Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
File: 3137302e38342e34382e302f32332d3233203d3e20323635303232.roa (raw, json)
Hash identifier: Dxi17u9iEO9RWeUQj7lk0FmL1pN9OX5nEYy8vfUNAYA=
Subject key identifier: 8F:D3:3B:76:5F:30:55:AA:09:40:CF:C9:FE:D7:9D:A6:88:20:61:F5
Certificate issuer: /CN=75730747EE0CCC4C66AB50829F21FF172F57999D
Certificate serial: 6D5B21E7112987F008FF3DEB7B912429B5730886
Authority key identifier: 75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
Signing time: Thu 04 Apr 2024 05:48:28 +0000
ROA not before: Thu 04 Apr 2024 05:43:28 +0000
ROA not after: Thu 03 Apr 2025 05:48:28 +0000
asID: 265022
IP address blocks: 170.84.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5b:21:e7:11:29:87:f0:08:ff:3d:eb:7b:91:24:29:b5:73:08:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75730747EE0CCC4C66AB50829F21FF172F57999D
Validity
Not Before: Apr 4 05:43:28 2024 GMT
Not After : Apr 3 05:48:28 2025 GMT
Subject: CN=8FD33B765F3055AA0940CFC9FED79DA6882061F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:e3:18:00:e4:f5:25:9f:0a:59:19:fe:8a:
73:90:ed:bf:41:1a:03:9c:23:7c:aa:b8:2e:ec:43:
60:1b:24:77:f8:98:e2:09:fa:28:93:bc:49:6f:39:
01:d7:00:1a:c9:6a:ed:ff:14:b8:8d:31:4c:6d:cc:
4b:56:92:cf:32:ae:65:c1:b4:19:3f:ef:91:8e:88:
5a:5c:92:d6:c2:9c:17:85:01:2e:7f:17:c6:75:db:
ac:46:30:62:b6:d5:fd:17:ec:c4:25:96:c3:c3:9c:
ae:6e:12:98:f2:78:b0:a0:f7:81:a2:75:d0:21:ce:
8d:b3:94:f3:65:f2:b1:af:b5:cf:af:43:fc:e8:8f:
7a:24:2b:58:c5:5b:62:c5:54:03:11:83:7d:13:97:
64:04:0e:89:fe:88:90:68:9f:a3:29:68:96:aa:ec:
ed:fe:a4:f4:63:b3:16:b9:47:92:a3:fa:c0:47:90:
b1:7a:6c:ba:40:00:9a:d9:e9:2e:73:41:2e:65:bd:
1b:3c:28:0f:29:3e:7e:bc:19:54:04:f1:1b:72:9f:
b3:08:05:74:17:71:3d:be:95:32:ff:21:e5:0e:30:
c1:4b:93:57:3f:3e:7a:93:0a:77:e3:95:12:f7:03:
96:6c:13:26:46:86:f3:7f:61:a1:67:2f:53:2f:1c:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:3B:76:5F:30:55:AA:09:40:CF:C9:FE:D7:9D:A6:88:20:61:F5
X509v3 Authority Key Identifier:
keyid:75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.48.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:c3:a8:22:b6:cd:ef:03:5f:db:72:11:5b:6c:d8:3e:78:eb:
26:3b:d6:23:4e:d7:55:de:3f:f6:76:0b:30:6c:16:b1:13:82:
96:b7:02:53:69:2f:a5:4f:c2:50:9a:59:5f:35:c9:d8:04:b4:
a1:31:d3:f1:fc:e7:e6:99:c2:8e:76:60:08:4c:c0:ec:a6:87:
15:41:26:f9:5a:1d:3b:64:5e:ac:dd:90:14:9b:b3:bf:8e:da:
78:62:a6:3e:85:07:b6:45:e1:d4:f7:26:50:ca:6d:0f:4a:63:
92:c3:d2:d8:df:f8:88:a1:40:12:e8:79:3c:c5:fb:14:8a:18:
7e:8b:da:36:b8:41:3e:06:25:42:df:7e:42:e1:7b:f5:3c:d4:
03:4e:af:e3:17:05:e6:40:77:4f:57:50:2a:51:03:78:6c:2c:
a4:d8:92:6e:65:71:4e:32:5e:a4:aa:7e:82:e6:2c:66:fd:41:
7b:fd:23:13:bd:13:29:b6:1f:c7:7c:ec:7e:f8:71:4a:0f:05:
18:fc:ca:02:d1:86:39:7d:47:b3:71:6e:08:9d:88:13:82:ea:
28:36:fb:25:e3:9d:85:0b:49:91:e3:50:ca:e8:22:8e:2f:19:
01:51:5c:17:ae:f1:6a:18:c9:02:a8:ff:0d:5d:fe:64:31:a7:
76:82:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:23:28 2025 by rpki-client