Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
File: 3137302e3135302e342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier: H5LMmTQN0bxqyeRV0ki9OlSqpzbFNTgVAETI9Naq42A=
Subject key identifier: 30:0A:1A:2D:8D:73:B0:D5:E1:57:79:34:E3:9D:B9:E0:BB:A0:48:64
Certificate issuer: /CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
Certificate serial: 28C3826AD11E3658AE70497738B4E903B35AE552
Authority key identifier: AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
Signing time: Fri 03 May 2024 20:04:45 +0000
ROA not before: Fri 03 May 2024 19:59:45 +0000
ROA not after: Fri 02 May 2025 20:04:45 +0000
asID: 53080
IP address blocks: 170.150.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c3:82:6a:d1:1e:36:58:ae:70:49:77:38:b4:e9:03:b3:5a:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
Validity
Not Before: May 3 19:59:45 2024 GMT
Not After : May 2 20:04:45 2025 GMT
Subject: CN=300A1A2D8D73B0D5E1577934E39DB9E0BBA04864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:4c:0d:36:1c:c5:a2:ac:72:c2:39:3a:b6:
36:43:c1:b5:0f:3d:bb:97:d4:99:8a:fc:79:fa:f0:
bf:eb:19:2f:24:10:0c:68:16:69:a1:42:b7:ec:6f:
1d:79:ab:7c:6d:0d:70:22:03:a2:4c:e7:6c:b4:85:
fe:e0:91:8a:49:0f:e1:94:71:c3:22:5a:61:51:e7:
ac:ce:c3:9c:46:55:90:59:74:cd:c9:3b:d6:8e:72:
90:de:22:44:e9:b1:10:72:c4:45:c1:04:2f:81:61:
a9:8f:28:da:99:9e:ad:c3:42:13:30:20:c3:5e:7e:
fc:d2:d7:d1:3c:7c:b0:f1:12:73:e7:d1:28:54:77:
a7:82:0b:12:02:66:a7:41:cc:63:43:0c:05:1e:3a:
13:6c:5b:ca:93:e2:2b:16:9b:ea:c5:de:ba:7e:7b:
98:92:3a:93:01:7d:9b:29:bf:03:c4:c3:41:2a:c3:
14:a4:6d:aa:ee:3f:90:2b:01:89:33:8b:db:c5:95:
e7:f5:8f:25:92:75:c2:89:ca:bd:6b:5e:36:60:a4:
2b:f7:51:a6:ee:63:38:49:53:ab:48:70:89:45:ee:
e0:27:6e:44:da:df:dd:59:98:5a:fd:0e:13:d9:c8:
d3:a2:f8:04:cf:7b:fe:1e:27:32:96:31:02:dc:29:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:1A:2D:8D:73:B0:D5:E1:57:79:34:E3:9D:B9:E0:BB:A0:48:64
X509v3 Authority Key Identifier:
keyid:AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3137302e3135302e342e302f32322d3234203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.4.0/22
Signature Algorithm: sha256WithRSAEncryption
97:46:74:d1:06:4a:ee:e3:72:0e:a9:67:8f:12:2a:44:c2:92:
77:96:cc:c9:b8:cc:4d:33:8b:5b:bb:63:1d:ad:de:27:7d:6f:
c2:78:7c:09:ad:98:73:ba:86:de:94:74:91:3b:d5:bf:e6:38:
c8:3b:d2:17:7c:69:67:bf:ad:f9:19:ed:d6:4a:4b:5d:fb:0c:
10:71:dd:82:2b:e6:78:a4:89:6a:4d:20:2b:bf:c3:bc:e6:07:
6b:44:70:a8:9b:8c:ee:13:89:75:36:2f:1c:24:c3:bd:b5:b1:
27:21:bc:12:9b:bd:6d:b9:e2:4b:a2:88:cb:2a:57:69:e9:27:
37:88:f8:5b:7c:54:78:60:8e:ad:ed:af:3d:a5:94:93:db:48:
59:d1:a6:9f:fa:76:c8:8d:28:8c:bb:f2:e7:d3:73:87:35:5c:
40:70:fc:0a:ae:80:01:0b:03:7d:fb:1c:cd:4d:f9:53:bb:00:
a5:aa:ab:3c:6f:05:ec:be:91:6a:26:94:be:ef:f1:dd:43:b7:
78:2d:8b:7b:c0:d8:2a:a6:50:8b:49:3a:19:4e:77:09:21:ea:
b8:19:3b:20:82:6b:65:c9:12:eb:aa:50:c0:86:8c:d0:43:a1:
e7:b3:bd:4b:53:c6:03:06:bb:84:04:3c:df:e1:57:21:5b:81:
7f:2b:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org