Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
File: 3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa (raw, json)
Hash identifier: hjb52vTI/tm4As5lesC8VTpJKGjRX00Hfp1whbsDYn4=
Subject key identifier: 49:1A:E8:93:99:DE:21:59:ED:3E:31:2A:A0:F6:E7:B2:7B:31:2E:9B
Certificate issuer: /CN=32149EE0DC10ABC770C49D053156E085CC1E2144
Certificate serial: 3657FFDB5BE01789A33E32F5EDC02EBC0C755475
Authority key identifier: 32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
Signing time: Mon 19 Feb 2024 18:24:37 +0000
ROA not before: Mon 19 Feb 2024 18:19:37 +0000
ROA not after: Mon 17 Feb 2025 18:24:37 +0000
asID: 266509
IP address blocks: 170.244.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:57:ff:db:5b:e0:17:89:a3:3e:32:f5:ed:c0:2e:bc:0c:75:54:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32149EE0DC10ABC770C49D053156E085CC1E2144
Validity
Not Before: Feb 19 18:19:37 2024 GMT
Not After : Feb 17 18:24:37 2025 GMT
Subject: CN=491AE89399DE2159ED3E312AA0F6E7B27B312E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:43:af:97:57:e6:2c:09:ef:72:2f:8f:2a:
1f:69:fa:fe:0f:d1:47:4d:07:c9:7d:86:1c:96:66:
d9:c6:90:a3:b3:67:52:45:a1:93:0b:46:5e:e9:99:
ee:02:9e:2a:eb:b9:3d:6b:3b:e3:73:22:22:47:3f:
29:1b:28:61:d5:e4:f1:84:bc:3e:54:18:2f:c9:4c:
87:0d:33:4d:bd:23:3c:60:10:d7:d3:66:c4:7a:0b:
f4:af:78:02:0c:30:97:6a:b2:7e:a1:54:86:5e:5f:
82:5e:2f:3a:cc:e3:4f:a3:a2:73:42:ef:22:b4:ec:
ad:89:c7:d2:56:64:b9:4c:20:76:41:7b:c1:f2:76:
af:53:e9:c5:a4:dc:fc:75:bd:75:4e:14:10:4e:6a:
6e:6b:71:32:0b:fa:d3:f4:b6:15:da:a9:f4:f6:94:
64:5a:d5:eb:dc:01:82:30:bc:05:c9:98:7b:cc:f4:
34:43:cb:e6:07:4d:8d:b5:16:1b:fd:77:25:40:5a:
bf:d9:0c:2e:74:fa:38:24:1b:7e:81:5c:c0:f8:b9:
32:d3:f0:e6:f3:c5:0f:aa:fd:5c:51:2a:3f:70:40:
f8:ce:ab:6c:76:d4:66:7e:90:14:b4:9e:a4:35:5b:
3c:94:da:59:d0:74:6d:22:c6:ff:9c:b6:4c:65:8e:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:E8:93:99:DE:21:59:ED:3E:31:2A:A0:F6:E7:B2:7B:31:2E:9B
X509v3 Authority Key Identifier:
keyid:32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/3137302e3234342e3230342e302f32322d3234203d3e20323636353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:8b:d7:73:ac:ed:17:91:fe:1d:c8:e1:0d:9f:83:62:9a:11:
29:8b:29:cf:64:a4:77:00:ec:69:0a:6d:58:c2:55:86:ec:17:
ab:b6:34:fd:fa:a5:58:3d:7a:89:f3:25:32:36:14:2e:fc:8d:
9b:40:fb:16:40:57:75:b7:31:16:49:d9:46:6e:c2:6a:29:4f:
af:6f:93:9f:74:b2:36:28:a0:28:d9:c8:21:f8:2b:e6:a2:ca:
be:e2:f5:65:c3:37:09:d6:3e:19:08:03:9f:e1:ca:1d:c3:63:
b6:e7:7d:91:13:71:b9:47:0a:52:79:c0:64:71:87:86:27:a8:
26:81:0a:bf:f4:2c:82:bc:a9:10:5c:3a:90:b3:0e:f8:d4:6f:
24:8d:2f:b1:6b:83:9e:43:76:2d:f7:70:ab:40:f8:6d:11:4e:
5f:fc:85:75:98:46:f2:24:c3:1d:db:0c:e4:ac:b9:d5:50:ab:
92:79:3c:6b:ae:6c:7c:0d:a0:c8:ce:ea:ec:13:ae:e9:a7:7c:
a0:af:d3:04:74:bf:cf:b6:dd:35:73:e6:32:15:55:cd:d8:c9:
3e:3b:c5:de:94:38:8a:e4:3f:21:f7:ff:97:48:60:ad:61:94:
4a:0d:f3:f4:4d:fb:54:21:62:08:82:88:88:19:aa:fe:26:3a:
25:94:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:33 2025 by rpki-client