Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
File: 3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier: SvHz3teKcN6wua71K9j+m+DiBAmVswa15Pd5RSy8YQc=
Subject key identifier: 4A:3F:16:BC:33:F5:1C:D3:E7:2B:AC:88:2B:F2:72:F0:60:27:87:DE
Certificate issuer: /CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Certificate serial: 636C20B9FC853F6745FCCF9B59DC65A2EBAA26BD
Authority key identifier: 67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
Signing time: Tue 12 Mar 2024 18:13:03 +0000
ROA not before: Tue 12 Mar 2024 18:08:03 +0000
ROA not after: Tue 11 Mar 2025 18:13:03 +0000
asID: 61901
IP address blocks: 170.254.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6c:20:b9:fc:85:3f:67:45:fc:cf:9b:59:dc:65:a2:eb:aa:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ABA859CE6CBA21AD52947722B1512ECD25200B
Validity
Not Before: Mar 12 18:08:03 2024 GMT
Not After : Mar 11 18:13:03 2025 GMT
Subject: CN=4A3F16BC33F51CD3E72BAC882BF272F0602787DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:bb:e1:f1:61:9e:2f:9c:67:7c:aa:fc:0e:
18:ee:4a:dd:91:a8:ec:e1:dd:4b:f4:44:b0:e7:bc:
e2:c6:5b:ca:42:58:7b:42:0a:99:75:d7:19:72:7d:
37:ee:bd:dd:4c:be:52:f8:30:16:cb:ce:aa:80:f0:
9a:4e:40:4f:e1:5f:fb:0f:f0:cb:a4:7b:ea:32:c7:
16:e6:18:6f:c0:a3:3b:28:ad:af:d7:81:c1:fa:d0:
02:9f:d1:44:bc:34:9d:ff:00:b1:4c:0e:73:f4:69:
83:05:7e:50:e8:43:77:5b:7f:d7:ac:55:5e:01:0f:
c6:35:44:c9:75:e4:75:d6:0b:52:97:54:69:c0:3c:
84:a4:3b:09:a7:0f:4b:c0:4b:27:3e:e9:90:a9:aa:
90:70:1a:e2:b0:67:60:93:61:de:ba:c7:b7:75:8d:
f7:67:6e:70:8a:0e:6a:fc:ca:dd:e0:b8:e9:76:47:
da:c6:27:44:45:b7:b3:38:68:d3:de:6b:06:f7:78:
88:d7:a0:11:a8:d8:62:85:c5:87:5d:6c:41:2e:5f:
bd:14:df:33:c5:1e:7f:a2:8a:73:76:5d:d1:07:7a:
76:84:b0:5d:9b:2f:75:af:3b:e4:b2:9a:e5:58:45:
05:62:78:14:4a:24:dd:b5:85:65:57:b0:83:b1:7c:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:16:BC:33:F5:1C:D3:E7:2B:AC:88:2B:F2:72:F0:60:27:87:DE
X509v3 Authority Key Identifier:
keyid:67:AB:A8:59:CE:6C:BA:21:AD:52:94:77:22:B1:51:2E:CD:25:20:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67ABA859CE6CBA21AD52947722B1512ECD25200B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.54.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c4:9f:f7:4b:52:15:19:67:b9:25:0d:01:b9:98:fe:82:0a:
b3:77:4b:aa:4a:02:9b:85:c4:88:f0:b9:bd:35:bd:97:b8:d5:
0f:b8:e7:00:d0:87:4b:99:fb:1d:07:1b:e5:12:2d:17:e0:a7:
31:e7:ad:31:59:f1:24:67:19:0f:a4:8e:4d:f1:79:a8:66:1f:
25:25:58:f0:3a:07:1d:ef:04:e1:66:10:25:a3:f5:fe:ba:b1:
4e:6f:fe:05:67:e3:7c:a1:f0:61:30:bd:d0:13:53:e2:ac:48:
f3:5a:22:71:93:d7:e0:1c:52:25:90:25:ce:f4:9e:da:b0:7e:
3e:4a:58:bc:2b:52:20:56:2d:d3:d2:0b:03:66:ab:86:58:c4:
b8:d7:c2:47:48:94:2a:ac:81:f7:05:d9:05:75:d4:52:f6:b5:
c6:72:bb:d0:83:06:75:87:65:96:5a:fd:cf:27:10:07:e9:ae:
be:ac:f8:7d:0e:93:95:01:9a:cd:53:89:96:ff:7f:8f:3d:1f:
d7:78:5a:b1:d0:3f:cd:88:80:19:d1:f7:58:a1:25:e4:bf:66:
ed:07:f1:d8:ba:21:2a:a7:aa:c8:ce:f2:ab:51:d5:27:02:5a:
dd:ff:e9:f8:e9:13:85:ed:df:77:10:1b:6c:95:83:4f:18:04:
aa:f9:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:39 2025 by rpki-client