Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32392e302f32342d3234203d3e203532353837.roa
File: 3137302e37382e32392e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier: aPq3AsS5o5hkA7n8o+6nhJYDV/aJbmB0dnS0cTOIgmY=
Subject key identifier: E4:78:95:BB:D4:7B:5F:95:53:B0:1C:33:29:76:A1:1D:AC:BA:9A:EB
Certificate issuer: /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial: 4B18CCEAB1405FF856D64A8E1CE9BDDF8A3BE1
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32392e302f32342d3234203d3e203532353837.roa
Signing time: Fri 12 Jul 2024 02:18:29 +0000
ROA not before: Fri 12 Jul 2024 02:13:29 +0000
ROA not after: Fri 11 Jul 2025 02:18:29 +0000
asID: 52587
IP address blocks: 170.78.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:18:cc:ea:b1:40:5f:f8:56:d6:4a:8e:1c:e9:bd:df:8a:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Validity
Not Before: Jul 12 02:13:29 2024 GMT
Not After : Jul 11 02:18:29 2025 GMT
Subject: CN=E47895BBD47B5F9553B01C332976A11DACBA9AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:8a:be:a6:18:49:8b:70:30:95:88:9e:a8:
05:0f:ec:20:74:dc:9e:a7:ca:5a:b3:5b:f2:a7:c6:
39:09:a4:bd:34:a7:13:23:a0:e8:bb:31:7f:2f:cf:
c5:60:71:09:a3:69:66:3e:be:9a:11:b8:05:6e:a7:
3f:85:37:22:23:29:67:cd:16:4d:b9:1e:96:96:72:
42:f5:ae:01:94:bf:5a:5f:ac:a7:1c:64:bb:3d:3c:
f1:e6:da:8c:c3:a9:4e:77:41:3a:ef:37:ec:60:e6:
b2:73:35:24:ad:f6:76:a8:04:10:ab:92:d0:89:e1:
f0:8b:7a:89:0d:60:b8:1b:8b:b2:ff:bf:1f:a8:a3:
4f:d6:e0:8e:a5:54:9f:b8:a9:36:f1:0e:61:a6:86:
bb:aa:72:55:90:79:08:93:6e:cf:62:fe:b5:7f:3b:
23:7d:cd:2a:c3:01:05:ce:da:1a:b5:b6:20:ec:c8:
5e:2a:19:bd:c0:4d:d9:18:73:d2:ad:7f:7d:40:da:
7c:ad:9f:cf:3a:8a:a2:3c:f2:37:91:a6:36:dc:5b:
66:28:04:f7:c0:60:30:4c:b9:98:5d:09:5a:70:7d:
a7:e9:f6:28:ef:27:d0:05:a6:ff:bd:a6:4e:7c:18:
e3:40:23:00:3c:e5:85:f9:42:24:4f:af:96:7e:44:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:78:95:BB:D4:7B:5F:95:53:B0:1C:33:29:76:A1:1D:AC:BA:9A:EB
X509v3 Authority Key Identifier:
keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32392e302f32342d3234203d3e203532353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.29.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:41:c2:a2:13:33:80:cd:eb:c5:3d:3d:7e:c0:2a:b5:bd:
b6:c3:3b:28:05:d9:ee:81:f8:fa:31:8c:8c:df:4f:73:8a:83:
67:c5:31:cc:eb:53:cc:12:a3:33:c7:99:56:c0:e4:9b:23:68:
c2:56:da:91:23:67:c4:60:bd:ea:43:12:f8:f0:f7:fd:5c:b3:
14:84:3e:af:18:6d:09:cb:34:5d:36:2e:ef:88:12:92:48:b9:
68:73:f0:e9:ca:a1:59:a1:e2:a9:83:bd:48:44:83:ef:2e:5b:
f3:22:05:27:f4:b7:61:ed:1f:6d:ac:53:8f:b9:4b:b7:f5:96:
f1:d4:2b:a6:2f:77:39:b2:b5:7f:80:05:78:07:57:23:ee:90:
3a:65:e5:f4:8f:13:0d:d9:1c:7a:5f:c7:bd:b0:18:df:a7:f4:
5f:08:b9:1f:7e:eb:62:8a:71:ff:41:8d:f7:05:64:29:80:c2:
80:4c:1a:58:7a:62:b7:e7:44:1b:31:67:88:e7:81:f1:69:24:
f3:b5:05:03:52:bd:ea:e5:57:b5:bb:76:77:d0:7f:45:27:45:
4c:3c:09:66:04:fc:01:e0:d9:27:30:9c:32:da:1a:70:8b:6c:
2d:42:47:ff:0a:f4:de:70:67:25:4b:31:18:b1:19:9f:c9:9e:
53:ef:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:15 2025 by rpki-client