Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133372e34302e302f32342d3234203d3e203238323130.roa
File: 3137372e3133372e34302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: OMPuJoc8B7WeGm8liHsQRjHNFJ944v95+ewH94oXXmQ=
Subject key identifier: 53:A7:46:59:94:CA:E1:4F:90:6C:A8:89:7D:22:0F:42:3F:DA:BF:CD
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 5B16AD27F5FC294AAB0347868054121C5D4A2891
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133372e34302e302f32342d3234203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:23 +0000
ROA not before: Wed 28 Feb 2024 13:58:23 +0000
ROA not after: Wed 26 Feb 2025 14:03:23 +0000
asID: 28210
IP address blocks: 177.137.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:16:ad:27:f5:fc:29:4a:ab:03:47:86:80:54:12:1c:5d:4a:28:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:23 2024 GMT
Not After : Feb 26 14:03:23 2025 GMT
Subject: CN=53A7465994CAE14F906CA8897D220F423FDABFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:a7:e8:db:18:8b:c2:39:6b:b0:21:6e:23:
70:6a:be:50:3f:54:21:29:e7:6c:8a:2d:53:a6:b8:
61:db:44:87:87:ba:c3:7b:41:20:d7:3d:6b:ea:0e:
d5:76:7d:c6:d6:f1:78:c8:41:c1:2a:20:d3:3a:b1:
0f:10:49:55:13:66:36:79:7e:ce:35:4a:1b:8e:54:
27:7a:d1:62:b1:24:47:bb:2b:c8:81:9a:7d:25:72:
99:b4:19:5e:2f:7e:98:a8:de:45:10:1d:a7:70:10:
5c:29:03:a3:8b:86:ca:cf:cc:d0:92:f5:fe:0c:41:
4e:66:79:ec:64:8e:40:9b:01:e8:9b:11:82:7c:cc:
38:b5:45:2b:87:97:af:ba:55:fd:08:d9:44:0e:67:
55:bf:32:93:85:68:fe:da:4a:7c:90:22:cb:90:80:
cd:a1:68:57:9d:9b:22:40:63:9a:db:65:25:89:7f:
d0:ff:75:d7:2e:87:3a:2b:b3:a1:6e:77:1f:00:46:
cb:77:ce:d6:d6:7a:86:f2:de:18:47:16:03:c5:13:
b9:a7:67:8a:87:fd:da:e0:52:01:2d:45:6b:68:96:
aa:c9:62:a4:ee:62:04:b1:48:95:e7:c3:70:0c:9f:
e1:3d:96:e2:fd:89:b4:3a:e6:27:33:f6:c2:bc:8f:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:46:59:94:CA:E1:4F:90:6C:A8:89:7D:22:0F:42:3F:DA:BF:CD
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e3133372e34302e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.40.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c7:cc:38:10:02:c0:08:b8:31:a4:34:10:a4:8b:f2:56:e7:
43:39:65:e1:c9:d1:f2:01:5b:d2:74:67:ae:0c:5b:4f:29:c0:
c8:e5:1e:d1:49:3b:70:6d:80:0b:d3:ab:f0:ef:5e:ed:ba:54:
bc:c8:91:36:20:1e:a9:50:60:8d:79:83:9a:cd:24:34:d4:19:
6b:a2:69:db:16:55:b1:bb:56:36:89:e6:37:19:b9:6b:c0:fc:
7f:91:c9:3e:d4:a3:b4:83:f8:32:b0:99:fb:d0:84:7b:4a:10:
aa:1e:43:f6:0b:6e:08:c9:03:cf:95:84:fb:b8:a3:7d:db:2d:
98:78:2b:bc:c2:94:73:c4:7d:2a:ca:14:fd:ce:0a:18:b8:4f:
8a:60:58:16:ab:ef:18:be:f7:20:3d:c8:f5:60:a9:72:e5:e0:
af:dc:39:e0:83:b5:3c:3e:aa:c9:1a:93:a1:4c:48:18:7a:17:
c7:95:93:3d:e1:32:77:a2:3e:a7:7d:c2:c2:95:0e:67:16:2d:
0f:c0:9d:0e:69:75:91:dd:9f:9f:64:a1:50:9b:cd:b5:46:d6:
33:98:05:97:7f:64:9d:3a:30:95:63:72:38:72:78:90:2b:aa:
d6:93:3a:9e:53:67:e0:3e:7e:f1:95:30:2e:b9:2b:ad:17:21:
be:2d:28:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org