Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32322d3234203d3e20323634333937.roa
File: 3137302e3233392e39362e302f32322d3234203d3e20323634333937.roa (raw, json)
Hash identifier: Rab2P05ZR4eKdWkf2sCp+5gqNDIa3JaPGRjSydIU/+8=
Subject key identifier: 56:CE:2B:1F:E3:D2:28:5D:93:A6:FC:A9:39:A1:F0:78:31:7B:82:A8
Certificate issuer: /CN=32DC2BA5483191FA204F4266804A063448BC89E7
Certificate serial: 0C0BA1A464ADBC78DBA5E255754EF2664B4F0B20
Authority key identifier: 32:DC:2B:A5:48:31:91:FA:20:4F:42:66:80:4A:06:34:48:BC:89:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32DC2BA5483191FA204F4266804A063448BC89E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32322d3234203d3e20323634333937.roa
Signing time: Fri 06 Dec 2024 14:47:32 +0000
ROA not before: Fri 06 Dec 2024 14:42:32 +0000
ROA not after: Fri 05 Dec 2025 14:47:32 +0000
asID: 264397
IP address blocks: 170.239.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0b:a1:a4:64:ad:bc:78:db:a5:e2:55:75:4e:f2:66:4b:4f:0b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32DC2BA5483191FA204F4266804A063448BC89E7
Validity
Not Before: Dec 6 14:42:32 2024 GMT
Not After : Dec 5 14:47:32 2025 GMT
Subject: CN=56CE2B1FE3D2285D93A6FCA939A1F078317B82A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:3f:e4:01:b2:4f:c9:d7:90:98:7a:2c:b2:
55:ca:44:58:87:f7:52:fc:c1:56:7e:92:76:04:d0:
b5:db:e5:f8:85:df:f5:40:24:34:bb:7e:0c:73:b2:
18:8c:d0:6c:fc:4e:32:66:f6:a8:5c:16:4d:4e:fb:
03:a2:6a:96:8a:1d:22:63:a5:69:4f:73:a1:43:6b:
03:6d:cd:2e:ec:f8:d4:ac:4f:b0:a3:05:b0:7a:87:
34:66:04:60:8e:3e:36:c8:bc:a4:fb:c3:a7:8c:13:
ba:4d:e0:e6:59:bc:f6:82:55:ba:f4:a8:7d:56:6e:
20:90:62:3d:e8:f4:e4:d9:43:dd:a9:13:5d:56:af:
3e:1e:1c:ca:fc:83:55:ba:33:f0:e6:fd:5a:d2:29:
3b:95:34:22:1a:c1:1f:b1:7c:50:fd:eb:c8:0f:f2:
0d:91:bc:4c:40:c8:24:28:4a:86:3c:d5:a8:e6:bf:
cd:1c:88:0c:20:6c:3e:75:4f:ce:3e:de:e5:2a:eb:
4a:6b:0b:07:d2:5e:ed:ec:70:ea:5c:e9:8c:49:0d:
42:9d:2b:b6:f3:96:5c:dd:80:b2:3b:4d:66:0d:81:
4d:a0:15:d3:1b:42:b7:d8:5b:d1:24:21:58:12:d8:
f1:90:6c:46:b0:b9:11:bd:96:c7:27:19:ff:77:eb:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:2B:1F:E3:D2:28:5D:93:A6:FC:A9:39:A1:F0:78:31:7B:82:A8
X509v3 Authority Key Identifier:
keyid:32:DC:2B:A5:48:31:91:FA:20:4F:42:66:80:4A:06:34:48:BC:89:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/32DC2BA5483191FA204F4266804A063448BC89E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32DC2BA5483191FA204F4266804A063448BC89E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32322d3234203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.96.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:09:d4:08:d2:5f:01:f8:02:51:e6:3c:27:a5:69:e4:12:f8:
0e:8f:09:15:fb:fe:d0:4d:b8:51:19:42:dd:4f:4f:c8:68:87:
00:4a:0f:02:1c:5e:d7:98:79:3a:4c:3f:7f:86:e0:2d:96:53:
7b:9e:6b:34:5f:76:27:c0:ed:66:f6:1b:d5:5f:19:bb:af:58:
a6:f8:72:1a:37:4c:96:22:f9:bf:02:59:18:18:c5:47:65:bf:
83:c2:89:f4:a1:6a:eb:77:66:d3:45:95:dd:45:8d:60:c4:c4:
93:42:ec:77:3d:96:4b:23:88:20:6b:b6:e6:ff:f7:1e:8a:5d:
cc:7b:12:af:f3:54:2d:0e:0f:56:c8:6b:35:9b:ee:4e:53:11:
7c:81:7e:a5:72:63:81:e7:cd:af:cf:1a:c0:8e:9f:fd:aa:b1:
47:d6:44:63:57:29:24:2f:12:d9:cb:ec:5f:f4:be:53:2c:2b:
40:04:26:59:64:9b:d5:c6:55:e5:61:26:3c:94:b3:61:25:85:
b4:0d:43:0f:b4:9a:43:09:5c:7d:f4:b3:05:ae:5f:d9:0b:a1:
54:a8:fa:9e:46:e9:9d:95:cd:68:91:eb:db:d9:cd:81:ec:76:
0b:90:b1:6b:56:09:04:4b:dd:6d:24:ee:9e:70:f5:39:c9:66:
ab:76:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:25:53 2025 by rpki-client