Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
File: 3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier: grgzONN0g7icJQWCYTlAoBbUi0mb2IZCbDCwAKzA54Q=
Subject key identifier: 73:3A:2E:0D:87:E5:D5:C0:D5:0A:A4:BF:5F:81:A3:B7:C8:2F:41:C7
Certificate issuer: /CN=097A379238840A51C27C092F1F3A3CA34B8AD37B
Certificate serial: 7495ECFAD58F515FD46EC52722FE38C89B9FB271
Authority key identifier: 09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
Signing time: Fri 03 May 2024 20:02:33 +0000
ROA not before: Fri 03 May 2024 19:57:33 +0000
ROA not after: Fri 02 May 2025 20:02:33 +0000
asID: 264299
IP address blocks: 170.254.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:95:ec:fa:d5:8f:51:5f:d4:6e:c5:27:22:fe:38:c8:9b:9f:b2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097A379238840A51C27C092F1F3A3CA34B8AD37B
Validity
Not Before: May 3 19:57:33 2024 GMT
Not After : May 2 20:02:33 2025 GMT
Subject: CN=733A2E0D87E5D5C0D50AA4BF5F81A3B7C82F41C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:f0:c0:a4:9c:86:82:b9:85:42:61:e1:5d:
13:b9:a1:aa:c6:a2:b2:4d:9e:69:ad:00:21:32:47:
f1:b4:70:f9:11:dc:4b:c8:2a:2b:50:c4:e1:fe:01:
4b:c2:16:a8:74:dc:d1:53:a6:ad:02:3a:21:f4:e5:
63:ee:72:c8:64:db:ce:13:0e:f7:db:68:16:16:b6:
2b:f6:39:2e:40:15:d2:79:85:c5:35:30:e2:d3:d0:
49:34:80:6c:9a:10:bd:02:80:98:e8:19:93:a0:52:
b8:87:d6:64:5a:45:18:13:cf:ed:9b:23:ea:71:4b:
22:c6:5c:b5:36:8f:e2:5d:96:c0:18:d1:27:03:e9:
c4:3f:41:b2:d8:27:9e:66:e7:6c:e8:a9:58:6b:61:
77:b7:ee:64:4b:f9:b4:cd:7c:3b:0f:04:d9:af:de:
eb:b2:79:09:c7:3a:1e:ab:2b:8f:02:49:8e:b0:d5:
41:a2:d8:82:b9:44:b8:ee:60:35:e1:3b:85:b7:54:
0a:ac:77:d3:68:8c:a5:32:07:b8:01:ba:9c:da:2f:
af:c4:5d:01:3b:3e:20:ab:33:5b:b1:a7:5a:ec:4c:
43:8f:32:e4:8c:f6:bd:42:47:f6:d6:cd:0d:39:57:
8b:41:01:99:d3:c0:d9:c3:3f:47:6a:7e:98:a7:f3:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:2E:0D:87:E5:D5:C0:D5:0A:A4:BF:5F:81:A3:B7:C8:2F:41:C7
X509v3 Authority Key Identifier:
keyid:09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/3137302e3235342e32302e302f32322d3234203d3e20323634323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
71:76:88:6e:6c:35:a3:b1:7c:72:c9:ed:1d:7e:08:60:43:f5:
6e:be:d4:21:34:56:3f:93:8e:46:08:96:28:53:91:70:0c:0e:
f0:0a:af:b4:d2:0d:70:9d:ba:ad:f7:70:9f:d7:e3:59:1e:ad:
68:81:e1:41:1e:60:28:5d:e3:cc:86:fc:4a:d4:8e:5e:3e:29:
e7:fb:e5:6d:68:04:f1:7b:6c:2d:24:03:1d:c1:4b:a3:77:13:
28:c1:e5:2a:5b:21:93:e6:d2:7e:22:54:4e:95:71:88:ed:23:
da:70:b8:8f:ba:1c:9b:44:00:27:5c:5a:61:77:67:65:80:09:
02:62:a0:89:3a:3b:cb:19:92:e7:cd:5f:76:c8:fb:e4:99:01:
ad:4e:d2:5f:a4:db:95:90:8b:13:4d:54:9c:cb:c6:62:9a:c6:
c4:46:56:b2:ba:30:1c:84:f4:33:46:05:cd:6d:bf:ac:e2:bc:
e6:fd:1e:1d:2d:c1:d8:a4:b2:30:56:17:41:3d:1f:8a:b2:70:
4a:43:14:7d:ef:6f:51:d2:5c:de:62:55:dd:80:eb:fd:37:e0:
15:4d:b1:fd:11:03:8a:16:91:f8:ce:22:65:3b:2c:6e:51:15:
50:ed:c3:db:78:a5:20:19:ff:35:8e:d9:d0:d8:f5:0e:3f:37:
14:07:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:48 2025 by rpki-client