Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137302e38322e35362e302f32322d3234203d3e203238363637.roa
File: 3137302e38322e35362e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: bEoYS0Dyfql4N7/nYgGEpsBWSHCgIk1aVfV1BA7zo54=
Subject key identifier: F4:68:77:CB:29:AD:F4:F2:55:22:4A:4A:5C:70:EE:33:27:8A:14:50
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 2F1E2D1C8F7C10AA11E9A3C721DA5B0471097EC1
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137302e38322e35362e302f32322d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:12 +0000
ROA not before: Tue 23 Jul 2024 11:46:12 +0000
ROA not after: Tue 22 Jul 2025 11:51:12 +0000
asID: 28667
IP address blocks: 170.82.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1e:2d:1c:8f:7c:10:aa:11:e9:a3:c7:21:da:5b:04:71:09:7e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:12 2024 GMT
Not After : Jul 22 11:51:12 2025 GMT
Subject: CN=F46877CB29ADF4F255224A4A5C70EE33278A1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:75:e4:6f:e0:dc:2d:bf:b8:a0:9b:4a:36:
0c:54:f2:43:34:02:1e:ed:62:0e:52:b7:e7:49:75:
0b:37:fb:ce:6f:5f:2f:a4:06:eb:b6:97:c5:47:6e:
07:ef:6e:4f:ca:53:2d:bc:57:cc:9e:98:0f:72:26:
89:14:56:fd:f9:f9:8c:06:01:0b:15:88:4d:6f:a4:
9a:16:29:21:e4:6c:1d:38:f7:d3:60:1d:78:3c:82:
18:15:55:a6:e5:94:9e:79:a3:a4:2a:e2:7d:97:bc:
0a:70:06:6d:a8:cc:20:1a:09:a7:4a:51:16:38:8a:
b6:fa:3f:12:23:4a:da:35:c5:65:f2:ba:00:e3:c5:
56:7e:da:24:ec:f4:3b:79:08:42:e4:05:ef:13:ca:
6b:bb:f9:6c:fc:af:de:3a:aa:a4:64:61:73:aa:7b:
b1:f6:a7:6d:fc:47:26:ca:05:c6:0d:bd:72:3a:ac:
37:0a:cf:41:f1:88:98:89:df:65:3f:76:2e:d0:63:
6a:ff:27:33:3c:20:eb:16:a0:78:25:27:b4:8c:a8:
02:7f:d4:0c:27:b7:47:37:24:7b:aa:a7:bb:f1:89:
70:74:2e:2c:b8:4e:6c:52:36:84:0f:19:d1:2c:1f:
67:3b:d6:eb:82:d4:1a:b9:b9:ae:29:b7:41:01:0a:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:77:CB:29:AD:F4:F2:55:22:4A:4A:5C:70:EE:33:27:8A:14:50
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137302e38322e35362e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.56.0/22
Signature Algorithm: sha256WithRSAEncryption
74:a6:93:2e:f4:d0:0d:cf:5f:cd:2e:de:cc:53:06:a2:7f:41:
8d:51:13:21:10:da:21:f3:4d:30:4f:43:e8:99:9d:79:ef:79:
14:96:0c:88:df:e0:8c:c0:63:d9:d9:b7:4e:00:1c:48:9e:5c:
cc:fe:98:4f:ac:65:6a:8f:91:da:b6:2d:3e:bf:1f:25:3d:b4:
f3:51:f3:1c:d8:82:08:5f:a5:22:18:b8:01:c2:28:df:be:e5:
93:16:20:c4:c1:07:10:74:ac:5d:b5:88:61:c3:81:1f:f2:33:
7d:d0:59:bc:58:08:09:fb:24:ad:59:42:8f:ec:2f:ec:5a:7a:
91:c3:37:3e:e9:5f:6a:7f:4a:62:36:07:37:03:10:e7:b4:f7:
6d:0d:5f:78:94:4e:b2:5c:8c:29:ac:ba:7d:bf:25:64:9a:0e:
13:0a:03:b6:46:86:3f:3b:3b:72:21:4e:0f:88:64:ee:bd:e4:
6b:91:60:34:e2:2b:2c:e5:3f:3a:58:68:34:79:2f:97:14:c5:
fa:92:6a:3e:f7:30:68:d6:3f:38:19:d0:69:1f:b4:d5:bc:09:
99:e5:96:ca:a3:75:c2:89:c1:74:20:c4:6a:d7:38:1e:58:de:
9f:eb:76:29:f9:8a:a7:90:60:dc:98:43:59:1e:e5:a1:c1:86:
1e:1f:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org