Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
File: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (raw, json)
Hash identifier: JuNNGOyyklvatOTdeSaPf+Jv2poHhEp6Yduhuku1JbE=
Subject key identifier: 42:CE:1A:E2:D7:D6:9D:4D:A4:40:D0:D1:A8:FB:F8:6E:10:15:D1:D1
Certificate issuer: /CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
Certificate serial: 29C1BD08E9FF9A0A7E872D55AD8791D62DDD401D
Authority key identifier: 23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
Signing time: Wed 01 Nov 2023 22:01:23 +0000
ROA not before: Wed 01 Nov 2023 21:56:23 +0000
ROA not after: Wed 30 Oct 2024 22:01:23 +0000
asID: 264992
IP address blocks: 170.84.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c1:bd:08:e9:ff:9a:0a:7e:87:2d:55:ad:87:91:d6:2d:dd:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
Validity
Not Before: Nov 1 21:56:23 2023 GMT
Not After : Oct 30 22:01:23 2024 GMT
Subject: CN=42CE1AE2D7D69D4DA440D0D1A8FBF86E1015D1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:6d:4c:19:80:df:de:d0:f4:8a:21:76:c8:
25:05:99:e0:44:d9:7b:ee:9b:6d:fe:c9:02:9f:15:
fe:bb:6b:60:31:68:74:9f:08:66:03:c5:05:8f:ff:
1a:65:8e:08:23:b3:d2:03:2f:06:f4:2b:79:0f:d9:
33:43:2b:18:1f:20:fc:44:e2:6f:bc:ef:bc:85:dc:
d6:13:f4:04:9b:d3:19:4b:13:e6:b4:1d:0f:64:85:
d4:b4:56:a7:2f:35:8e:e5:d9:67:74:22:e7:54:27:
45:26:18:e4:c7:1a:d3:22:42:31:09:c3:15:08:69:
49:ae:e5:0b:aa:da:b6:17:7c:10:d1:07:dc:6f:97:
e4:f6:da:88:34:ee:27:d9:e4:fd:6b:03:5f:e4:f8:
33:7f:f0:1e:c3:8f:e0:79:1d:8e:de:6c:58:bf:b1:
47:cb:14:de:a9:5b:90:36:d0:0c:ef:48:2b:7b:23:
4c:ca:84:cb:c2:fd:77:3f:d6:80:87:8c:4a:25:a7:
1a:81:72:2a:f5:54:1d:e2:09:c0:72:33:8d:b0:4d:
ba:ee:4f:4d:91:84:03:5d:d8:8b:c6:1a:2c:c6:05:
fe:59:90:29:91:c9:4f:e2:a7:13:87:b0:b9:c5:a0:
28:ca:53:b5:1d:e5:15:a5:31:3f:47:ec:77:5a:42:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:1A:E2:D7:D6:9D:4D:A4:40:D0:D1:A8:FB:F8:6E:10:15:D1:D1
X509v3 Authority Key Identifier:
keyid:23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c5:f6:7d:cb:6d:07:89:19:e4:c3:f2:df:1b:28:b3:2f:84:
82:23:05:73:d6:16:86:ec:70:50:45:50:50:0c:0e:07:e5:d7:
2a:19:59:f5:c8:b9:9e:ad:ee:08:97:7e:c7:25:1b:ae:29:0d:
32:e1:9d:73:44:3b:9c:a1:84:47:b8:0e:16:1c:c0:eb:b2:54:
73:d6:57:59:51:3a:bc:70:f4:f1:e5:18:64:f6:fe:c6:ff:b6:
2f:e5:83:2b:42:54:79:76:d3:8a:d0:d7:0a:04:96:6f:98:34:
c5:5d:89:3e:2b:db:51:e8:7f:d3:08:0e:e7:44:02:a5:2a:15:
00:65:3e:5d:d3:f5:cd:45:82:26:95:58:d3:82:17:11:33:68:
54:a8:01:d6:7e:c5:f2:37:e2:38:d0:72:2f:de:e5:ba:ac:aa:
f4:78:31:16:67:da:89:c1:3c:ba:eb:52:97:b3:7a:22:d8:4d:
25:4c:b8:5c:99:0b:50:48:7c:2f:84:c4:f1:aa:2f:75:2a:12:
52:23:e0:6a:7f:e0:13:57:4c:11:a5:39:20:72:ea:76:de:02:
dd:c5:e5:a2:0f:2d:a9:8c:9e:ec:2f:d6:b1:6a:11:84:ea:7e:
ac:54:9a:69:4d:7b:f0:1d:a0:e5:84:13:b6:36:83:05:03:17:
f9:49:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:23 2025 by rpki-client