Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
File: 3137372e38352e34382e302f32312d3231203d3e203238323130.roa (raw, json)
Hash identifier: 8KsLcCQyt5Apnh8JOMvmN4GV0rR7uRitJ51vPLS1xAg=
Subject key identifier: 95:F5:1F:CF:50:73:4B:53:4B:8D:43:F7:3E:A2:12:4C:4F:6A:53:9E
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 41DD4371A27E0BE8A6EEF1C6A2C11F8ADA65F97C
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:22 +0000
ROA not before: Wed 28 Feb 2024 13:58:22 +0000
ROA not after: Wed 26 Feb 2025 14:03:22 +0000
asID: 28210
IP address blocks: 177.85.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:dd:43:71:a2:7e:0b:e8:a6:ee:f1:c6:a2:c1:1f:8a:da:65:f9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:22 2024 GMT
Not After : Feb 26 14:03:22 2025 GMT
Subject: CN=95F51FCF50734B534B8D43F73EA2124C4F6A539E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e2:3c:62:1a:42:b7:4b:79:0f:e7:90:52:81:
d0:fc:da:4b:e5:dd:72:b5:13:24:fd:68:6b:a5:2f:
52:ee:2f:7e:c4:4a:78:f1:ba:00:61:45:5e:67:38:
ed:01:df:a5:b3:fa:c4:a9:1a:ab:9e:96:f7:de:5d:
b6:40:1e:b2:24:2f:72:6d:d5:81:37:88:81:b2:9c:
f2:da:2d:80:83:2e:75:de:c6:30:e1:5d:3b:2e:b2:
2e:b3:81:a6:55:97:39:75:10:fd:07:ac:3c:f8:e9:
10:e7:91:c5:be:9e:88:67:92:52:35:49:20:1a:83:
4a:45:0c:e4:af:b0:23:3e:8e:dd:8a:82:4e:48:f3:
4a:e3:83:2e:06:a6:ed:87:7b:bd:8c:bb:fc:80:82:
cb:ff:9b:1d:a7:36:78:99:46:9d:e5:8e:ca:25:d1:
f0:70:cb:62:18:df:a3:29:3b:57:c7:5a:bc:3d:32:
6a:6a:69:43:38:0f:c6:af:45:45:28:5c:55:20:70:
5f:7d:93:3f:05:d1:29:11:bf:f4:ec:04:ab:3e:da:
35:76:35:20:32:79:25:7a:6e:aa:e6:39:65:9a:2c:
4b:65:8e:93:71:fe:a9:db:f3:a9:5d:21:96:65:ea:
82:b5:ca:24:d1:d1:48:65:8d:57:59:a3:f0:15:9e:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:1F:CF:50:73:4B:53:4B:8D:43:F7:3E:A2:12:4C:4F:6A:53:9E
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:72:50:b7:34:b6:4b:f2:c1:ca:a4:b7:a3:16:5c:ff:53:3e:
51:ef:6a:47:fd:55:71:f3:af:f4:b1:56:b8:42:e8:51:dd:25:
7d:8c:04:79:6d:f4:d7:0e:8f:c3:7f:1d:38:60:28:cc:e1:de:
2d:7c:26:56:43:3a:e0:06:12:ab:4b:3d:e2:3c:5c:ec:9e:3d:
46:61:20:ea:4b:a4:55:5b:33:ef:2c:12:50:84:a3:1b:05:2e:
b3:8e:8a:ef:98:18:63:b3:d7:19:d9:9d:1d:9a:5c:9c:c2:1d:
60:1a:d5:dd:13:2e:18:cb:4d:08:39:f6:4b:2d:24:2b:59:71:
c0:b7:31:68:c2:02:37:e9:63:2b:4d:0d:ca:94:02:6a:db:05:
15:92:19:9a:8c:b8:f8:4b:3d:ed:15:8d:ab:b6:bb:7e:36:90:
93:96:4c:91:fa:46:51:ba:16:b1:ec:13:dc:ef:89:58:1a:ca:
e2:b2:60:5c:52:f7:9a:7d:f0:76:55:42:d8:9b:4c:86:dd:58:
81:c9:0c:c5:d9:97:39:98:df:d6:ea:da:6a:4f:90:44:c1:1f:
3d:59:8c:c4:f3:e7:07:23:7e:9b:b5:df:bc:3a:7a:02:9d:4c:
e1:e9:9c:a7:3b:0a:bf:4b:69:b6:b8:d7:31:be:73:d1:93:b5:
51:47:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org