Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
File: 3137372e37312e33322e302f32302d3234203d3e203533303232.roa (raw, json)
Hash identifier: pDDqLuBaNDRtmHZO8MaMSq2l3KmHmEb/a6upDc4J8Sg=
Subject key identifier: B9:8A:C5:92:02:A2:B4:AF:B0:60:04:9E:97:1A:42:01:B2:E5:F0:16
Certificate issuer: /CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
Certificate serial: 4352B327FED70FEDBF7E1C61485CAA94FA3C553F
Authority key identifier: AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
Signing time: Tue 19 Mar 2024 14:09:11 +0000
ROA not before: Tue 19 Mar 2024 14:04:11 +0000
ROA not after: Tue 18 Mar 2025 14:09:11 +0000
asID: 53022
IP address blocks: 177.71.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:52:b3:27:fe:d7:0f:ed:bf:7e:1c:61:48:5c:aa:94:fa:3c:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
Validity
Not Before: Mar 19 14:04:11 2024 GMT
Not After : Mar 18 14:09:11 2025 GMT
Subject: CN=B98AC59202A2B4AFB060049E971A4201B2E5F016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:94:56:57:e4:8d:8d:c8:3d:4b:1c:42:fa:
51:f8:f9:45:06:e5:39:e2:45:c2:b9:25:9a:e2:87:
80:4a:76:2c:b2:45:25:10:b1:36:75:5e:6c:be:7a:
ef:58:4a:84:64:58:b5:13:d4:81:51:16:8e:6f:34:
a4:82:f5:c5:36:aa:f6:23:6f:23:65:e6:8e:b2:15:
9f:2b:d6:20:01:25:8d:62:12:85:b4:90:5a:fd:fe:
d6:e0:c6:1a:b5:aa:40:cc:b9:57:73:aa:62:1c:c7:
ad:ef:b9:47:aa:92:bf:35:b6:ae:24:1f:40:b6:a2:
2b:65:9b:0f:4e:a9:3b:34:72:9c:90:36:a7:37:c4:
1c:23:cb:00:49:bb:0e:60:f6:75:88:35:0a:39:ac:
5f:2f:53:77:df:7a:98:bf:cb:47:77:d4:fc:9c:3d:
42:fd:49:ad:b9:76:66:05:56:17:89:54:96:f0:24:
7a:44:9e:db:7b:5e:c0:00:5b:9a:2d:e6:83:d5:1a:
3e:0a:95:4b:02:ee:84:84:d1:73:6b:4f:d1:0b:e2:
a0:aa:54:39:7c:86:92:a0:40:77:28:0a:c4:bc:de:
0b:d7:e1:d6:4c:69:9a:5a:c2:63:ad:c7:1d:6d:5a:
09:79:d6:52:fe:80:e8:7f:af:eb:6c:7a:ad:e1:72:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8A:C5:92:02:A2:B4:AF:B0:60:04:9E:97:1A:42:01:B2:E5:F0:16
X509v3 Authority Key Identifier:
keyid:AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.71.32.0/20
Signature Algorithm: sha256WithRSAEncryption
15:86:a3:5a:b6:d1:e0:2f:ba:55:2e:3f:32:c1:ca:fe:e0:c5:
75:47:74:d4:81:51:2a:1a:ab:3d:a8:f5:70:26:d5:15:b4:20:
09:9d:53:74:06:e6:64:9c:f4:d0:91:8a:84:b4:34:1f:d6:c1:
c7:65:23:5c:52:35:f1:9a:ac:b4:70:2f:4d:6f:dc:73:64:8e:
df:2f:47:80:13:be:58:ed:ad:88:d3:38:27:77:08:6e:da:86:
cb:da:f7:67:0e:4a:e5:4f:1b:6f:05:01:83:5a:b2:4a:5f:e2:
e4:6c:38:f2:dd:02:4a:31:a5:a6:7b:4c:79:90:82:5e:a7:be:
c6:86:1c:ab:29:3c:af:14:f9:a2:38:9d:b4:55:ba:c0:7f:96:
91:77:af:d8:68:74:95:f6:38:96:32:79:53:fc:c2:61:36:00:
8e:3d:34:62:da:c9:a0:a3:c9:bc:53:d2:14:e1:cc:1c:5a:0c:
79:e4:2e:e6:f7:fb:06:90:2e:1c:bd:83:03:13:20:4e:87:39:
ee:9c:93:8c:92:3d:27:cb:10:7d:e1:46:3e:b9:1c:70:bc:be:
39:52:d1:03:c7:91:c2:e6:f4:16:b3:5a:bf:72:30:df:5e:49:
22:26:13:ad:1a:f7:d5:30:4d:63:e8:7e:fc:47:04:20:bb:05:
40:ea:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org