Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
File: 3137372e3232312e37322e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier: 5fRKJhdmjahU8we6qEDRbZZYTMxmy+8mXDdinvxBiZ8=
Subject key identifier: B8:B4:63:FA:32:3C:8E:06:20:53:A7:25:4C:DD:96:62:20:6B:EC:4F
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 66F5CAB6EDCCE335FF3CCF3972E35388293FDF5B
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:41:27 +0000
ROA not before: Wed 10 Apr 2024 12:36:27 +0000
ROA not after: Wed 09 Apr 2025 12:41:27 +0000
asID: 28201
IP address blocks: 177.221.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f5:ca:b6:ed:cc:e3:35:ff:3c:cf:39:72:e3:53:88:29:3f:df:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:36:27 2024 GMT
Not After : Apr 9 12:41:27 2025 GMT
Subject: CN=B8B463FA323C8E062053A7254CDD9662206BEC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:6d:7d:07:56:95:9f:2a:2c:a1:19:05:36:
d6:55:40:d9:56:f2:78:f4:03:ab:af:37:63:f0:73:
54:f2:90:3c:64:6d:0a:a3:18:9b:99:63:68:ae:54:
38:96:26:14:ed:00:8c:4d:0f:50:4c:ee:5f:5a:bc:
17:61:4b:a6:a2:75:9e:71:d4:ce:9e:92:fb:87:90:
ef:3e:e3:83:31:91:3c:43:20:5f:cf:82:b0:26:0d:
cd:e4:79:64:f5:ad:c6:b0:d6:af:ce:c4:fc:77:a4:
dc:e0:1b:b4:59:f2:89:4d:c3:5f:28:3a:25:d1:48:
34:cd:81:f2:da:b9:11:6f:cd:0d:db:85:b1:62:d8:
71:14:81:21:6d:50:d1:83:34:fb:7c:89:df:9f:75:
c5:42:e8:36:80:fb:a9:91:a5:18:30:3c:f7:cc:53:
4b:3b:54:6a:34:8d:62:05:16:59:0c:a8:1d:9b:64:
a3:5b:97:72:f1:ce:de:06:84:4d:3a:34:b0:47:08:
8f:60:8a:c8:1e:5a:17:29:da:38:b4:4a:d1:85:2d:
61:48:d6:d5:c4:35:3d:46:ef:b4:a1:33:fe:17:9b:
ca:e3:99:2b:c6:82:96:6a:e7:51:f6:11:a8:ef:f9:
d4:0c:5d:36:73:86:92:5e:c6:27:80:e4:fa:97:d2:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B4:63:FA:32:3C:8E:06:20:53:A7:25:4C:DD:96:62:20:6B:EC:4F
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3232312e37322e302f32312d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.221.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:32:f7:78:d5:de:61:2d:fb:d9:bd:c4:d3:26:e8:bc:e1:21:
88:54:f3:6e:d4:93:87:28:61:50:4c:05:77:b4:a7:8a:56:b1:
91:ac:ae:51:f6:72:f8:98:41:56:9f:7c:3b:c1:fd:f7:d1:50:
ed:53:bd:e1:78:f9:3b:f3:2e:ab:00:df:6d:1a:3a:c5:48:49:
c2:e6:f6:3c:4c:92:bf:bf:26:c4:63:14:6c:38:c2:0d:b9:60:
1b:dc:f7:71:fd:47:bc:d4:ec:a1:6c:7c:02:66:6f:33:79:28:
1d:8a:1c:fd:d1:2e:01:a8:6b:a1:f8:44:a9:b8:46:f6:60:c5:
07:a2:84:c0:65:76:2b:af:58:a8:0c:1c:c0:dd:d9:35:c2:02:
f1:98:90:ec:af:5e:33:f9:34:4a:25:78:27:66:88:b2:d9:8d:
00:d3:e4:6d:52:89:93:a7:63:e0:0d:be:f9:ef:a2:b4:50:fc:
9d:bb:86:57:ee:e5:b7:be:5c:96:c7:6e:95:f2:0b:49:f7:1f:
17:20:ab:4e:d9:69:0d:bc:11:e7:ef:87:0e:1c:25:ea:9a:1c:
93:62:e8:47:91:e6:50:64:ce:74:73:b5:83:50:dd:a6:11:f8:
9c:c0:e1:84:b8:c3:c9:95:00:28:15:21:cc:59:73:2c:b2:c5:
82:98:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org