Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e34382e302f32322d3232203d3e203238323130.roa
File: 3137302e3233332e34382e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier: 5AMOzpCSg7ezhSO1H5JdW+D/NKoBhoozqb5PMCmCZ70=
Subject key identifier: D1:A9:46:65:1F:E3:34:3C:A8:AD:22:6A:73:75:61:35:C0:6F:5D:7F
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 4FF7E48F7D2D2E3A005BAB7790ED867D1C3DC4FA
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e34382e302f32322d3232203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:19 +0000
ROA not before: Wed 28 Feb 2024 13:58:19 +0000
ROA not after: Wed 26 Feb 2025 14:03:19 +0000
asID: 28210
IP address blocks: 170.233.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f7:e4:8f:7d:2d:2e:3a:00:5b:ab:77:90:ed:86:7d:1c:3d:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:19 2024 GMT
Not After : Feb 26 14:03:19 2025 GMT
Subject: CN=D1A946651FE3343CA8AD226A73756135C06F5D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:67:ff:2e:ae:e3:cf:e4:6b:a7:ea:ca:e0:
0a:42:26:37:cf:87:d8:ab:a2:e7:eb:79:9e:9f:3d:
14:7b:0d:ad:94:49:53:8a:36:95:6c:82:21:7a:6b:
34:04:0c:99:2e:42:b0:2b:1d:e1:05:5c:71:47:2b:
a9:6e:94:bb:af:d9:d6:b7:e1:4a:db:ba:9d:b3:77:
be:cc:32:2b:5f:8b:71:58:7f:f4:58:01:88:69:fb:
f4:6c:0f:0a:a8:fc:12:0a:ce:68:b1:9b:99:39:cc:
81:8a:2b:30:e7:16:88:c5:a7:57:aa:c0:ab:91:57:
1d:f3:7c:f7:cb:99:36:89:c4:45:7f:ce:78:7b:91:
e5:4f:a9:d3:f6:7a:13:38:b0:7c:af:7b:bd:61:2e:
3f:3c:0d:aa:4b:93:09:ba:3c:69:21:61:68:5d:18:
ba:6a:df:21:c9:f5:84:de:54:9c:76:cc:fe:d5:56:
ca:66:d8:6b:ac:09:ac:d3:24:fd:c7:d2:73:57:6e:
e5:83:b2:47:3e:e3:89:81:5c:73:0e:71:2d:75:a0:
ef:f6:7f:b9:57:e1:12:3c:10:4f:a6:7e:c4:03:58:
ca:c8:f2:1c:94:4e:d6:48:18:f9:36:8b:b9:ab:d3:
84:1a:48:42:c6:39:b3:c1:d0:b4:84:e1:e1:8f:01:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:46:65:1F:E3:34:3C:A8:AD:22:6A:73:75:61:35:C0:6F:5D:7F
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e34382e302f32322d3232203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:4e:66:44:0d:bb:93:88:cc:be:60:0b:51:63:80:6d:5d:29:
57:c7:ec:e5:a7:63:cf:f9:8d:70:46:82:f7:c4:6c:3e:c0:ab:
1a:1e:cf:cf:ce:64:85:6a:1d:17:a3:81:74:ae:82:ca:93:e4:
6b:d2:81:ad:80:72:1d:c9:0f:51:83:28:99:fe:82:83:9a:4a:
d3:7f:0b:f6:4a:e1:68:8b:d8:4f:08:eb:22:d2:f9:1b:8f:b6:
8d:19:1c:67:72:99:7b:a2:16:65:27:89:93:61:bb:06:2f:70:
dc:f5:19:5a:d2:dd:8b:15:a9:72:0c:98:7a:3b:c9:48:1d:d9:
dd:4b:f9:49:0d:b0:2a:cd:b0:98:bc:da:ba:14:f8:aa:f6:b3:
5f:78:7f:c6:38:a6:1f:84:78:aa:81:7a:dd:75:25:b6:92:76:
99:ce:15:f4:8c:b0:c8:2a:30:73:da:1e:e8:3d:30:cd:54:45:
03:6b:2c:dc:15:5b:26:74:99:0e:18:7a:e2:85:a7:ce:2f:35:
0b:d9:fd:d5:3f:aa:7c:b0:8a:24:27:75:b5:40:d7:e6:cc:3f:
b0:f2:59:67:af:d4:f3:09:56:27:09:ea:3e:18:9a:51:ca:46:
c9:7b:78:5b:de:e6:54:00:97:2e:5d:82:9e:8b:8f:5c:cb:03:
59:7c:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:56 2025 by rpki-client