Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32332d3233203d3e20323634303031.roa
File: 3137302e3234362e3138382e302f32332d3233203d3e20323634303031.roa (raw, json)
Hash identifier: GoJ3jzE0fxU3EGIqKjePEApSSLhzaY/vrTZlpXXE9l4=
Subject key identifier: F7:81:4D:CB:E5:BA:F6:8E:7D:8A:E0:8B:C0:1F:AB:92:59:21:89:24
Certificate issuer: /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial: 0BD0837222F20D8D9E2619FB88F57A40BF06441B
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32332d3233203d3e20323634303031.roa
Signing time: Sat 17 Dec 2022 16:21:10 +0000
ROA not before: Sat 17 Dec 2022 16:16:10 +0000
ROA not after: Sat 16 Dec 2023 16:21:10 +0000
asID: 264001
IP address blocks: 170.246.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d0:83:72:22:f2:0d:8d:9e:26:19:fb:88:f5:7a:40:bf:06:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Validity
Not Before: Dec 17 16:16:10 2022 GMT
Not After : Dec 16 16:21:10 2023 GMT
Subject: CN=F7814DCBE5BAF68E7D8AE08BC01FAB9259218924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:a1:5d:db:b6:d2:0f:f3:5c:72:3a:cc:47:
5b:27:5e:b9:1f:fc:2b:3f:ff:b7:8b:f2:43:64:04:
cb:73:b2:ef:03:87:62:41:86:0d:d0:1d:21:4f:fa:
a6:28:b0:fe:c0:0e:1c:d1:93:a8:f8:9b:92:d7:93:
f6:04:78:6a:ff:c8:ae:0b:73:be:68:03:18:37:e5:
0b:f7:3d:24:f8:74:23:9e:92:99:fe:99:0e:52:0d:
2f:3e:b6:b2:df:0a:5e:94:74:b5:2a:62:2f:c5:99:
df:6e:6f:ae:fa:a2:79:ad:51:9e:03:73:aa:4e:e8:
0e:16:21:ae:01:d7:9b:cf:82:5c:d3:aa:73:f3:78:
d7:fc:48:62:dd:e3:d4:cf:d6:f0:b9:e2:e8:43:0e:
78:b8:40:d9:8a:70:d9:af:ad:d3:fd:c0:29:5f:a8:
6e:6a:4e:9d:a5:6e:5f:d1:f3:83:a5:b1:64:06:58:
df:f6:0e:55:a3:79:98:3e:f3:10:a1:16:83:d7:03:
01:5b:03:35:e0:ba:94:60:9b:0e:8c:9d:cf:58:8e:
38:c7:15:ea:36:44:71:b2:2f:54:5f:2d:5a:e3:ac:
8b:05:a5:4f:45:c6:a6:d8:0a:69:49:88:d3:80:b6:
69:fd:86:e5:97:10:d9:0a:a8:c3:91:e7:8e:2f:93:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:4D:CB:E5:BA:F6:8E:7D:8A:E0:8B:C0:1F:AB:92:59:21:89:24
X509v3 Authority Key Identifier:
keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e3234362e3138382e302f32332d3233203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.188.0/23
Signature Algorithm: sha256WithRSAEncryption
11:b6:92:59:e0:d9:23:85:21:13:4a:0b:62:7b:90:fb:15:07:
4b:81:f0:2b:d4:4f:9a:12:86:fa:7e:46:c5:8a:7d:fe:8c:f6:
3d:a9:20:bd:7d:2d:bb:32:c3:a2:92:10:c7:81:0f:ac:82:9a:
9c:f1:a1:f1:95:64:40:ea:9b:1c:29:d0:ad:3e:67:79:7e:25:
e3:f9:25:c4:88:97:68:f1:07:1a:9b:63:89:65:b8:62:cf:91:
24:a1:2d:c9:70:f5:cf:a0:1c:19:25:e1:80:bf:98:1c:7d:b2:
0b:7e:60:4d:e3:f8:68:80:f9:01:74:bc:23:e0:d1:a6:16:07:
cb:19:b2:cc:4d:df:48:43:dd:70:14:42:43:46:d0:f4:0f:db:
0a:12:e6:73:5e:26:b7:86:29:61:9a:e5:0c:85:63:9f:d0:98:
13:49:df:d4:e4:6c:bb:e6:20:71:d8:8a:98:3c:54:21:5c:c6:
82:09:d5:26:7c:76:39:75:11:12:68:aa:a6:1e:e2:d0:48:78:
80:05:7f:a3:53:ab:6a:7f:b2:5f:3f:75:c1:57:c0:f7:5d:8c:
d5:71:d5:d3:a7:34:2a:84:4a:d3:4b:a1:13:5a:8c:7e:20:2b:
52:1a:ef:e3:52:ed:0b:88:02:51:04:9b:51:7f:87:bf:f7:e3:
30:a2:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:37 2025 by rpki-client