Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
File: 3137372e382e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier: PsAYIFEYB2e/UJN1KCpyuZgPXQMr4gbHkhQ1Uzdmqog=
Subject key identifier: C0:C5:11:FD:8B:4E:74:F5:88:01:3B:2F:A5:96:47:BD:27:0D:C8:17
Certificate issuer: /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial: 0A68857C7516BE0775AFF569AD8D32D538254506
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
Signing time: Tue 23 Jul 2024 11:51:16 +0000
ROA not before: Tue 23 Jul 2024 11:46:16 +0000
ROA not after: Tue 22 Jul 2025 11:51:16 +0000
asID: 28667
IP address blocks: 177.8.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:68:85:7c:75:16:be:07:75:af:f5:69:ad:8d:32:d5:38:25:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Validity
Not Before: Jul 23 11:46:16 2024 GMT
Not After : Jul 22 11:51:16 2025 GMT
Subject: CN=C0C511FD8B4E74F588013B2FA59647BD270DC817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:88:f1:b6:4f:fd:94:17:96:57:fa:18:64:
f6:62:da:8e:0b:3a:70:0f:c5:62:6f:ec:3c:f1:2b:
fc:1f:f5:da:ae:f8:bf:36:ed:3e:fc:e9:4a:3a:bc:
00:a1:9c:51:76:9e:fd:61:de:b0:69:b4:ba:cc:65:
ab:3e:6d:2c:05:d6:55:f6:58:b9:fc:17:c3:d1:e1:
bf:59:7b:87:1a:5f:25:14:5a:ec:4c:25:fd:57:15:
ab:b6:b6:12:3c:89:96:2a:94:5f:ae:56:1f:d8:0d:
e9:8c:3f:42:a6:61:d8:5a:82:ba:35:49:6a:60:67:
6a:35:8d:ab:0e:fd:71:43:13:b0:4b:a7:f1:4c:b4:
72:3f:84:cb:75:e0:a4:86:fa:f7:69:75:0c:cf:cb:
ac:cf:00:54:81:a6:a8:40:37:e2:4e:b3:6d:8c:ec:
ab:71:2f:77:36:60:71:28:51:81:4b:3d:4c:10:f2:
ee:04:c1:6d:f6:a3:0b:b6:04:50:34:eb:a6:5d:51:
50:22:0c:fe:38:9b:8a:f6:78:2c:96:e4:33:e3:bd:
02:19:97:98:8b:da:a7:6b:de:a7:e2:05:df:f4:da:
65:e2:c7:fa:6c:a7:dd:1d:2f:00:c3:c1:a4:5d:31:
37:a0:fe:a8:cc:17:20:ba:b1:c1:d0:2b:de:8e:82:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C5:11:FD:8B:4E:74:F5:88:01:3B:2F:A5:96:47:BD:27:0D:C8:17
X509v3 Authority Key Identifier:
keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.208.0/21
Signature Algorithm: sha256WithRSAEncryption
88:e2:10:dd:45:5c:c0:73:5d:a0:e5:b0:13:c1:d1:87:a0:3a:
03:83:e0:c3:0f:e0:16:46:23:80:d5:73:89:d2:c5:d6:10:2d:
d3:e1:9c:c2:e9:23:22:87:75:09:cb:da:be:c3:76:d9:a7:24:
66:57:0e:35:4a:68:3d:0d:28:c3:3b:12:0b:fe:83:e9:2e:00:
6a:a6:23:78:cd:3b:8e:dd:b9:ae:d1:f4:e0:f9:2d:58:b7:ec:
ec:ba:26:d5:06:d6:17:69:be:d3:8d:ad:d6:d9:c0:0e:ec:92:
25:23:81:13:0c:9a:52:f9:d1:79:9d:80:c7:5d:77:5c:5e:29:
21:5a:31:95:00:1b:ee:c9:ec:f8:31:9b:e9:6b:71:db:ac:c1:
ec:ac:ff:c3:a3:8e:9b:9a:2c:d1:c1:d8:04:db:43:2c:6e:2e:
ea:9f:ea:e0:72:dd:c3:94:99:30:51:62:c1:9b:01:0a:29:7f:
99:e9:5d:1a:e5:46:91:c5:bf:37:5a:8a:12:38:75:2c:ae:cf:
03:36:1f:7d:9f:bb:3d:bf:fd:2d:1b:60:ab:c5:69:4a:f8:07:
07:30:48:d4:df:d9:e1:b7:60:02:41:40:dc:74:9e:33:7d:b2:
c5:97:e3:69:b9:d4:48:e3:cb:a2:41:65:66:d1:78:dd:1b:e2:
1f:c6:50:85
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCmiFfHUWvgd1r/VprY0y1TglRQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3MjE2QjE2OEE5NkZENjkzODlCMUM3RTFBMTVGQkFE
MUUyMTg0RjAeFw0yNDA3MjMxMTQ2MTZaFw0yNTA3MjIxMTUxMTZaMDMxMTAvBgNV
BAMTKEMwQzUxMUZEOEI0RTc0RjU4ODAxM0IyRkE1OTY0N0JEMjcwREM4MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDIjxtk/9lBeWV/oYZPZi2o4L
OnAPxWJv7DzxK/wf9dqu+L827T786Uo6vAChnFF2nv1h3rBptLrMZas+bSwF1lX2
WLn8F8PR4b9Ze4caXyUUWuxMJf1XFau2thI8iZYqlF+uVh/YDemMP0KmYdhagro1
SWpgZ2o1jasO/XFDE7BLp/FMtHI/hMt14KSG+vdpdQzPy6zPAFSBpqhAN+JOs22M
7KtxL3c2YHEoUYFLPUwQ8u4EwW32owu2BFA066ZdUVAiDP44m4r2eCyW5DPjvQIZ
l5iL2qdr3qfiBd/02mXix/psp90dLwDDwaRdMTeg/qjMFyC6scHQK96OgthlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwMUR/YtOdPWIATsvpZZHvScNyBcwHwYDVR0j
BBgwFoAURXIWsWipb9aTibHH4aFfutHiGE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMi80NTcyMTZCMTY4QTk2RkQ2OTM4OUIxQzdFMUExNUZCQUQxRTIxODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NzIxNkIxNjhBOTZGRDY5
Mzg5QjFDN0UxQTE1RkJBRDFFMjE4NEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzIv
MzEzNzM3MmUzODJlMzIzMDM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7EI0DANBgkqhkiG9w0BAQsFAAOCAQEAiOIQ3UVcwHNd
oOWwE8HRh6A6A4Pgww/gFkYjgNVzidLF1hAt0+GcwukjIod1CcvavsN22ackZlcO
NUpoPQ0owzsSC/6D6S4AaqYjeM07jt25rtH04PktWLfs7Lom1QbWF2m+042t1tnA
DuySJSOBEwyaUvnReZ2Ax113XF4pIVoxlQAb7sns+DGb6Wtx26zB7Kz/w6OOm5os
0cHYBNtDLG4u6p/q4HLdw5SZMFFiwZsBCil/meldGuVGkcW/N1qKEjh1LK7PAzYf
fZ+7Pb/9LRtgq8VpSvgHBzBI1N/Z4bdgAkFA3HSeM32yxZfjabnUSOPLokFlZtF4
3RviH8ZQhQ==
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org