Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230312e302f32342d3234203d3e20323633393938.roa
File: 3137302e3234352e3230312e302f32342d3234203d3e20323633393938.roa (raw, json)
Hash identifier: 8v/iSv4mJxac2iR3k6sFgU+6tzO5jIUFWHSxVCzaXAA=
Subject key identifier: 2C:F9:28:78:6E:C1:7D:AD:96:2C:0F:36:F3:E5:07:B7:3E:F1:BB:F0
Certificate issuer: /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial: 0C8D88A1D9A88C9E9F935F0D6D560E1B8E058010
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230312e302f32342d3234203d3e20323633393938.roa
Signing time: Mon 24 Apr 2023 18:18:52 +0000
ROA not before: Mon 24 Apr 2023 18:13:52 +0000
ROA not after: Mon 22 Apr 2024 18:18:52 +0000
asID: 263998
IP address blocks: 170.245.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8d:88:a1:d9:a8:8c:9e:9f:93:5f:0d:6d:56:0e:1b:8e:05:80:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Validity
Not Before: Apr 24 18:13:52 2023 GMT
Not After : Apr 22 18:18:52 2024 GMT
Subject: CN=2CF928786EC17DAD962C0F36F3E507B73EF1BBF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:79:1f:b6:ae:94:d3:75:2d:ed:43:7b:66:
61:fe:b7:6c:b8:a4:6c:ee:ea:05:06:73:2d:7e:2a:
b5:2f:2c:40:60:25:bd:54:a0:02:ec:55:10:e7:f5:
3d:8a:7d:fa:1e:2d:e1:34:22:8b:66:3f:ae:53:6d:
48:6a:54:fb:6a:d2:e0:35:6a:89:25:85:a3:1b:9f:
f4:39:10:1f:1d:4a:c7:a0:7f:2b:31:a0:70:73:b2:
2b:a2:44:fd:e7:e4:1b:0d:61:76:b8:17:7f:77:8e:
cd:1f:da:e6:81:8d:60:93:97:d1:1d:23:54:19:7e:
62:99:ab:05:b2:81:07:41:98:ba:84:f8:42:75:cb:
bc:f1:fa:e2:1c:7e:9a:cb:1f:27:94:7d:c3:02:a1:
f0:72:56:a3:67:54:f9:89:c1:f4:f9:0d:1a:68:c4:
92:e9:ab:02:b8:2e:53:00:ec:cf:3e:d5:e4:59:cd:
8d:4c:35:60:96:e7:87:51:95:4b:3a:03:92:be:4f:
9b:99:c8:ad:99:10:9f:d9:87:83:4c:98:93:b5:6a:
f8:70:48:5b:06:6f:44:1b:a2:39:e1:53:d4:67:f8:
47:17:a6:a6:52:ef:55:bd:2b:a8:7d:a4:97:0b:6f:
54:cb:a7:eb:3a:3d:09:06:e8:6d:70:ca:4c:65:28:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:28:78:6E:C1:7D:AD:96:2C:0F:36:F3:E5:07:B7:3E:F1:BB:F0
X509v3 Authority Key Identifier:
keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230312e302f32342d3234203d3e20323633393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:40:3c:ec:13:67:f7:68:0b:7d:03:4c:ac:e7:ea:c4:f8:49:
16:d3:ce:1a:da:fb:b2:6c:cf:42:bd:a0:dd:c1:f3:69:ed:ff:
9c:16:d7:d2:85:8f:58:a2:44:92:04:ac:ba:e3:03:9d:50:05:
3b:5e:dc:f1:61:8f:27:8a:bd:9a:63:e1:1c:61:dc:70:81:59:
b4:ab:a2:2b:97:93:43:ed:19:6b:49:b1:cf:bd:ae:74:8a:64:
df:f8:a9:db:9d:7b:58:85:1e:df:a5:c9:f4:83:fa:27:1e:b7:
5f:2f:f2:49:25:38:5a:a8:3d:0e:e7:27:6d:79:46:7a:fe:48:
c1:96:62:ba:80:58:3b:65:45:2f:40:18:56:aa:28:93:cb:e3:
6d:b0:62:91:17:f6:d3:02:ae:7c:71:01:df:9c:0c:6c:5f:9c:
89:9c:d0:57:93:39:b5:bd:52:fa:ba:25:15:80:2e:51:6d:2e:
f3:ae:bd:d1:a4:01:ae:fc:b7:25:5e:b9:49:ea:13:0a:d6:6b:
b7:2a:a6:74:36:49:11:95:7e:df:23:90:64:db:19:7e:29:ca:
b8:17:08:80:ca:de:1c:26:86:19:f9:7e:9e:66:72:90:32:30:
27:00:ff:53:13:cb:f5:10:7e:f0:fc:be:9a:b8:af:85:00:de:
1b:8d:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:03:57 2025 by rpki-client