Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
File: 3137372e3130372e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: 9+CSZNAirpY83jBRbqmzB+2UN1QI4Ac4U0rtJvIEFTE=
Subject key identifier: 0A:E8:C4:01:98:52:61:80:26:22:54:9F:6E:FA:38:10:4F:63:84:BF
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 16474CC59291CE651A70C00553F2A2C1CF8339C5
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:10 +0000
ROA not before: Tue 23 Jul 2024 11:46:10 +0000
ROA not after: Tue 22 Jul 2025 11:51:10 +0000
asID: 28667
IP address blocks: 177.107.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:47:4c:c5:92:91:ce:65:1a:70:c0:05:53:f2:a2:c1:cf:83:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:10 2024 GMT
Not After : Jul 22 11:51:10 2025 GMT
Subject: CN=0AE8C401985261802622549F6EFA38104F6384BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:87:a2:c3:48:ab:72:72:c4:fd:4b:ff:69:
d0:8e:1e:73:4a:32:fe:8e:91:96:47:62:fa:ca:1b:
25:92:20:6c:e8:57:5e:60:23:ff:ec:18:d4:f5:9c:
a5:ee:cc:23:f4:0b:f2:5b:1f:9b:fe:a4:16:0a:97:
9a:06:2d:2f:67:af:71:34:82:42:9a:46:17:85:18:
c2:01:67:0d:e6:ed:9a:2c:b0:3d:29:6e:c1:dd:2c:
e9:54:b2:22:56:21:b5:01:99:f8:a4:f9:e6:12:3e:
f9:ee:a8:c0:d6:ea:99:69:df:29:dd:8f:f6:6a:f1:
cd:29:95:a7:f7:5e:d1:03:e0:da:35:08:d0:a5:bf:
63:3e:86:b9:b3:bf:bd:c5:54:fc:76:8e:13:0b:16:
4c:5a:e9:49:e7:67:92:38:06:62:fe:66:d4:3f:17:
7e:0e:b9:bd:85:f3:8f:53:0b:ee:f0:38:ec:cc:ef:
74:7f:47:93:a0:17:91:20:f0:b5:7d:11:d5:95:91:
2a:e2:2c:e7:f9:b2:82:2d:06:09:f2:37:24:62:d8:
1b:d2:30:26:cf:3a:71:29:b4:25:b6:6e:f3:19:ac:
cd:88:c3:c9:e2:70:87:85:fb:fb:a0:63:3b:9b:3c:
bc:d0:b4:5c:11:e0:29:e1:1c:6f:1f:ba:c4:a5:f7:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:C4:01:98:52:61:80:26:22:54:9F:6E:FA:38:10:4F:63:84:BF
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.107.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:de:5a:34:50:89:6b:51:09:01:0f:c3:99:be:bc:af:45:f1:
bb:a1:4b:69:86:b2:52:b2:39:f5:ee:b2:55:ad:1d:25:05:1c:
e6:36:54:4d:cf:d0:69:6a:be:18:c4:ba:77:15:34:36:53:96:
c9:35:5f:0e:b4:8f:46:d3:d2:d8:44:49:96:07:c5:a8:63:86:
2d:00:d9:49:ff:f0:16:72:1f:29:8f:fb:25:dc:45:9d:12:03:
28:87:e0:eb:a0:9a:80:84:ae:b4:b1:a6:e1:37:07:b9:07:2c:
46:1d:c9:d1:8d:53:3e:4f:f9:70:b6:41:b0:b6:fa:38:a7:ff:
2c:bd:41:13:d3:c8:19:76:62:da:42:4b:a5:6c:4b:af:4c:76:
dc:a2:21:88:03:60:43:a4:04:43:e5:09:69:10:c0:60:7e:c6:
da:d9:99:52:8a:6d:aa:f0:d9:00:76:8f:3c:9e:8d:9f:8c:d5:
61:3d:2b:e5:c6:f0:77:d9:78:ad:59:e4:8e:ca:62:ed:c2:a2:
48:b1:94:76:f7:88:b2:42:af:30:d6:80:7a:cb:8d:57:45:6f:
8c:2a:ed:8a:a9:86:73:bf:c8:d8:d5:5c:48:fb:ff:27:0f:7c:
08:10:57:eb:a0:32:bc:c2:8f:39:64:7b:47:d4:1e:c3:6f:54:
9e:db:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org