Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e35302e302f32342d3234203d3e203238323130.roa
File: 3137302e3233332e35302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: mFZD34Vuu0mkjWgD3L6N8M2xMKFu2mKuErxbM+rEctk=
Subject key identifier: 49:33:C2:AD:AF:35:DB:68:69:6A:39:5B:C1:78:9C:9D:F9:0C:D0:BF
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 1A5F666F11DE41783CCFC93BD8F5AEE87190DCE5
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e35302e302f32342d3234203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:25 +0000
ROA not before: Wed 28 Feb 2024 13:58:25 +0000
ROA not after: Wed 26 Feb 2025 14:03:25 +0000
asID: 28210
IP address blocks: 170.233.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5f:66:6f:11:de:41:78:3c:cf:c9:3b:d8:f5:ae:e8:71:90:dc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:25 2024 GMT
Not After : Feb 26 14:03:25 2025 GMT
Subject: CN=4933C2ADAF35DB68696A395BC1789C9DF90CD0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:ec:bb:b8:26:32:ff:dc:28:9d:93:c6:16:
78:4f:3e:e1:68:e8:27:e6:c9:84:44:ea:28:93:3c:
63:a7:1a:95:ba:0a:97:3d:42:19:08:bb:87:e7:e4:
28:be:3a:de:f6:d3:15:67:f2:94:7d:8d:62:9b:ad:
3b:aa:a7:be:f1:35:bc:3d:c1:a9:c5:a6:90:68:e0:
71:37:9a:40:ad:c4:06:58:c0:39:e9:65:e7:42:d3:
e3:4b:db:b2:e8:c1:12:b0:3b:6a:a9:e1:f2:ed:75:
fd:77:73:ac:13:b3:d3:3f:4d:d9:b5:ad:eb:5a:e3:
96:59:36:fd:d2:9f:b6:96:26:77:ee:c8:4b:53:82:
71:87:ef:f7:77:4a:64:43:94:bf:1b:0f:9d:b5:56:
f6:37:4b:0b:1f:20:7f:fc:77:42:6a:e6:a8:d7:57:
cd:b8:6b:1f:19:67:4d:93:3e:0a:3a:3b:a9:6f:18:
21:ff:9e:ad:a1:51:6d:07:53:21:4f:75:83:b4:0f:
f5:97:ca:e7:1b:63:15:18:95:22:94:11:ec:fe:85:
ec:cf:85:c5:0e:18:4f:ab:1e:bc:83:37:25:4b:ae:
c3:b7:9c:ea:64:10:2d:02:d9:80:69:67:36:ce:4b:
70:64:d9:e0:6a:a1:d3:21:19:63:6d:c6:4d:f1:02:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:C2:AD:AF:35:DB:68:69:6A:39:5B:C1:78:9C:9D:F9:0C:D0:BF
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e35302e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:24:70:4d:43:3c:a1:8b:e2:63:80:f3:f0:0d:0d:df:2c:f4:
cf:95:a2:ff:d6:1a:9e:e2:64:ac:89:9a:cd:43:b3:8c:79:f4:
05:4a:cd:9d:a0:76:45:86:80:2b:5b:4c:b8:00:15:82:2c:ff:
74:16:15:93:4e:4f:4f:6a:6a:b1:39:90:17:59:b6:71:a7:d5:
c5:cf:56:3e:14:8f:e8:48:d9:dc:13:63:b9:57:74:ae:f9:8d:
65:fd:b5:30:fa:6f:23:b6:3a:fa:08:2b:cb:59:56:c8:2b:d8:
2a:d3:ae:06:27:47:77:c0:6e:ff:f2:1c:d1:19:09:65:bf:d0:
2d:2a:d1:86:68:0a:8e:5e:e8:f3:08:4c:a5:d7:ae:02:ed:83:
aa:c1:83:67:ac:7d:b9:81:f1:05:cd:b0:15:90:ed:c7:93:27:
b4:c5:c9:e3:80:b5:d6:57:66:b7:a6:27:18:f9:8d:f4:21:00:
28:5a:58:06:90:9a:1b:d5:d2:4f:5f:97:de:ee:74:39:31:9c:
f3:14:e6:15:45:0f:78:a0:48:04:16:d4:65:1d:53:fd:b0:4c:
77:97:1e:d7:c6:f0:c9:74:0c:d2:b1:42:6d:f1:47:d6:71:d2:
4e:c0:e2:3e:9a:db:1b:57:9c:4b:38:9c:b7:21:0b:1c:d6:87:
33:e6:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:12 2025 by rpki-client