Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3137302e3135302e302e302f32322d3235203d3e20323632363037.roa
File: 3137302e3135302e302e302f32322d3235203d3e20323632363037.roa (raw, json)
Hash identifier: JnYr8YPCE3xT5noJ8pD+mvaSoO6C/RW8EZq0CO3o2RA=
Subject key identifier: 74:FC:1D:07:8F:89:48:0C:43:16:A5:13:B3:D4:70:50:51:A9:70:F8
Certificate issuer: /CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Certificate serial: 5BC80E1F8563E688AFDBCC41EE89F9C0B8389B56
Authority key identifier: 70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3137302e3135302e302e302f32322d3235203d3e20323632363037.roa
Signing time: Mon 21 Nov 2022 16:41:42 +0000
ROA not before: Mon 21 Nov 2022 16:36:42 +0000
ROA not after: Mon 20 Nov 2023 16:41:42 +0000
asID: 262607
IP address blocks: 170.150.0.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c8:0e:1f:85:63:e6:88:af:db:cc:41:ee:89:f9:c0:b8:38:9b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70B3CABC94E867F7B72A9C99774813CAC6A4784D
Validity
Not Before: Nov 21 16:36:42 2022 GMT
Not After : Nov 20 16:41:42 2023 GMT
Subject: CN=74FC1D078F89480C4316A513B3D4705051A970F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:09:26:32:40:58:9c:37:a5:a6:6d:a1:54:
f3:83:f4:4a:cd:8a:65:bd:42:90:e5:c1:42:96:f6:
71:22:34:67:f0:3b:3b:9d:d4:ea:fd:65:a7:39:19:
a1:24:aa:2c:7b:a7:11:5b:6a:2f:83:b4:e5:a6:84:
79:bb:c8:bd:c1:b1:5b:f6:7b:f9:c0:79:94:f1:d8:
87:f8:49:18:41:1b:5d:df:6f:4b:d7:6f:96:f9:21:
28:b3:87:c7:a1:95:db:03:f5:e9:8d:0e:d3:14:b7:
5f:bf:2e:d0:1e:06:69:48:47:9c:0e:a7:33:ce:20:
01:32:9c:31:b7:df:d7:4a:56:b6:9f:5f:11:61:56:
ad:df:ee:86:3b:51:d6:0c:5c:cb:60:a8:51:fe:18:
18:ab:08:5b:5c:3f:30:c1:ce:ca:5e:7f:b1:ed:84:
08:57:58:7b:4f:ef:7d:48:13:d0:ac:f0:8b:0c:60:
98:0f:33:a9:b9:b1:e0:8d:ac:90:ab:14:7e:1f:62:
2e:95:fa:b1:90:e7:a6:2b:e8:bd:54:92:dd:a7:0a:
15:05:06:48:6e:26:a3:b2:f7:11:15:c7:b3:6f:f5:
97:f7:fe:b6:81:d7:bb:be:61:18:d3:e2:1e:b7:b4:
e8:d0:82:36:a0:38:d6:c0:cf:52:7a:8d:84:8b:9d:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:1D:07:8F:89:48:0C:43:16:A5:13:B3:D4:70:50:51:A9:70:F8
X509v3 Authority Key Identifier:
keyid:70:B3:CA:BC:94:E8:67:F7:B7:2A:9C:99:77:48:13:CA:C6:A4:78:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/70B3CABC94E867F7B72A9C99774813CAC6A4784D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70B3CABC94E867F7B72A9C99774813CAC6A4784D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/1/3137302e3135302e302e302f32322d3235203d3e20323632363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.0.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f9:08:1b:13:66:5b:e4:b8:12:ec:df:ad:91:8c:86:38:32:
56:79:de:90:2e:68:07:52:0d:ea:b6:f6:50:19:87:1d:21:cc:
c8:87:6d:65:cc:a6:b0:ec:83:c9:bd:60:7d:c2:4b:a9:88:16:
dc:b9:81:3e:1a:f0:c3:da:da:3d:dc:5f:ec:57:f5:37:3e:22:
79:ee:ca:69:f8:6d:a7:5a:ec:39:14:a1:3c:ae:c2:47:9f:e2:
6f:7c:cc:f2:e8:18:6c:36:e7:62:8e:6a:ec:48:45:1e:d0:71:
53:7c:89:e7:31:57:e4:2b:c0:7a:d4:d9:bf:4e:ee:ce:e6:08:
53:56:62:14:78:48:81:8b:56:59:ed:ae:e0:4c:c5:6c:2b:1d:
c0:2f:66:4f:8a:e2:00:7e:79:17:08:0e:fd:30:e9:45:76:d3:
4a:20:a5:25:71:4e:bb:1c:d1:ba:8d:99:1a:22:c4:91:6c:fd:
c5:55:82:80:d8:c5:ea:35:3d:69:0e:72:b3:b7:53:b7:11:1e:
3a:95:1e:29:6f:e7:a2:59:96:2c:f4:b0:3f:70:62:dc:d5:35:
e6:61:b0:05:d0:d9:33:85:46:e6:0a:01:e2:41:00:47:43:5d:
11:36:41:99:41:23:88:66:4a:38:73:bc:e8:26:4d:3a:a6:0f:
96:d7:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org