Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa
File: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (raw, json)
Hash identifier: W9u+WVSMVBeRkR4jCyqMDk3VKdly7uSQiyeYFnxOlf4=
Subject key identifier: 8E:03:FA:AD:1E:D5:10:BF:55:0F:7B:12:09:15:78:40:71:99:C9:F8
Certificate issuer: /CN=25E432BB134D4E238BDA77694201D4BC41974E05
Certificate serial: 5A49CE11C7441E8633F97EF2DB406D74F640D1E3
Authority key identifier: 25:E4:32:BB:13:4D:4E:23:8B:DA:77:69:42:01:D4:BC:41:97:4E:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa
Signing time: Thu 04 Apr 2024 03:51:18 +0000
ROA not before: Thu 04 Apr 2024 03:46:18 +0000
ROA not after: Thu 03 Apr 2025 03:51:18 +0000
asID: 271007
IP address blocks: 170.254.236.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:49:ce:11:c7:44:1e:86:33:f9:7e:f2:db:40:6d:74:f6:40:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25E432BB134D4E238BDA77694201D4BC41974E05
Validity
Not Before: Apr 4 03:46:18 2024 GMT
Not After : Apr 3 03:51:18 2025 GMT
Subject: CN=8E03FAAD1ED510BF550F7B12091578407199C9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:9e:de:dd:df:7d:a0:a8:cb:b2:87:ba:a2:
90:48:d6:e6:fa:de:c1:cf:28:66:4c:dd:56:8d:12:
e2:f9:1e:ff:c2:55:19:71:8b:c4:4d:d5:f0:62:65:
3b:c9:50:fc:a1:15:5a:da:56:16:c9:90:ee:a9:5d:
ef:ba:78:d6:16:c2:a2:66:d0:ff:67:2c:b0:77:8e:
40:6b:e3:5f:e1:f2:3e:63:70:8e:61:fb:e7:91:d4:
2a:ce:88:49:f9:98:b2:4c:ec:a9:6c:19:22:a1:d0:
97:9c:46:3c:1b:8e:76:c1:52:16:35:72:2f:db:dd:
6a:5a:c0:b4:9b:d7:51:8d:13:a3:77:99:de:ff:f8:
c2:34:51:b1:e5:b1:56:91:48:8d:7e:60:ff:29:22:
72:4c:10:11:6d:0f:da:61:fb:8b:32:3c:ca:dd:47:
78:a5:b2:79:00:54:58:0f:18:4e:e4:ea:da:2e:68:
21:ca:be:d2:f5:4e:82:67:a3:f1:d3:18:ae:b4:6f:
f6:88:a2:8d:77:56:a7:da:a7:12:a4:fa:97:fc:89:
71:e0:62:a4:f9:70:f8:80:a7:ce:b0:30:4a:eb:6a:
91:08:74:b6:11:fc:a5:a3:b6:c3:75:9a:ad:27:19:
2d:85:21:ee:71:4c:1f:31:58:9a:71:26:69:85:7f:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:FA:AD:1E:D5:10:BF:55:0F:7B:12:09:15:78:40:71:99:C9:F8
X509v3 Authority Key Identifier:
keyid:25:E4:32:BB:13:4D:4E:23:8B:DA:77:69:42:01:D4:BC:41:97:4E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.236.0/22
Signature Algorithm: sha256WithRSAEncryption
15:95:42:d8:52:8f:ba:c5:39:a4:a7:fa:a1:34:df:0c:5f:6b:
c5:66:c5:d3:93:56:3c:71:28:37:4a:95:e2:9b:f9:f7:1b:57:
6a:67:32:27:d9:6b:6b:76:30:7d:b0:e7:4a:cb:85:bb:94:17:
7e:1f:4c:b0:54:62:fa:39:84:94:4f:1d:67:37:2c:a2:68:ed:
de:e0:9f:8d:78:ab:11:2f:af:9d:3d:e9:5f:d2:45:04:75:8a:
2b:02:92:21:9a:2b:e5:1c:3c:12:d9:9c:22:6f:57:fe:9c:ca:
60:c7:ea:39:a0:28:36:f0:0f:d0:ba:84:4f:2a:2f:c5:49:2d:
50:46:20:17:1a:94:b5:4f:ef:58:c1:c8:be:55:cf:14:8a:75:
af:6e:00:ad:bc:2c:f5:7c:a4:1a:fe:1c:3c:36:4d:41:a9:e6:
ba:05:83:2f:97:69:e4:9e:2b:62:54:65:38:fb:b2:9e:23:cd:
4e:d0:da:0c:63:35:08:35:bc:10:23:92:2f:f0:d2:69:53:12:
57:e2:52:70:aa:04:49:ba:6c:1d:3d:5d:b3:8f:d8:c1:50:3c:
e4:79:8c:e7:e2:53:44:d5:61:87:0d:d1:9b:56:a3:c7:d1:65:
df:3d:3d:49:a2:b9:08:7c:6d:e2:ef:9e:16:52:8b:79:e2:a4:
d7:63:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 14:14:25 2024 by rpki-client on console-ams.rpki-client.org