Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33332e302f32342d3234203d3e20323636333636.roa
File: 3137302e38302e33332e302f32342d3234203d3e20323636333636.roa (raw, json)
Hash identifier: xM4czYcALfM0GD9ON8a1Zqnqqak66LIgOOJ24GAKwqI=
Subject key identifier: B2:5A:55:8E:04:24:78:30:80:AD:2E:87:A0:34:05:27:A4:08:9F:B4
Certificate issuer: /CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Certificate serial: 3AEAE80D47CF00AA9DCD76AA6DC37AB98825F28E
Authority key identifier: A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33332e302f32342d3234203d3e20323636333636.roa
Signing time: Tue 11 Apr 2023 15:00:47 +0000
ROA not before: Tue 11 Apr 2023 14:55:47 +0000
ROA not after: Tue 09 Apr 2024 15:00:47 +0000
asID: 266366
IP address blocks: 170.80.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ea:e8:0d:47:cf:00:aa:9d:cd:76:aa:6d:c3:7a:b9:88:25:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A409DECEEE73EEAC337FAA25ABC137DDB66BEC76
Validity
Not Before: Apr 11 14:55:47 2023 GMT
Not After : Apr 9 15:00:47 2024 GMT
Subject: CN=B25A558E0424783080AD2E87A0340527A4089FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c4:7d:15:ce:5a:36:47:3a:90:fb:2e:b6:84:
4a:e6:c0:97:ed:78:5b:54:25:f2:b9:ac:81:d5:6a:
9d:9a:53:06:2e:b4:f0:57:43:8c:ce:09:5b:8c:68:
c2:00:8a:50:37:c7:60:16:25:30:8a:b3:cb:bb:cc:
fe:c8:19:05:0d:05:fe:f1:5e:40:61:86:1d:a5:6b:
06:b8:d9:27:19:44:8f:fa:ec:5f:46:9c:e9:3d:78:
48:54:66:b0:0a:ca:fd:47:d7:21:68:97:03:ca:68:
f3:93:9b:24:20:b1:34:cb:b1:52:76:db:81:b5:52:
9f:d1:46:d6:62:bb:47:af:ed:fb:a7:c3:07:b6:fa:
2a:5f:a0:81:ed:cb:cf:ff:59:22:8c:51:cf:2c:da:
14:42:02:5b:40:36:b2:14:2e:4d:9f:57:82:6e:1a:
06:4f:fb:59:53:67:96:7d:53:b1:85:39:3e:de:c1:
93:1f:04:d0:d2:36:ec:f1:81:13:93:bf:07:82:44:
19:19:05:92:7b:e5:f6:cb:e1:38:ea:67:12:d0:a2:
55:d1:83:84:6c:46:50:c3:ea:5f:1b:20:c7:d7:f8:
d2:fd:ba:6a:f6:cf:97:47:6c:c4:ce:43:6a:c3:70:
2b:da:2f:2e:59:c2:7c:a8:1e:70:a6:ff:c9:bc:c2:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:55:8E:04:24:78:30:80:AD:2E:87:A0:34:05:27:A4:08:9F:B4
X509v3 Authority Key Identifier:
keyid:A4:09:DE:CE:EE:73:EE:AC:33:7F:AA:25:AB:C1:37:DD:B6:6B:EC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A409DECEEE73EEAC337FAA25ABC137DDB66BEC76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AU3PboZurKYmQotcZmyTbqngCbZ141VSTgVGCkL7HYht/0/3137302e38302e33332e302f32342d3234203d3e20323636333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.33.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:89:0d:97:2d:6a:8a:74:53:85:52:3e:5a:47:9b:f7:55:
0c:db:f3:82:90:57:fa:30:c1:ab:4e:88:e1:8c:2d:ff:3e:ba:
fa:d0:ae:41:9d:16:98:2b:c7:d9:dd:a0:8c:3f:11:c4:2f:13:
c6:4e:4b:86:fd:03:59:8a:17:41:ed:7e:71:3e:f1:dd:d2:2f:
38:5d:61:c8:43:cd:e2:76:05:39:65:15:3a:39:be:c0:f7:6d:
70:a0:09:a6:06:cd:56:e0:ef:30:a0:91:be:5c:07:b4:b7:f5:
e0:ee:7e:3b:a6:77:83:07:7a:81:65:74:5a:6a:58:c4:74:e2:
ae:ce:ca:43:da:e3:28:2a:91:cf:f2:0e:71:aa:0d:58:db:b3:
ad:3d:ef:47:4e:31:87:03:61:af:db:10:14:de:6c:10:62:ef:
cd:14:8d:8b:71:0b:f3:e5:dd:32:3d:ee:f8:58:79:78:06:a6:
52:75:f8:76:33:fb:0e:18:a5:98:0b:e5:68:b4:f9:fa:5c:e4:
2e:d3:71:64:f2:df:3b:77:4f:40:8e:48:c2:6e:fb:4c:e1:09:
af:ee:e5:9a:23:55:d7:48:c7:b8:dc:74:46:67:5d:6d:c5:3a:
8d:b4:f8:44:ad:61:0d:f7:37:be:eb:99:94:52:0f:2b:7e:68:
77:e9:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org