Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
File: 3137302e38312e3137312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: ect1ELqPrIII997IDQ2CGqo4ttb0aZXvteC+am7XNIA=
Subject key identifier: 90:B4:13:2A:4B:56:C5:0D:14:AD:1F:C4:3C:D2:5F:A7:56:65:FA:6C
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 52B8D23B61E59DD5EE310237CBEF8475E625C293
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:23:14 +0000
ROA not before: Mon 01 Jul 2024 19:18:14 +0000
ROA not after: Mon 30 Jun 2025 19:23:14 +0000
asID: 28165
IP address blocks: 170.81.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b8:d2:3b:61:e5:9d:d5:ee:31:02:37:cb:ef:84:75:e6:25:c2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:18:14 2024 GMT
Not After : Jun 30 19:23:14 2025 GMT
Subject: CN=90B4132A4B56C50D14AD1FC43CD25FA75665FA6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:e2:eb:1d:e6:79:ad:e0:23:f8:25:4a:a7:
ff:4a:48:cb:1e:66:68:b7:7a:d9:5d:9b:f9:86:8e:
2b:aa:47:2b:11:45:d5:53:fd:99:0b:af:e9:c0:77:
c9:40:a2:bb:d3:d4:b5:99:c7:6e:b5:0c:4f:17:31:
8c:8e:48:8f:7d:66:1f:af:f6:1a:18:0b:f2:35:d6:
8f:69:4e:cc:4b:ee:12:11:18:a2:68:54:18:d6:81:
cb:c5:ec:b9:a3:cb:3f:81:c1:d1:75:3c:94:3e:8a:
a5:46:db:f8:5d:b1:be:11:ce:8a:ad:b2:71:11:c1:
89:0b:63:5c:d0:5a:98:85:76:ee:16:8c:32:58:07:
82:df:0d:de:d9:62:82:4a:79:f6:3a:c6:9e:e2:c1:
45:22:b0:58:bc:bf:e9:42:da:a6:dc:29:9a:98:71:
58:9b:89:85:cc:c6:2c:fd:1d:0f:a1:8e:46:f1:f5:
16:ac:b9:20:61:9b:b7:ee:48:d8:b3:42:8f:0f:66:
3c:38:45:7f:7a:7b:d1:a1:7c:10:04:ac:93:4a:bc:
a4:6b:0f:48:1c:74:34:8c:35:b4:28:56:cf:30:17:
83:be:2e:36:45:34:18:62:22:cf:b3:64:af:21:3e:
61:85:97:fe:56:28:25:5e:75:40:ae:75:ea:78:5b:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:13:2A:4B:56:C5:0D:14:AD:1F:C4:3C:D2:5F:A7:56:65:FA:6C
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.171.0/24
Signature Algorithm: sha256WithRSAEncryption
89:44:00:73:c2:90:ab:9c:8f:62:1e:3c:ae:f9:be:52:3d:cf:
f3:7a:d7:df:5c:2a:90:71:1f:a7:9d:c0:5c:84:a9:85:c2:e1:
de:d4:1b:cd:23:39:99:48:76:e3:b5:a7:f8:67:0e:b3:56:a2:
5f:de:46:70:c3:b0:45:82:1d:7b:53:eb:85:43:dc:96:f9:43:
c6:47:62:99:d7:c7:3a:ff:e1:92:bf:15:46:78:d6:d8:68:b9:
44:43:23:4d:36:28:39:3e:47:5d:8c:55:ec:80:e5:9e:33:56:
e6:e7:94:c1:62:52:a2:b7:68:4b:f6:3b:53:ff:bc:f8:37:cb:
b6:ab:fb:c4:df:53:d4:80:b6:19:7f:ea:47:49:71:76:84:45:
1f:b4:86:f7:66:90:db:d6:41:25:a4:1b:fc:89:23:24:f0:7c:
a6:77:8a:f4:40:e6:6f:b3:73:18:7b:29:e6:9c:98:18:56:83:
84:8c:c1:43:2f:98:50:30:b5:cc:80:88:45:2e:c3:26:fc:b0:
46:30:55:a1:74:6d:66:5b:3b:f3:00:3b:27:bc:63:c4:fb:98:
74:17:3e:2c:43:5b:9a:e3:a4:bd:b6:14:f6:ea:7c:01:74:f1:
1c:8e:b1:c7:57:d4:13:2e:0d:52:3f:2f:71:fc:9c:5f:bb:bd:
47:48:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:56 2025 by rpki-client