Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36302e302f32322d3232203d3e20323635303038.roa
File: 3137302e302e36302e302f32322d3232203d3e20323635303038.roa (raw, json)
Hash identifier: gH3FF6nIZyD7d0UJdOgAmkRiA6c4AohqFUBSE/N0Nx8=
Subject key identifier: C1:13:FB:20:11:58:A2:B7:2A:FE:63:FD:1D:F3:AE:05:AD:1A:EF:7F
Certificate issuer: /CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
Certificate serial: 5F4DC694F64079EA6F8780B917029277BEF9C0F7
Authority key identifier: F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36302e302f32322d3232203d3e20323635303038.roa
Signing time: Fri 15 Mar 2024 17:58:49 +0000
ROA not before: Fri 15 Mar 2024 17:53:49 +0000
ROA not after: Fri 14 Mar 2025 17:58:49 +0000
asID: 265008
IP address blocks: 170.0.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4d:c6:94:f6:40:79:ea:6f:87:80:b9:17:02:92:77:be:f9:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
Validity
Not Before: Mar 15 17:53:49 2024 GMT
Not After : Mar 14 17:58:49 2025 GMT
Subject: CN=C113FB201158A2B72AFE63FD1DF3AE05AD1AEF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:05:c9:40:86:d9:ac:3e:b5:cb:bd:9f:d8:95:
57:52:53:ba:a0:2a:6f:b6:ee:d1:4d:85:67:11:ee:
d0:7a:eb:f5:d4:5a:90:a0:0a:be:17:08:1d:aa:d0:
88:42:5c:39:1f:e4:2a:93:c5:94:35:41:f5:47:6f:
55:ee:12:4d:ee:1f:f4:cd:73:b8:94:f6:1d:8f:1e:
f9:5d:4d:f4:33:14:92:e8:06:e0:50:cc:6a:12:73:
5a:28:92:a1:2a:60:8a:8f:1f:ad:83:47:b8:21:3b:
95:15:e5:eb:c2:67:f9:9c:bd:26:d5:f4:8e:1e:e2:
77:92:71:c4:b8:e7:01:1e:41:a7:09:da:d8:66:2d:
0e:64:68:4e:42:36:3e:fc:e5:94:f4:87:19:b0:79:
e7:2d:87:bb:df:28:89:ce:b6:ce:39:d7:5d:12:a3:
60:97:44:b8:6a:b7:cf:db:39:ab:38:20:be:84:84:
ee:84:83:4c:6a:88:09:e9:7e:52:86:47:b7:b1:d0:
4f:7a:e2:ca:28:6a:33:74:25:00:7d:47:52:96:99:
f3:18:d7:4e:be:97:d5:d5:6c:f1:8a:1d:dc:38:0c:
d2:13:91:d2:f2:f1:b7:00:48:55:d0:bb:12:eb:e6:
87:57:f2:1f:ff:30:27:1a:00:fb:89:08:90:9a:99:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:FB:20:11:58:A2:B7:2A:FE:63:FD:1D:F3:AE:05:AD:1A:EF:7F
X509v3 Authority Key Identifier:
keyid:F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/3137302e302e36302e302f32322d3232203d3e20323635303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:00:cb:81:9c:2f:a9:7c:4c:50:17:80:23:40:66:7d:00:b2:
b2:78:3d:09:29:3b:51:3d:91:4d:59:a1:36:00:13:4f:d9:ea:
9e:c5:70:87:c1:28:e3:c9:c8:18:49:cf:16:6a:6b:62:0c:08:
f8:cb:08:8d:bb:ba:95:c9:46:70:97:16:04:e7:e5:d1:be:76:
68:be:08:c3:46:44:4e:bc:50:73:64:f1:88:59:49:f9:ed:cb:
73:e1:0a:5a:fc:85:13:3b:0c:00:05:e9:3b:1e:1a:08:b7:28:
2a:d1:1b:db:8b:7c:9e:72:3f:5f:33:63:1f:cc:59:ec:4c:44:
da:40:be:68:93:f3:98:af:49:34:72:fa:0a:54:a9:dc:32:c4:
f2:3c:39:18:61:46:e9:33:51:aa:af:4b:9f:25:cd:35:6f:20:
9c:19:2d:69:9b:60:21:85:46:05:fc:cc:fe:50:af:d8:0e:16:
a2:b0:d6:fa:1c:ac:b3:5f:40:fc:98:71:7e:20:ea:f0:3e:7b:
39:67:72:92:48:e5:39:64:e7:ef:95:ac:ce:9e:f3:b6:8d:37:
e5:30:11:a6:4b:f1:69:26:72:1b:0a:d5:d0:23:be:a4:9e:35:
0d:1c:e2:1d:7a:8b:10:42:a0:40:be:bd:89:9f:6f:03:01:2d:
15:c2:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org