Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137302e302f32342d3234203d3e203238313635.roa
File: 3137302e38312e3137302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: Mw7oY5V9BkN+daskKzZhvOFEnUj9D5VCNHdgbmo4Jls=
Subject key identifier: 61:BF:B7:CB:30:0C:25:41:5E:1C:4E:59:56:C0:D5:98:DE:61:BA:19
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 554C518232E9E2B79BECD07FB151D472B6FDFB58
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137302e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:23:10 +0000
ROA not before: Mon 01 Jul 2024 19:18:10 +0000
ROA not after: Mon 30 Jun 2025 19:23:10 +0000
asID: 28165
IP address blocks: 170.81.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4c:51:82:32:e9:e2:b7:9b:ec:d0:7f:b1:51:d4:72:b6:fd:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:18:10 2024 GMT
Not After : Jun 30 19:23:10 2025 GMT
Subject: CN=61BFB7CB300C25415E1C4E5956C0D598DE61BA19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:49:d4:6f:fa:c5:07:35:be:d8:b1:39:d5:
d8:36:89:30:2e:28:75:90:50:09:c9:5e:e3:24:db:
cc:e4:55:75:97:87:05:51:78:42:65:7d:a5:ea:32:
29:3c:52:38:67:f0:19:00:90:01:ca:fb:5f:5a:3f:
ef:37:80:79:18:e9:cd:91:42:6c:20:77:f6:52:5f:
55:ef:8e:a3:bd:36:55:17:ce:72:a3:07:4b:b1:1d:
6e:e6:2f:6b:c1:9a:eb:07:61:89:c4:2d:47:8a:97:
79:de:e2:f3:a6:1b:7e:74:68:45:d5:15:28:62:3f:
5a:91:35:5c:52:9c:29:6c:9a:79:76:7a:89:ba:d8:
31:09:f6:c7:90:4a:b3:f7:a0:c2:0b:d5:62:8b:ad:
4b:1b:db:10:65:21:4f:88:7f:d5:8f:3c:62:3d:e6:
bd:2b:7e:55:a8:fc:7e:84:01:b8:ee:f7:49:b6:eb:
15:95:24:e0:4b:18:2c:d4:d7:6a:09:19:13:5e:b7:
2f:47:5f:ad:c1:bd:47:ab:48:62:69:30:d4:86:7d:
2b:d4:07:7f:fc:df:84:c0:6e:57:11:8e:14:90:fe:
53:c1:42:b4:36:01:0d:73:57:92:25:77:ad:63:f6:
98:10:39:db:6b:1f:e5:d3:23:cd:a9:47:ef:ff:20:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:B7:CB:30:0C:25:41:5E:1C:4E:59:56:C0:D5:98:DE:61:BA:19
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137302e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e6:4c:f1:f2:2a:c9:3a:f1:99:ea:6e:fa:47:75:d9:35:b8:
1f:45:4d:98:e1:e5:0e:f5:3d:36:11:4a:98:aa:a5:da:50:fe:
83:b8:e2:b7:8b:9a:3b:f5:f6:29:1d:9c:b2:cf:76:de:28:7e:
82:aa:46:00:75:5e:41:cf:5b:7c:ac:41:07:83:ff:fa:c2:a5:
db:cc:db:85:be:ca:6c:ba:62:db:b8:b8:37:cd:a0:da:7e:41:
e6:71:a3:56:ba:3b:29:a1:16:45:9e:ed:81:0a:d5:40:7d:ae:
55:a2:ea:7c:72:1d:c4:d2:7a:7e:78:eb:31:f2:ac:14:64:f5:
c9:53:2e:d9:f1:36:76:10:20:9f:fd:4c:b5:d1:96:ea:f9:62:
00:e4:27:3d:15:c4:24:c1:76:de:58:df:9e:bd:78:0f:ac:85:
79:0d:e3:4d:ac:c5:a4:c1:61:da:c3:cc:2c:8a:24:23:21:18:
28:fb:7f:53:25:b1:92:0a:5e:ec:4b:64:e6:c1:1c:bf:de:4e:
3c:32:86:52:ea:0d:10:97:a7:3d:58:c7:3f:81:02:88:18:7d:
af:47:11:17:59:89:64:10:76:99:09:14:b9:79:42:53:9a:c1:
1a:8e:8f:dd:73:0f:c3:07:69:65:89:96:80:89:7c:08:15:b0:
ae:e6:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:29 2025 by rpki-client