Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa
File: 3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa (raw, json)
Hash identifier: z1BiLvzPmYppxz89qzvGlcV1/sOht5vufZUVqC4JANI=
Subject key identifier: DB:BA:72:1E:27:67:23:66:50:AE:B0:87:2B:CF:DC:74:45:92:5C:17
Certificate issuer: /CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Certificate serial: 555D2AAE7836824A0E3886229564E9616493F1C1
Authority key identifier: 03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa
Signing time: Fri 06 Sep 2024 18:15:28 +0000
ROA not before: Fri 06 Sep 2024 18:10:28 +0000
ROA not after: Fri 05 Sep 2025 18:15:28 +0000
asID: 271007
IP address blocks: 170.254.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5d:2a:ae:78:36:82:4a:0e:38:86:22:95:64:e9:61:64:93:f1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Validity
Not Before: Sep 6 18:10:28 2024 GMT
Not After : Sep 5 18:15:28 2025 GMT
Subject: CN=DBBA721E2767236650AEB0872BCFDC7445925C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:7c:54:b3:6e:eb:5f:04:d2:b3:d4:92:38:
72:36:43:e8:d4:9c:4d:73:04:71:a6:d6:c0:86:56:
c7:1b:bc:4c:16:7a:17:8e:45:41:1e:86:eb:f6:8c:
73:75:f4:a0:42:8e:6d:9b:bc:c5:49:21:01:37:a5:
95:06:dc:eb:fa:38:19:f3:f4:02:fc:00:b4:a9:f5:
52:40:bc:8f:2a:5d:59:cb:a0:44:ba:3a:58:de:a7:
27:e4:57:59:f6:d7:6e:5d:64:f5:7e:f2:48:4d:75:
0e:29:4b:b6:37:36:5f:0a:7e:17:fc:6c:a6:bd:e5:
d7:73:b4:1c:c6:9c:01:a1:d1:4a:50:8b:5e:aa:d2:
6b:57:29:c5:0f:c9:22:94:31:39:bb:6c:1a:d3:ec:
31:8f:13:82:65:6a:f2:4e:36:69:90:e9:90:8e:f1:
e8:14:e0:d3:eb:27:47:c6:20:93:c1:06:3d:0e:18:
8d:12:ac:87:93:c4:71:fe:d4:c3:95:f0:4f:01:b3:
e0:7a:9b:1b:7d:ef:6e:f8:a4:2a:a2:c6:e3:64:d2:
d5:a9:b6:74:44:ad:e3:81:a4:fb:8b:e0:3b:94:0b:
2c:67:14:80:d1:b5:32:58:68:29:6e:8b:b9:c1:b1:
01:ef:8e:ca:25:70:d2:82:d5:bf:15:34:ab:05:22:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:72:1E:27:67:23:66:50:AE:B0:87:2B:CF:DC:74:45:92:5C:17
X509v3 Authority Key Identifier:
keyid:03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/031B7A807743AC5BE7218B45A482A2BB809962D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3232203d3e20323731303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.236.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ef:c2:7d:50:a0:64:a6:70:50:a1:f9:0b:08:3b:0d:85:aa:
ac:4e:97:c5:e1:ca:7b:84:34:e0:21:1e:c7:a1:59:1c:13:08:
87:fd:95:9b:3c:ca:ae:68:ce:da:e3:e3:3d:d4:84:28:d5:30:
4b:86:4c:db:0b:9e:07:f7:66:b8:bd:39:88:9c:eb:3f:3d:46:
d4:d0:fe:2a:97:29:62:83:3a:2f:5b:44:bb:e7:ad:0d:b0:12:
ea:ff:f1:d1:ef:aa:d2:a2:21:82:60:c8:a2:b5:fb:a0:97:05:
de:4a:69:a1:46:ac:c2:a3:ac:64:90:1c:a3:91:4b:23:56:83:
96:50:a6:e5:05:d0:42:d2:29:ca:b7:89:92:7d:67:e3:9e:e2:
29:62:5b:c7:17:71:3f:14:8c:56:bb:31:de:7b:28:fb:e7:a7:
3b:d4:f3:96:af:4f:23:8f:a9:47:df:c8:a9:35:27:84:d3:75:
56:84:32:03:25:c7:fb:4f:bc:ef:dd:93:f3:0b:0f:5a:91:8e:
ee:39:98:25:a6:a2:ae:33:49:77:50:23:9f:92:49:aa:ba:a4:
e0:6d:29:a2:c7:66:c2:d4:85:38:aa:ac:c3:7e:f9:5e:cd:c0:
73:96:52:6e:f1:03:cb:6d:37:0e:e8:42:f3:02:72:fc:f0:4a:
66:16:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:47:09 2025 by rpki-client