Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
File: 3137302e3135302e342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier: nCcoFwhKx5U+ZaXpoqwYLmGNXx2QaRIs4Ngupr5Ehu4=
Subject key identifier: 49:D8:80:47:D0:B3:4B:E0:16:A5:A2:2D:F0:B5:5E:96:1C:CC:B5:B9
Certificate issuer: /CN=3894D8226D8DE38887812D39103AE1FA7F305173
Certificate serial: 2C42FB45E8C7E4411D1C56F9ED77560F62AAFA27
Authority key identifier: 38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
Signing time: Fri 09 Dec 2022 11:53:27 +0000
ROA not before: Fri 09 Dec 2022 11:48:27 +0000
ROA not after: Fri 08 Dec 2023 11:53:27 +0000
asID: 53080
IP address blocks: 170.150.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:42:fb:45:e8:c7:e4:41:1d:1c:56:f9:ed:77:56:0f:62:aa:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3894D8226D8DE38887812D39103AE1FA7F305173
Validity
Not Before: Dec 9 11:48:27 2022 GMT
Not After : Dec 8 11:53:27 2023 GMT
Subject: CN=49D88047D0B34BE016A5A22DF0B55E961CCCB5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:c7:a7:54:4b:5b:e7:11:f9:b0:18:5b:a3:
2b:f8:db:ea:e5:36:3d:1b:8a:5c:80:dc:b8:a4:40:
1d:60:66:1b:87:fe:fb:d5:02:57:0b:d1:66:20:5b:
0c:95:a4:cc:5d:ba:5c:1a:6e:a2:0f:2e:9e:c4:5e:
71:1e:c0:a6:df:86:88:54:d9:b5:39:01:38:9d:79:
a7:3e:19:c4:ba:66:af:1e:a3:ec:52:83:e4:e0:40:
df:09:f6:56:cc:df:4e:ad:70:26:9e:44:74:f9:57:
f6:6b:8e:7f:53:9a:85:4e:d7:32:a6:26:8d:83:b7:
79:b5:1d:2d:fc:2d:97:0d:62:2e:fe:d1:e2:72:88:
7b:4a:2f:f8:15:b0:d6:39:9f:39:2a:92:ce:9c:56:
9c:0a:56:f5:a6:28:1a:e2:ba:73:8f:54:55:f0:9a:
40:79:74:e5:cc:f5:f0:6e:7f:2e:75:ea:54:05:3d:
3f:37:bc:58:dc:21:29:57:b0:91:07:bc:3b:a8:47:
ce:46:eb:73:c1:2f:f7:52:4a:67:61:45:28:4d:3e:
62:45:6e:0c:88:31:cc:be:c5:74:f6:93:ab:64:32:
6f:a7:e2:2e:0f:45:2c:53:86:53:58:4e:6a:54:96:
e1:b8:89:65:26:90:5a:5c:83:35:b3:08:05:2a:59:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:80:47:D0:B3:4B:E0:16:A5:A2:2D:F0:B5:5E:96:1C:CC:B5:B9
X509v3 Authority Key Identifier:
keyid:38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:0e:b9:e3:41:50:93:2f:2e:6b:4f:92:80:9c:5d:8b:9e:64:
d4:9b:49:3c:19:3f:86:8b:d8:85:40:ac:6b:a0:c7:81:95:6c:
63:0c:76:14:c8:11:df:0b:a3:38:a5:96:02:3e:93:9f:4c:bb:
5b:f3:f3:df:57:24:a2:88:a4:9c:f5:ce:d7:36:1c:7b:19:19:
59:7c:c4:0d:d2:c5:38:0d:91:98:dc:9b:fd:3e:af:38:9d:40:
1e:3e:70:67:a5:3b:b2:26:f6:ce:f9:7a:74:f1:a1:57:29:22:
6f:b6:e6:6d:3e:02:2f:e4:61:0e:e0:6f:98:be:52:ad:c5:38:
f8:34:17:62:16:fa:69:2d:d9:f3:06:f0:ce:3b:c2:2a:ba:ab:
81:ac:f6:59:74:f7:88:e2:91:4b:bc:cd:6f:d4:7f:dc:1a:57:
ec:2d:34:0c:ce:dd:95:af:f6:57:84:01:9d:b6:fd:c6:b3:f0:
e1:e5:f8:fe:74:d9:2e:9c:6d:fe:db:b2:02:d1:14:77:0e:6b:
17:6a:85:85:c6:62:2d:d6:8e:83:89:16:67:bb:73:4e:9a:be:
df:a4:1c:41:9c:01:12:9d:12:c5:b2:a7:17:3a:b1:8d:e7:1a:
f2:71:48:58:9d:b9:9e:e0:d6:95:d3:e6:47:65:59:1e:03:9f:
f8:64:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org