Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3234203d3e203532353637.roa
File: 3137372e38362e35362e302f32322d3234203d3e203532353637.roa (raw, json)
Hash identifier: smYYxlvJVbN7IUuEEQSTv6GLke8Nz+3lHa/hhX9aLb8=
Subject key identifier: 50:C6:0E:32:1A:63:E5:CA:9C:FB:B4:3E:2E:34:23:36:95:28:3C:BD
Certificate issuer: /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial: 0AD08BB23F2536C2EE44F3D27B785D4A2B5E13B9
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3234203d3e203532353637.roa
Signing time: Fri 31 Mar 2023 16:32:44 +0000
ROA not before: Fri 31 Mar 2023 16:27:44 +0000
ROA not after: Fri 29 Mar 2024 16:32:44 +0000
asID: 52567
IP address blocks: 177.86.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d0:8b:b2:3f:25:36:c2:ee:44:f3:d2:7b:78:5d:4a:2b:5e:13:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Validity
Not Before: Mar 31 16:27:44 2023 GMT
Not After : Mar 29 16:32:44 2024 GMT
Subject: CN=50C60E321A63E5CA9CFBB43E2E34233695283CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:5b:f6:8a:89:45:2a:10:34:5b:0a:37:1c:
e0:22:fe:7e:aa:74:48:54:cb:7e:f7:4c:5d:aa:4f:
5c:37:fe:03:2b:72:d3:7d:b1:51:66:ca:c1:47:e3:
20:81:9a:83:18:58:e7:88:c7:ef:65:3d:c4:03:05:
91:51:69:84:df:94:22:a1:62:22:09:a9:c9:31:12:
e5:1b:89:89:87:c6:5e:cc:66:56:2a:d1:26:ad:24:
e6:02:eb:58:7e:be:3a:94:d4:75:53:6f:2e:da:c0:
d2:82:88:dd:42:c2:23:85:ac:31:ac:74:e7:05:c5:
b8:d1:c2:bc:93:07:89:84:41:e1:7e:36:82:5c:54:
85:e7:ea:fc:bc:0a:f8:37:e9:10:53:6c:b7:a2:b2:
ed:63:9e:1e:82:5f:25:ca:db:59:2f:6e:77:a6:04:
e2:c9:a5:69:c6:75:56:fa:73:d9:6a:c6:0b:ef:49:
39:77:7d:b6:3f:6f:0b:77:33:dd:38:f7:95:5a:9f:
4b:5d:ed:2e:22:54:20:5b:ab:66:d5:27:3e:8a:bc:
ac:c4:cf:05:ad:4f:5a:71:e7:9e:3e:09:ad:7f:0a:
75:b2:62:b8:d7:bd:36:99:36:97:2e:d2:47:49:64:
01:14:1a:c1:54:8c:5a:ef:3b:17:05:09:21:b8:ff:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:0E:32:1A:63:E5:CA:9C:FB:B4:3E:2E:34:23:36:95:28:3C:BD
X509v3 Authority Key Identifier:
keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3234203d3e203532353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.56.0/22
Signature Algorithm: sha256WithRSAEncryption
24:59:be:74:18:00:21:1c:72:8d:87:fe:48:ad:f9:f7:7d:e8:
ec:3d:0d:0a:4b:30:32:de:22:8b:1e:c5:0d:e4:43:ab:c1:5b:
69:c5:13:6c:df:1f:3b:b5:1d:03:34:fd:b8:e7:e2:57:7e:c1:
d7:76:ad:be:20:29:cc:4d:be:9f:85:e3:9a:e8:a6:65:1e:63:
20:0c:9c:a5:d6:9e:55:e5:27:27:41:a4:05:80:33:e3:c1:4b:
9a:cc:61:f3:f5:19:39:1c:26:42:49:6f:87:86:fe:d6:17:d9:
ee:87:1b:e8:db:f8:52:62:12:71:84:ac:56:cf:e3:2a:64:6e:
88:c2:4e:9c:95:e3:77:4b:9c:fe:3f:d7:99:6c:14:ab:08:ab:
ca:0e:0e:29:9e:2b:ab:4a:18:be:ad:46:81:0e:0c:26:cf:a0:
6d:e3:10:78:25:20:51:e7:be:a2:a4:1c:e0:c5:b5:6a:f2:1b:
1c:55:c8:5f:b4:f6:83:d6:55:64:22:50:c2:81:8f:93:45:65:
a4:69:31:e4:33:be:4e:eb:a7:73:cb:76:a7:bc:b0:97:d5:a7:
be:85:79:fe:89:d0:1e:81:d4:43:5d:89:da:cc:18:19:7e:f1:
eb:a7:22:97:56:0e:63:6d:92:83:7f:69:41:91:27:0c:23:ad:
ec:bb:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org