Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32322d3232203d3e20323632333736.roa
File: 3137372e3132382e3136382e302f32322d3232203d3e20323632333736.roa (raw, json)
Hash identifier: KfRl1oK4xTePcko+eouwOrXOO31i9Owy714kRty80Gs=
Subject key identifier: 73:98:58:48:BC:3F:66:FF:C7:95:86:E5:DA:24:77:CF:BC:42:7F:BB
Certificate issuer: /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial: 2BE75D0D545646CD1D82D2AE237B49F70EED46B1
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32322d3232203d3e20323632333736.roa
Signing time: Tue 04 Jun 2024 17:33:05 +0000
ROA not before: Tue 04 Jun 2024 17:28:05 +0000
ROA not after: Tue 03 Jun 2025 17:33:05 +0000
asID: 262376
IP address blocks: 177.128.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e7:5d:0d:54:56:46:cd:1d:82:d2:ae:23:7b:49:f7:0e:ed:46:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Validity
Not Before: Jun 4 17:28:05 2024 GMT
Not After : Jun 3 17:33:05 2025 GMT
Subject: CN=73985848BC3F66FFC79586E5DA2477CFBC427FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:9a:df:67:1e:65:66:4c:4a:f5:48:83:ae:
bb:ee:5f:cf:ae:61:a3:bd:f1:f1:c4:dc:0c:a4:07:
66:ab:da:40:40:70:69:6e:80:40:7a:46:dc:ad:d8:
85:9e:94:a8:c3:17:19:bc:08:43:42:dd:5f:b9:90:
87:3a:cf:9c:fc:1e:10:ac:64:8b:73:8c:4e:11:6d:
cc:42:4a:56:73:a2:53:63:f6:19:d4:6d:b1:41:d0:
28:86:21:8c:08:c4:a8:19:ae:ca:08:63:be:20:f3:
32:47:f1:6d:45:a8:87:51:38:78:ed:78:74:fe:94:
58:62:ad:a0:10:51:0e:f7:e2:67:96:17:89:42:89:
2a:f3:4a:ce:06:d0:1a:9e:8e:28:1a:50:40:34:24:
fa:c1:db:e6:b4:56:a3:ab:ae:24:f6:51:80:ec:bc:
95:bb:7e:9c:ec:d4:c3:0f:a5:13:3c:40:da:93:39:
2d:c3:10:e6:25:f6:6b:09:26:ca:12:f9:17:f2:c9:
d0:0b:1c:ed:77:84:cd:91:59:33:16:76:15:e7:79:
17:6b:a9:01:c2:04:e9:e5:d3:cb:d7:78:f7:19:63:
1b:6a:4e:4c:c1:54:13:07:73:f5:db:c6:17:7e:4f:
77:1f:31:f0:59:40:21:67:cf:b7:e8:c3:0c:71:b2:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:98:58:48:BC:3F:66:FF:C7:95:86:E5:DA:24:77:CF:BC:42:7F:BB
X509v3 Authority Key Identifier:
keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3136382e302f32322d3232203d3e20323632333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.168.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d1:85:43:fc:78:2f:dc:81:43:3f:49:13:1a:e8:03:e2:b5:
94:ee:4c:7e:f5:06:88:9e:f9:94:57:ed:48:36:80:d6:03:1b:
9d:e4:fa:4c:c8:69:69:19:fa:d8:19:f5:ed:cf:6b:26:95:1f:
7d:84:fc:e9:af:38:1d:03:f6:51:b6:4b:1c:ba:12:6d:04:c0:
39:5f:db:43:9e:96:9b:72:24:fd:68:59:e9:8b:ef:11:df:a7:
d0:48:3a:4a:6e:01:4e:b2:29:7b:c6:78:88:e2:c0:46:b8:da:
30:14:b2:8e:4b:bb:77:f8:68:f1:de:2b:da:5e:df:79:b5:43:
f8:02:bc:ad:9d:53:b2:ec:e7:4b:85:61:9b:9d:8a:28:3d:86:
24:26:6a:11:57:b9:53:d5:d2:75:fd:d7:6e:a6:68:c2:c6:2d:
41:10:09:40:f2:30:67:d3:1d:60:96:62:9c:b7:f7:bc:64:cf:
d2:f1:bb:a2:b0:0a:f2:99:df:95:2e:1e:d5:c1:7c:05:23:50:
bb:0d:c1:df:a9:89:f6:0a:4d:21:71:f6:51:74:74:a0:d4:b5:
2a:43:b7:3f:bd:78:66:5d:71:16:29:f2:43:56:71:e9:18:a2:
bb:c0:eb:ec:43:c0:f9:88:32:52:b5:1c:1e:da:e0:1e:9b:c1:
d9:19:ee:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:45 2025 by rpki-client