Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137302e3234362e31322e302f32322d3234203d3e20323633383830.roa
File: 3137302e3234362e31322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier: l89kBq+IRp5swOpKBRtbIdghyrnNSCXz5dKxDzI5bTs=
Subject key identifier: 8E:03:74:E0:2D:63:F8:4C:14:78:02:A4:D4:EA:92:BF:50:AC:F7:1A
Certificate issuer: /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial: 66A19CAB10A5BB8A5ED849828B5C64F0A4D9C0A7
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137302e3234362e31322e302f32322d3234203d3e20323633383830.roa
Signing time: Wed 12 Jul 2023 21:01:15 +0000
ROA not before: Wed 12 Jul 2023 20:56:15 +0000
ROA not after: Wed 10 Jul 2024 21:01:15 +0000
asID: 263880
IP address blocks: 170.246.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a1:9c:ab:10:a5:bb:8a:5e:d8:49:82:8b:5c:64:f0:a4:d9:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Validity
Not Before: Jul 12 20:56:15 2023 GMT
Not After : Jul 10 21:01:15 2024 GMT
Subject: CN=8E0374E02D63F84C147802A4D4EA92BF50ACF71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:0a:21:57:7d:5a:51:cb:39:f3:f8:b4:04:
aa:1b:1e:da:d6:0b:f9:1d:9c:1d:25:1d:11:61:83:
9d:1e:89:5a:ea:a4:93:d6:5c:b3:6c:c2:20:df:d9:
22:8a:64:33:55:bb:0b:07:38:fd:96:e4:b0:b8:6e:
7c:89:82:54:cf:32:0e:3d:b2:62:70:3e:45:22:74:
63:4c:2d:34:c1:15:be:b8:22:bd:f0:ef:24:93:7c:
db:45:b2:76:f3:d7:46:1c:13:0d:f3:38:16:e2:36:
39:08:2b:58:52:a2:dd:71:17:fc:6c:18:f2:3d:cd:
2f:56:bc:b4:ea:e7:36:14:11:a7:15:42:69:01:2d:
8f:7f:50:44:a9:f5:39:c6:f3:2f:49:f6:56:e2:0d:
39:f0:40:bf:05:65:96:ed:ba:6e:80:e6:16:bc:84:
96:d0:e7:ff:0f:b6:b6:b5:01:65:cb:59:bd:86:8c:
18:90:3c:ea:a5:63:86:e3:5b:09:be:ba:c8:32:38:
09:27:df:cb:c6:5b:8e:13:1f:f4:1a:15:3c:fc:58:
a6:c5:a1:61:11:42:d1:c7:15:15:df:10:ce:0c:00:
73:9e:97:53:85:f4:d2:83:8d:aa:5e:f6:ca:a1:88:
cb:62:16:90:57:11:e1:94:ed:0a:88:c4:df:ca:6d:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:74:E0:2D:63:F8:4C:14:78:02:A4:D4:EA:92:BF:50:AC:F7:1A
X509v3 Authority Key Identifier:
keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3137302e3234362e31322e302f32322d3234203d3e20323633383830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:80:cf:52:2b:e6:41:78:ee:42:e5:f4:18:b6:dd:6f:9c:bf:
9f:24:d7:66:9f:73:17:08:da:96:82:c1:32:4b:70:26:cf:db:
20:9d:41:ea:3f:6e:98:88:ec:94:5b:00:3c:fb:a1:1b:4a:31:
66:b6:80:26:72:e8:d2:9a:68:04:ab:fb:6c:63:69:b0:60:ec:
9c:f8:1f:76:99:49:71:bf:56:74:4c:a1:80:f2:e9:8a:a9:c7:
ba:c8:b2:f1:ce:25:c8:b4:e6:9a:42:90:5a:82:de:3c:c5:a7:
5b:e7:d2:2f:b6:92:c9:ff:1a:15:11:3b:f2:d9:15:82:77:76:
d8:3e:c7:3e:17:11:5d:88:e2:1e:0d:1d:eb:8b:45:f5:ef:8e:
bf:0a:55:94:2a:0c:a2:0c:38:be:a1:72:d3:86:9a:55:11:3f:
a9:1e:4e:42:51:97:a4:e3:9c:d2:77:6d:77:a3:b8:a0:24:21:
47:d4:d5:21:30:af:42:a3:9d:60:63:94:47:18:26:b4:4b:52:
32:bb:a9:8c:28:df:38:bd:0c:8c:79:bb:78:c5:7c:76:b3:ea:
89:57:ec:7a:3e:64:ac:8f:4e:67:47:35:ca:d5:4c:41:82:98:
ea:7c:4d:46:69:3a:7d:01:f6:d7:bf:e8:53:48:f4:a5:51:dd:
ac:f5:03:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:07 2025 by rpki-client