Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32332d3233203d3e20323634303031.roa
File: 3137302e302e32342e302f32332d3233203d3e20323634303031.roa (raw, json)
Hash identifier: 1pe4ULW7vtCXk0PwtPICPNtE3fjrQfxqb2CLB4ZYgN0=
Subject key identifier: F4:1A:A3:F6:AB:F8:09:7B:77:D0:D1:2A:A6:5D:3C:47:B6:CE:68:0D
Certificate issuer: /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial: 6047051DC06CC6A22DD9B0AA4669377DDC7977E2
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32332d3233203d3e20323634303031.roa
Signing time: Sat 17 Dec 2022 16:19:14 +0000
ROA not before: Sat 17 Dec 2022 16:14:14 +0000
ROA not after: Sat 16 Dec 2023 16:19:14 +0000
asID: 264001
IP address blocks: 170.0.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:47:05:1d:c0:6c:c6:a2:2d:d9:b0:aa:46:69:37:7d:dc:79:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Validity
Not Before: Dec 17 16:14:14 2022 GMT
Not After : Dec 16 16:19:14 2023 GMT
Subject: CN=F41AA3F6ABF8097B77D0D12AA65D3C47B6CE680D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:5f:6c:59:da:fa:97:77:42:0e:19:fc:26:
04:79:b7:a5:2d:30:28:f8:1a:ad:55:5c:e9:bb:7c:
36:75:c9:70:4e:4a:c7:d8:31:fa:0a:02:10:77:ce:
d3:03:06:9b:12:27:20:70:12:b2:13:9e:2f:63:99:
4c:c0:6d:d1:cd:86:19:f3:95:69:8e:89:24:37:a5:
9b:3b:8f:55:e4:d1:c2:ca:42:16:6d:e7:db:7d:9c:
01:fb:d1:32:25:e3:f8:85:fa:56:ed:a7:56:d1:3e:
5f:92:66:02:9e:c7:b3:7c:b7:e4:64:79:5b:1a:c9:
c5:b4:f3:68:17:1d:7b:f7:89:37:14:51:53:13:82:
0d:dd:4c:81:0b:a3:7a:0e:b8:34:60:48:47:9f:20:
82:c5:7e:63:ca:e1:5c:07:6c:da:59:7a:4b:52:59:
c6:b3:2b:3d:b6:c1:22:4f:97:e3:fd:68:7c:7c:61:
08:f2:f2:7d:ce:5f:05:19:ec:84:bf:32:f5:d9:39:
79:f6:38:d5:e3:89:37:9e:05:49:9f:84:05:8f:f3:
51:cf:83:62:c3:11:c7:07:2f:37:aa:b5:a3:d0:fa:
8b:c7:27:05:85:09:33:96:dd:a1:15:92:64:e9:2a:
2d:77:32:1d:82:4d:1f:c7:e7:b8:3c:fd:a3:3f:50:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1A:A3:F6:AB:F8:09:7B:77:D0:D1:2A:A6:5D:3C:47:B6:CE:68:0D
X509v3 Authority Key Identifier:
keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32332d3233203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:dc:ad:6a:3f:d8:b1:18:59:97:e3:3f:a0:e7:a3:f3:36:72:
ef:56:e6:c2:62:2f:20:d4:e3:4b:4e:21:c2:75:09:31:1c:b9:
9d:ea:87:1a:29:d2:a7:34:4d:50:35:1b:c9:e7:38:8a:ca:1d:
81:5f:21:85:3f:15:6b:2d:14:d3:04:1a:37:95:39:e7:b2:01:
89:55:42:ef:f6:10:1b:41:da:1f:03:27:e9:ca:43:06:6b:13:
49:03:a9:f6:ab:06:f5:16:65:bb:f9:19:61:7f:ce:1b:e9:ae:
ee:e4:14:c0:04:c7:f4:cc:47:8a:72:e6:14:0b:7b:56:cd:1c:
2a:35:53:1e:39:63:19:2a:14:5f:77:c5:1b:74:4f:99:a0:94:
42:4a:bc:66:bd:83:9d:30:67:f9:59:47:ef:a0:ea:74:d2:ce:
40:9b:18:eb:aa:62:e6:e7:7c:37:f5:ac:1d:cf:61:de:e6:3a:
9e:3e:b9:20:47:b6:3c:9d:d0:22:f1:c7:79:9b:c0:da:2b:11:
88:91:15:4d:54:0d:7d:7f:c2:ea:74:f3:b9:07:1d:9c:80:af:
b5:68:ce:c7:87:a1:c6:75:fb:03:f1:5f:f9:2d:f8:1d:10:f5:
8b:5a:77:d5:52:21:e0:30:9f:a7:77:50:f0:af:09:21:5c:9b:
4b:53:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:56 2025 by rpki-client