Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
File: 3137372e38352e35362e302f32312d3234203d3e203532373337.roa (raw, json)
Hash identifier: stmksk1OiUSkqkDCT3IYqjCUWiQqczrOLsKaVF+mWCE=
Subject key identifier: 2E:41:21:CC:D7:83:D5:D6:DF:0C:B6:28:C2:38:AC:8B:93:69:1A:25
Certificate issuer: /CN=72C8B4B193828EB61655C0B82B9A43750F59074A
Certificate serial: 20AE5581622D8C160B2A318A71DAC727D288B7F5
Authority key identifier: 72:C8:B4:B1:93:82:8E:B6:16:55:C0:B8:2B:9A:43:75:0F:59:07:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72C8B4B193828EB61655C0B82B9A43750F59074A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
Signing time: Tue 12 Mar 2024 17:06:58 +0000
ROA not before: Tue 12 Mar 2024 17:01:58 +0000
ROA not after: Tue 11 Mar 2025 17:06:58 +0000
asID: 52737
IP address blocks: 177.85.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ae:55:81:62:2d:8c:16:0b:2a:31:8a:71:da:c7:27:d2:88:b7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C8B4B193828EB61655C0B82B9A43750F59074A
Validity
Not Before: Mar 12 17:01:58 2024 GMT
Not After : Mar 11 17:06:58 2025 GMT
Subject: CN=2E4121CCD783D5D6DF0CB628C238AC8B93691A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:8c:ab:7e:ec:81:7b:1b:77:2c:ca:33:62:
20:bd:3d:b5:0f:ca:3c:8d:e6:e1:d5:87:8d:d9:d2:
dd:44:b9:37:4d:b4:47:03:a0:0c:86:15:f7:5a:31:
c2:24:8f:ab:bc:b1:76:48:10:8b:66:cc:16:8f:9a:
ad:d2:bc:11:d6:17:83:49:fc:57:c7:39:33:76:5e:
af:27:55:57:94:40:d1:fb:3d:2a:10:11:5e:27:cb:
db:c4:4a:29:90:69:2f:6a:eb:32:ea:8b:35:ce:4e:
8f:5c:47:23:82:bb:f0:f7:15:95:7c:66:ca:84:61:
3c:28:e4:16:8f:7c:ac:e2:35:33:af:cb:73:22:3e:
1f:2c:36:a1:f7:81:4a:77:99:95:8b:91:33:35:6f:
da:f1:cd:da:e4:bc:14:84:3b:d5:c9:3b:96:d0:37:
af:af:e2:ce:34:90:88:f2:2d:5b:7c:ba:c1:df:4c:
f5:2a:ae:7d:ae:5f:ce:91:09:b9:fd:5f:c2:16:3f:
57:f8:23:08:ca:f1:42:ff:de:4f:50:57:4e:32:e5:
3b:6d:c6:ea:3a:7c:d2:09:c9:0f:bb:10:e4:20:5e:
da:51:c1:fc:7f:90:13:ba:b2:d8:39:2a:5a:5c:e4:
9b:95:89:87:1a:e5:9d:25:11:1b:be:cf:9b:60:ab:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:21:CC:D7:83:D5:D6:DF:0C:B6:28:C2:38:AC:8B:93:69:1A:25
X509v3 Authority Key Identifier:
keyid:72:C8:B4:B1:93:82:8E:B6:16:55:C0:B8:2B:9A:43:75:0F:59:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/72C8B4B193828EB61655C0B82B9A43750F59074A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72C8B4B193828EB61655C0B82B9A43750F59074A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.56.0/21
Signature Algorithm: sha256WithRSAEncryption
d2:94:bf:54:61:66:df:17:eb:1a:81:6f:8b:b3:1d:e0:7f:17:
47:1e:1e:8f:c0:62:0a:90:78:d9:79:36:7c:2f:c3:d4:62:36:
56:eb:6b:20:87:ce:c9:b7:cb:02:36:37:22:ae:92:9d:69:8e:
c4:2d:65:b9:2b:33:c4:19:74:a1:17:a4:20:88:6c:a6:87:1c:
21:47:40:30:a6:86:aa:cb:c3:94:31:f0:42:1f:4f:67:ed:30:
49:ff:02:15:12:e0:18:ff:5f:e5:9a:fe:72:fd:1b:ff:a5:02:
d4:38:cf:88:03:54:ed:0f:ff:8f:22:49:3d:38:38:50:79:c7:
ef:68:43:31:96:16:05:cc:2a:48:0c:c9:74:77:49:33:32:d8:
c9:f7:7a:bf:7b:c6:ce:6a:9d:aa:71:b5:41:51:bb:5b:b0:d4:
98:d1:91:07:29:01:7d:cf:26:8b:84:3f:99:37:b3:2a:3e:d9:
c1:30:15:95:ae:44:b2:61:ef:e5:59:c9:bf:3e:f3:a8:33:86:
fa:b4:96:c1:61:bb:3f:8c:9a:27:29:c3:da:d1:b2:db:5f:0d:
60:27:74:ae:f1:bf:8f:ea:db:b6:e4:3a:69:37:7e:05:f5:a1:
3d:6a:cb:43:c3:ad:d4:35:9e:e7:17:a5:ac:20:53:69:11:2a:
44:3b:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org