Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e38332e37322e302f32322d3234203d3e20323632393037.roa
File: 3137302e38332e37322e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: ZZMH4vbCGOkwZ17T0CYeAdU4qb0rtEBj3mTMqGMUpxA=
Subject key identifier: E3:59:0E:59:59:74:64:BA:CF:F2:47:76:F4:19:55:D4:30:D4:00:72
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 295614ECE0F360FF4E17EA6C134970EC73F76357
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e38332e37322e302f32322d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:21 +0000
ROA not before: Sat 03 Feb 2024 12:48:21 +0000
ROA not after: Sat 01 Feb 2025 12:53:21 +0000
asID: 262907
IP address blocks: 170.83.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:56:14:ec:e0:f3:60:ff:4e:17:ea:6c:13:49:70:ec:73:f7:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:21 2024 GMT
Not After : Feb 1 12:53:21 2025 GMT
Subject: CN=E3590E59597464BACFF24776F41955D430D40072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:5d:07:97:7f:c4:44:63:d4:56:31:d0:98:
f3:d9:73:9e:ac:e3:7d:38:40:9b:44:88:55:0a:55:
b2:4f:e0:e9:56:3a:a8:cb:8f:ff:2a:4f:df:5a:71:
92:32:50:ef:aa:27:25:ea:fb:c2:b0:41:ae:e9:2f:
b2:b2:75:1b:a2:1d:c2:12:ee:87:a9:ff:bf:8d:17:
1b:92:95:46:5a:c1:f0:0d:5b:d0:0e:e9:ac:f1:7d:
ea:7a:bb:ec:70:0a:23:97:56:da:89:88:46:06:07:
b5:d5:63:88:29:b4:fa:1b:5c:56:77:34:12:07:43:
de:a0:88:ef:c7:d8:ac:cc:f5:0b:10:19:08:29:4d:
2f:53:c1:7d:c6:75:d3:e4:a0:61:6f:7f:ba:fc:75:
f5:da:8e:97:1b:6c:fc:4c:24:c3:f6:29:3e:24:9b:
a6:99:13:64:63:d0:22:0d:5e:91:26:b5:0a:98:f0:
32:c5:a2:d5:ef:0d:0d:2f:90:3d:9d:f8:c6:9a:9c:
97:f1:dc:18:f0:5f:ac:5c:e7:d8:48:1a:da:1a:30:
25:bd:05:2e:05:46:99:4a:1e:f8:46:c6:de:d9:92:
ff:d0:5f:a9:fa:00:e4:3e:e9:a7:ff:44:90:dd:24:
95:84:9e:ad:1a:af:b8:c0:03:ff:4f:24:85:11:87:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:0E:59:59:74:64:BA:CF:F2:47:76:F4:19:55:D4:30:D4:00:72
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137302e38332e37322e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.72.0/22
Signature Algorithm: sha256WithRSAEncryption
12:c2:e2:48:0f:3c:8f:e4:ba:40:35:3d:3e:bc:60:42:c8:10:
89:03:5e:2f:17:30:bc:70:60:2a:f8:d7:fd:ca:62:66:8b:68:
51:17:3e:fc:77:76:d1:fb:65:05:32:be:79:e7:81:3d:0b:3f:
47:f1:ae:1a:41:d4:30:0c:44:99:99:04:e3:e4:2a:db:b7:65:
5d:20:ca:2f:28:a8:1a:f5:0b:50:28:c5:6a:4e:84:05:4c:51:
b2:9e:31:24:a2:f9:59:00:b5:b2:79:48:64:f7:c0:6f:73:05:
f7:58:c3:f1:96:23:78:8e:0f:3b:0b:01:ee:78:e5:f1:c8:0b:
fe:68:93:c9:28:09:ab:dd:e2:87:4b:bb:fe:91:b2:28:03:f6:
68:2a:ff:b0:8b:ae:68:c2:05:1b:18:05:d2:64:7e:6f:94:96:
21:cf:ae:3c:db:50:78:e1:ae:f1:6c:fa:52:d5:e2:3f:e5:8a:
81:65:b8:93:21:ad:df:7d:de:23:15:9a:71:fc:d2:7a:b6:60:
11:7c:8a:a4:bf:ac:dd:4f:2c:5e:17:09:ed:85:8d:66:28:3b:
7a:8d:d9:e7:d7:08:69:6d:ac:93:e1:5a:41:1a:37:54:ca:63:
f8:55:67:d3:d1:7c:f6:cc:db:32:99:8a:c3:6b:55:a3:75:84:
54:db:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org