Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32332d3234203d3e203631393031.roa
File: 3137302e3235342e35342e302f32332d3234203d3e203631393031.roa (raw, json)
Hash identifier: ZDg3llB3ciMQJI9JBrmEnZmExCcHuRVoNSMRksP0um0=
Subject key identifier: A9:86:A6:D4:B4:6D:B2:CB:7E:05:C5:DF:63:34:42:A9:E8:10:81:C2
Certificate issuer: /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial: 0C235874B3013CEA0B3E7994FEA3CE104EFF075C
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32332d3234203d3e203631393031.roa
Signing time: Tue 12 Mar 2024 18:13:40 +0000
ROA not before: Tue 12 Mar 2024 18:08:40 +0000
ROA not after: Tue 11 Mar 2025 18:13:40 +0000
asID: 61901
IP address blocks: 170.254.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:23:58:74:b3:01:3c:ea:0b:3e:79:94:fe:a3:ce:10:4e:ff:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Validity
Not Before: Mar 12 18:08:40 2024 GMT
Not After : Mar 11 18:13:40 2025 GMT
Subject: CN=A986A6D4B46DB2CB7E05C5DF633442A9E81081C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:b5:8d:ff:77:a0:91:3a:ac:00:48:b0:fa:
c1:71:29:d3:6d:42:2c:f1:ff:42:eb:97:90:16:8e:
cb:0e:d6:4c:5c:88:e9:14:e9:fb:4f:8d:72:56:99:
fd:42:b2:21:c7:ae:49:1f:21:62:2c:22:53:a8:d0:
d6:07:ad:f8:a4:38:c4:d5:e7:fa:23:bb:3d:18:d5:
11:8c:0c:3d:0f:16:29:7b:95:60:23:b2:c7:80:62:
f4:38:ae:a5:1b:a5:d3:4a:b2:e1:2b:7a:2a:c1:9c:
1f:4e:3c:d6:38:db:db:4e:23:08:e9:e1:77:ac:63:
bc:b6:a0:c3:8c:7f:33:28:1a:e4:d8:d9:b6:f4:ab:
70:ff:09:c3:15:f7:e5:ed:ac:fd:74:3e:43:a1:9d:
36:7c:d5:6a:d4:d6:d9:f1:c5:e9:4e:97:7b:06:90:
b4:83:3f:ee:b1:d3:63:b9:aa:24:6f:58:f4:eb:cf:
29:39:a9:39:f3:c7:cf:c7:00:7a:e5:af:ea:d0:df:
e0:55:66:ed:90:ac:31:c6:f1:34:a8:61:cc:31:42:
4d:76:dd:b9:98:1f:bf:39:8d:7b:73:2b:6d:3d:3e:
dc:38:e8:ab:7d:21:b3:aa:d6:05:d5:0e:1e:29:0e:
19:eb:08:d5:49:f7:26:72:d4:ac:30:9c:89:a0:ab:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:A6:D4:B4:6D:B2:CB:7E:05:C5:DF:63:34:42:A9:E8:10:81:C2
X509v3 Authority Key Identifier:
keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32332d3234203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:f2:28:ed:2f:96:2c:77:d2:c6:4f:04:20:f8:7b:d8:6d:1f:
90:67:41:66:f5:a2:2f:9a:a7:be:30:97:04:b7:fd:6e:05:44:
c8:cc:b3:6c:e7:cd:82:e6:a0:28:30:e6:2f:0b:5b:43:03:27:
e8:b2:11:ef:29:b3:2d:23:e5:22:2e:5a:71:be:61:80:5c:dc:
a8:5d:80:85:f3:04:a1:d9:22:8a:85:4f:83:f0:a5:e2:6f:16:
ea:06:8f:0e:39:ee:b8:50:02:f2:75:2d:f7:a6:32:8d:92:88:
a6:ce:9b:fb:93:13:9e:47:5b:6f:54:0e:bc:2a:6a:de:ff:a5:
d6:32:4e:38:e4:67:96:33:bd:23:57:93:a1:bc:7c:7b:b9:54:
05:3b:f9:9e:a3:6d:92:0a:e0:fc:58:89:1b:7d:4d:70:ba:e2:
e1:23:cc:3d:b2:b0:6b:0d:12:ed:4f:30:85:cb:c4:41:52:aa:
d3:a5:12:29:2f:8f:f8:de:e2:84:fa:77:fa:7d:a6:73:e9:31:
c0:b2:e3:00:69:85:a7:44:61:52:31:7d:ed:f1:62:10:d8:38:
d6:e9:c2:b9:ef:91:3a:78:c7:52:4c:af:0c:e4:b6:74:da:46:
92:8c:d9:f9:e8:e9:67:04:8c:6b:2d:bf:24:96:81:fb:3e:e5:
ca:7d:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org