Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3234203d3e20323636333039.roa
File: 3137302e37392e3137362e302f32322d3234203d3e20323636333039.roa (raw, json)
Hash identifier: DbSuIMK8cBQpl6521724nMg5uaVh1YFRwrAOaygD3Ow=
Subject key identifier: B7:E7:DE:FA:27:85:B4:67:F6:0D:07:A6:E7:C6:F5:49:9E:16:9E:CC
Certificate issuer: /CN=45D754D10F29B9A2487478D837839CB8E8A62D47
Certificate serial: 0699AFC0F629141B1D39F993DAA794A1CAD9DC0C
Authority key identifier: 45:D7:54:D1:0F:29:B9:A2:48:74:78:D8:37:83:9C:B8:E8:A6:2D:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45D754D10F29B9A2487478D837839CB8E8A62D47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3234203d3e20323636333039.roa
Signing time: Tue 05 Dec 2023 21:33:04 +0000
ROA not before: Tue 05 Dec 2023 21:28:04 +0000
ROA not after: Tue 03 Dec 2024 21:33:04 +0000
asID: 266309
IP address blocks: 170.79.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:99:af:c0:f6:29:14:1b:1d:39:f9:93:da:a7:94:a1:ca:d9:dc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D754D10F29B9A2487478D837839CB8E8A62D47
Validity
Not Before: Dec 5 21:28:04 2023 GMT
Not After : Dec 3 21:33:04 2024 GMT
Subject: CN=B7E7DEFA2785B467F60D07A6E7C6F5499E169ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:a9:dc:15:41:cc:1c:6c:3a:c9:ae:8c:ae:
b0:63:6e:ca:52:36:c1:55:b4:45:59:be:77:ff:a5:
74:6e:e1:78:d5:31:7a:07:d6:7b:55:73:6d:e6:d3:
f0:de:a0:16:07:70:06:a6:6e:f9:30:7b:d6:3b:b8:
de:c9:e3:57:ad:4c:e4:c1:e8:72:86:ce:51:71:b6:
b8:7c:b8:2f:c2:b9:9d:8f:f7:af:09:99:d6:47:fe:
2e:25:52:e9:ea:7e:86:f1:69:7a:cd:55:aa:29:f1:
62:6f:08:e6:14:de:6c:6d:93:16:1b:5e:7c:03:89:
9f:b5:33:68:16:f2:2a:17:56:48:08:ae:8f:69:e4:
de:2f:2c:2e:e8:21:b6:7e:2e:e4:cf:d3:f4:a5:b6:
0b:56:58:e9:b9:90:45:26:7e:74:d2:55:55:76:d4:
21:99:48:65:85:8c:e0:26:cf:dd:97:62:22:3e:fc:
ac:d4:85:82:27:27:3c:0c:28:bf:49:19:85:82:7e:
3d:9b:96:21:cb:35:f7:24:f1:04:c9:7f:37:47:d1:
5b:ed:b4:bf:d5:35:c6:50:bb:9f:f4:76:23:f6:c6:
4c:86:ef:7e:13:7d:fa:91:b6:32:00:21:74:73:32:
6f:18:01:3f:a6:9e:53:56:1a:4a:8d:81:0e:d5:64:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:DE:FA:27:85:B4:67:F6:0D:07:A6:E7:C6:F5:49:9E:16:9E:CC
X509v3 Authority Key Identifier:
keyid:45:D7:54:D1:0F:29:B9:A2:48:74:78:D8:37:83:9C:B8:E8:A6:2D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/45D754D10F29B9A2487478D837839CB8E8A62D47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45D754D10F29B9A2487478D837839CB8E8A62D47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3234203d3e20323636333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:ad:67:85:ce:38:d7:cf:5d:e0:7a:39:c4:f5:07:8a:f1:0a:
73:56:23:ec:74:ef:cc:3b:16:b5:d8:da:e5:ac:f5:02:19:cd:
e5:78:80:47:10:6e:e3:b9:e3:d9:98:cf:8b:81:98:d3:e4:8e:
73:ca:72:3c:e5:d1:e3:74:e0:12:65:c7:d9:fa:b7:2d:aa:c8:
c3:f9:0e:19:90:dd:f8:a4:ec:9c:e2:14:12:c6:42:07:27:23:
18:fe:54:93:68:f7:56:b8:be:13:ab:bc:ed:a4:49:01:9c:58:
3e:c8:b2:1f:88:f7:f5:c7:36:70:f1:a1:3c:9e:ec:c1:d0:16:
2f:24:96:69:51:b3:fd:fb:4c:fb:a1:ea:9b:d4:35:50:cf:19:
e1:e2:46:43:ad:aa:e6:04:81:b6:3a:bd:e5:d2:22:d0:a1:26:
c0:88:da:31:3b:be:fb:3e:18:dc:07:9e:c8:01:51:c3:17:77:
33:04:dc:fa:1f:e0:a2:af:c0:48:1e:3d:86:88:80:05:15:37:
86:b2:3c:3e:21:c0:4b:e2:a6:0a:c9:96:17:e7:f7:c9:63:5d:
bf:83:63:e4:71:15:1a:21:ed:7e:0e:34:70:a7:34:de:3a:17:
05:bf:49:1c:4a:42:16:6a:16:3c:02:80:95:eb:a1:5e:e0:11:
9a:a2:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org