:81:90:aa:86:c7:4e:47:d5:b0:b7:
69:9c:a3:6e:49:5c:41:7a:8f:94:80:fd:4d:6f:de:
fb:99:91:b2:bf:d6:2e:11:af:a2:76:a8:9f:05:fc:
51:6b:c7:78:0b:78:b6:c2:07:98:1d:61:57:bb:3a:
c6:9f:8b:e4:ab:16:5e:7b:9c:ff:92:09:e0:2b:a4:
2a:72:21:a9:cf:1e:b5:97:2b:e4:69:8e:7c:ff:4e:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:52:8B:5B:8B:01:FE:D9:78:7D:AA:46:9F:9A:2A:78:1D:AD:E0
X509v3 Authority Key Identifier:
keyid:87:55:FE:BC:F0:39:85:7E:1A:F0:3E:CE:28:61:AB:7D:18:E1:F0:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0/8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8755FEBCF039857E1AF03ECE2861AB7D18E1F04C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/0/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.188.0/22
Signature Algorithm: sha256WithRSAEncryption
78:c5:fe:01:71:7b:5c:60:f7:a8:40:28:d6:3a:d9:dc:35:4c:
89:f7:f6:b7:5a:35:cd:ab:66:ba:b8:7d:aa:4d:d3:3f:56:70:
f9:99:b6:ce:d0:e3:b8:09:62:53:e5:bb:74:e3:17:f6:48:83:
05:ec:0c:00:31:1d:6e:dc:38:9b:84:9b:97:6c:c7:18:03:4d:
dc:6c:d9:20:cf:52:5b:cf:94:c6:9d:c6:bc:64:6b:fa:fb:0f:
01:59:78:30:60:1c:a7:b5:99:7c:1b:95:97:b1:85:4b:dd:0f:
67:88:24:53:ec:f9:d6:d3:52:82:5e:d1:48:23:54:3d:ca:43:
bf:5e:63:35:4a:4f:8b:56:1c:d4:db:e6:5b:7c:ac:d7:f8:f5:
86:5f:75:87:8d:62:22:21:0c:69:d4:f8:35:70:60:8d:86:20:
91:de:fe:70:df:af:f9:ac:d0:2b:7f:aa:73:47:69:ca:42:91:
d6:c4:46:f8:dd:fe:c2:ee:88:1b:02:8c:89:eb:cf:bc:b5:1a:
8b:84:f7:35:8d:1d:1a:a6:f7:9c:11:10:0c:de:df:99:dc:37:
ec:f7:66:77:77:fc:a0:9e:4e:35:be:54:32:87:ee:1b:95:5a:
86:cc:a2:0d:56:c1:b3:62:4a:1c:8c:30:7b:5d:c9:a3:c1:e4:
9a:3a:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:14 2025 by rpki-client