Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139392e302f32342d3234203d3e203238323130.roa
File: 3137302e3233382e3139392e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: mLtCoXzMfXW0g698VjLcag9wZdMShLtT9XplZjucJ+w=
Subject key identifier: CD:FF:74:EA:C5:26:0D:A9:83:AA:BF:5A:5E:1B:4E:A6:11:BD:A9:92
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 68B555A2CBB5843FBCA936A13EDE11AD260B8016
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139392e302f32342d3234203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:24 +0000
ROA not before: Wed 28 Feb 2024 13:58:24 +0000
ROA not after: Wed 26 Feb 2025 14:03:24 +0000
asID: 28210
IP address blocks: 170.238.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b5:55:a2:cb:b5:84:3f:bc:a9:36:a1:3e:de:11:ad:26:0b:80:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:24 2024 GMT
Not After : Feb 26 14:03:24 2025 GMT
Subject: CN=CDFF74EAC5260DA983AABF5A5E1B4EA611BDA992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:39:51:9f:af:d4:d5:4d:52:7c:fb:5a:85:
87:7c:fd:60:3a:7e:f3:6c:f9:e4:43:f5:98:d2:a5:
b4:9e:01:62:7f:9e:3d:36:8b:fd:37:2f:7b:02:11:
79:d6:4c:b0:4a:d4:ec:d6:7a:39:e6:f5:cb:d3:8b:
1b:26:3c:4e:36:7d:ce:36:ad:be:4a:d2:bd:f4:f0:
fb:ab:b1:ea:39:1e:47:14:da:26:1e:39:18:cc:45:
e1:8b:c9:fe:d9:55:a2:8f:34:bf:ec:9d:0c:95:a0:
ad:28:62:5f:bc:d6:33:fc:6a:e7:1b:97:8c:7e:3f:
f2:53:84:d4:3f:48:69:41:e8:62:e2:b4:35:af:ac:
6f:0e:a4:cc:75:b3:0c:d3:76:de:e8:3f:3e:79:33:
b1:f4:77:e2:83:99:bb:73:e8:b4:be:b1:6f:de:54:
77:0f:75:c9:bb:94:02:bf:93:cc:37:ae:56:93:96:
57:7c:b1:d7:8f:b0:d8:b8:c5:ca:a6:7e:6c:5d:a2:
6f:13:f4:1d:20:04:e8:78:a4:dc:0d:7d:9c:8a:a3:
36:ca:4e:77:fe:ed:9c:70:62:74:93:ee:4d:e8:32:
47:42:35:d7:70:58:ff:97:84:76:0c:30:b9:68:f3:
91:87:71:83:13:51:0b:65:be:3d:6c:12:70:32:5d:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:74:EA:C5:26:0D:A9:83:AA:BF:5A:5E:1B:4E:A6:11:BD:A9:92
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139392e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.199.0/24
Signature Algorithm: sha256WithRSAEncryption
12:08:fc:1d:61:17:e8:05:58:b2:97:de:55:b8:d2:50:1c:42:
8c:f4:51:2d:af:9f:e8:0b:62:44:fe:a7:2a:2d:27:2b:15:2d:
ce:5c:2e:ff:8d:2f:e1:b5:b8:4e:6d:a1:56:e5:9d:93:01:63:
a5:85:ce:dd:63:e0:ac:75:71:6c:90:98:a9:f3:bf:e4:14:26:
65:22:08:6b:11:5e:c8:52:7c:2a:88:49:cc:45:f3:5e:1a:5a:
bd:f3:7d:71:57:ff:bb:dc:3e:18:67:a1:38:7f:9a:64:1c:84:
eb:74:55:e2:c2:0f:44:d4:e6:e7:ef:cd:f4:8b:3d:37:8a:62:
11:2a:1b:e7:e1:14:51:f6:9c:8c:bf:f9:55:0a:e8:22:64:92:
e5:01:b4:c9:77:0e:af:8a:67:48:ca:37:04:cc:cf:bc:17:3a:
05:b2:3d:c9:bb:95:d2:82:c7:d3:54:c4:09:ad:8b:7a:38:9c:
98:9a:19:0a:14:2f:e3:53:63:5c:04:c9:03:2a:ed:7b:8e:37:
5f:30:66:98:54:8f:89:84:89:e1:cc:10:72:69:c4:3d:3a:fc:
63:25:14:59:57:69:c1:a9:cb:f9:ca:df:6b:f5:e1:b6:a2:17:
10:56:b9:f0:53:1b:fd:5a:e7:b3:2e:af:7f:0b:80:b3:1d:71:
7c:9f:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:42:11 2025 by rpki-client