Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
File: 3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier: Hj24bC3aJxxeqICxJaXK5iMTl8PtvP6YOG+hIii7gLk=
Subject key identifier: 84:E7:1C:E9:7E:FF:6A:50:9D:C8:4B:52:D8:93:0B:DF:A6:5B:C0:1A
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 47956E7D28FEAFE5BB1DA7D05C424AB13D399811
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
Signing time: Thu 31 Oct 2024 17:07:08 +0000
ROA not before: Thu 31 Oct 2024 17:02:08 +0000
ROA not after: Thu 30 Oct 2025 17:07:08 +0000
asID: 264299
IP address blocks: 170.254.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:95:6e:7d:28:fe:af:e5:bb:1d:a7:d0:5c:42:4a:b1:3d:39:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:02:08 2024 GMT
Not After : Oct 30 17:07:08 2025 GMT
Subject: CN=84E71CE97EFF6A509DC84B52D8930BDFA65BC01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:90:03:c2:6b:ea:01:28:be:89:7a:f6:71:
2e:08:43:ec:18:b2:b1:49:4a:09:f1:16:47:ae:7d:
34:2c:c9:90:5a:7d:09:fb:e1:37:50:54:11:0c:e4:
f1:cc:43:bd:7d:b1:be:6c:93:80:df:9f:ff:17:5c:
ec:cc:b0:1d:ce:1e:3d:17:5d:35:dc:41:85:83:92:
31:8c:79:8c:93:62:98:af:03:56:83:05:dd:8c:4e:
45:24:24:61:39:f1:be:39:44:df:f7:3a:f2:36:b8:
d0:bf:f3:e9:c9:05:9a:f6:42:99:ae:09:0a:88:ca:
3e:0b:a3:4d:78:03:42:18:41:34:e9:11:fb:fe:88:
c7:7e:4f:8c:7b:9a:f9:0b:4e:0d:78:b6:f0:24:85:
3c:ba:1d:bb:48:bb:d9:72:d6:9f:4a:6d:18:79:95:
c7:c4:d6:c1:e2:78:44:da:29:32:0f:73:a1:bc:1b:
2b:2b:6a:bf:5b:1b:d3:fc:6f:2c:74:3f:08:8d:fa:
00:00:35:3e:04:62:4f:47:0a:7b:bc:40:d9:1f:34:
ca:98:6c:18:2f:9b:a8:c1:da:90:ff:d8:a2:5a:00:
f8:6e:4b:6d:26:c3:84:15:31:f8:b3:a5:b2:16:a3:
8c:8b:26:60:8c:ee:12:28:9a:32:d1:ef:33:d8:e3:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E7:1C:E9:7E:FF:6A:50:9D:C8:4B:52:D8:93:0B:DF:A6:5B:C0:1A
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
52:6e:94:49:aa:7a:83:64:a9:64:89:97:90:92:85:6c:81:41:
32:fc:0e:4b:30:04:7f:80:d3:ed:a3:bb:b4:c8:a7:38:80:59:
9d:43:41:a4:ae:1b:3c:88:2e:92:3f:cf:b7:d5:6c:f7:6b:58:
44:74:9b:0d:7b:9c:0e:53:5c:49:d9:4e:9b:b8:89:b2:4c:42:
87:ec:58:e4:41:59:ca:01:e3:b8:fe:d1:f5:e5:75:49:ec:ce:
1c:ad:0f:3b:17:ae:be:a7:29:5f:ed:7c:9d:2c:79:80:38:69:
61:3c:1f:64:9f:25:e7:1a:c8:1e:e2:0f:e4:5f:6a:f2:d9:09:
6d:38:52:be:4a:29:18:e3:6b:e6:01:38:1a:af:01:ae:65:b6:
0d:d2:eb:60:b6:e8:d0:e9:c5:c3:6b:84:86:a2:d5:b9:25:cf:
22:ce:15:30:9f:35:1b:a2:cb:b0:59:76:e3:b9:c0:fa:70:b6:
9e:4a:b9:a1:e8:f1:67:e4:5d:16:45:82:27:7e:31:d4:c9:46:
23:8c:d1:9e:e0:5d:0c:02:e5:82:e6:52:e9:22:4c:cb:75:41:
45:65:c2:05:76:e6:8b:f2:ca:f4:8e:76:5f:7c:df:0a:76:38:
98:7f:8b:ce:16:40:80:c0:40:b3:a2:be:27:8f:45:95:2b:8b:
13:c2:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:28:16 2025 by rpki-client