Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa
File: 3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier: 0B1b2gsL3xs/uZF5p9vpVE01VezDufxaNgxOrPlWR0I=
Subject key identifier: 42:C0:93:35:37:1A:B7:B9:78:D2:DC:94:B3:3E:30:5C:9A:B0:2D:6B
Certificate issuer: /CN=3F18422C71C9046C3B4C766867F0CC989883236F
Certificate serial: 14DBB3132ABA6CBB4E04984225DC81929411E896
Authority key identifier: 3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa
Signing time: Mon 25 Sep 2023 13:38:43 +0000
ROA not before: Mon 25 Sep 2023 13:33:43 +0000
ROA not after: Mon 23 Sep 2024 13:38:43 +0000
asID: 266022
IP address blocks: 170.245.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:db:b3:13:2a:ba:6c:bb:4e:04:98:42:25:dc:81:92:94:11:e8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F18422C71C9046C3B4C766867F0CC989883236F
Validity
Not Before: Sep 25 13:33:43 2023 GMT
Not After : Sep 23 13:38:43 2024 GMT
Subject: CN=42C09335371AB7B978D2DC94B33E305C9AB02D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:6a:0c:63:3d:d5:07:8b:4d:ce:31:48:77:
4a:a3:77:d7:f0:28:cc:72:51:1c:5f:04:73:48:5c:
4b:31:9b:4c:a4:a1:d6:27:9a:45:33:47:38:a2:23:
cf:ba:1b:0f:bb:78:46:3f:c2:7d:61:38:e3:11:a9:
ec:c8:11:e9:3d:7b:c8:8c:52:f7:36:59:96:f4:be:
2d:68:07:bd:91:ef:d3:76:2b:6e:39:40:37:75:6e:
5b:91:1a:a2:62:b7:7f:bc:68:a9:41:64:ce:2d:ec:
1d:a7:94:ee:7b:96:73:ad:86:37:bc:e4:ba:22:d7:
46:8a:40:63:a0:3c:99:c5:82:5e:25:a7:02:45:2f:
e8:93:3e:dc:2b:84:be:21:75:1b:85:4e:aa:dd:d4:
b7:46:7c:46:a8:6b:35:d9:c8:c7:b8:fe:5e:7c:93:
4b:c0:e8:88:e4:ca:cd:e0:ff:b5:32:29:96:a8:c0:
29:35:68:c3:23:8d:5f:f3:3d:be:4b:e3:43:ab:de:
7b:28:8b:35:dd:6d:ea:1b:dd:a9:03:5b:c4:6b:33:
14:aa:ca:c1:50:40:6e:b8:be:6b:9e:fd:37:2a:e6:
9d:d6:23:bf:06:65:3f:9b:25:be:e1:4c:c7:f6:89:
18:53:cf:4d:65:e4:d6:04:98:3d:78:ef:f5:07:96:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:93:35:37:1A:B7:B9:78:D2:DC:94:B3:3E:30:5C:9A:B0:2D:6B
X509v3 Authority Key Identifier:
keyid:3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d8:f7:f7:80:74:14:71:86:ab:b1:29:c3:13:68:d9:0c:60:
3a:02:53:74:21:e4:e2:e5:ba:7e:57:b7:45:2f:70:39:1d:35:
04:b5:42:33:55:fd:40:b2:f5:2a:d8:f0:6a:a1:46:53:6a:04:
e5:27:1f:69:19:3d:22:57:5c:00:30:e2:34:67:90:cd:bb:58:
14:02:b6:37:f7:d9:90:51:05:9c:d7:12:25:84:14:3d:6e:bc:
7a:f0:d3:e9:5b:ec:b8:ad:6e:74:76:4a:cb:d2:ef:61:6f:15:
8c:2f:5f:54:fa:fe:f1:3a:96:da:76:d3:d2:5e:6a:c8:e2:87:
fc:85:88:af:7b:d5:0e:08:86:7e:ae:53:b2:68:1e:67:7b:b8:
64:b0:68:13:c7:8d:73:41:5d:84:ee:18:62:82:17:22:7f:bf:
1b:de:47:e0:f8:05:b7:07:35:8c:15:d6:8f:4f:46:04:9e:de:
e7:b9:33:03:a8:99:f2:b0:59:d4:15:7a:b5:06:d0:82:48:82:
10:f5:18:3e:9a:3c:f9:e1:8f:ba:ec:ea:ff:10:b0:17:33:cf:
86:6b:02:b5:bf:dc:a6:3e:b5:b4:2c:95:85:78:e3:d4:29:05:
ad:5d:18:31:63:9c:a3:90:e3:86:4f:ec:82:48:2e:0b:5f:6d:
c8:66:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org