Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132372e302f32342d3234203d3e203237373135.roa
File: 3137372e36372e3132372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier: OY41D2FcU9yJxzC8d3nR4mIZZ07Q3MCxLr2dKJnrcNQ=
Subject key identifier: 82:8F:45:88:9E:4A:FD:CF:07:D5:81:86:BB:43:B8:12:17:50:88:62
Certificate issuer: /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial: 598A315485DF3FF50F4692C950D7C15EAD485A7B
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132372e302f32342d3234203d3e203237373135.roa
Signing time: Wed 08 Nov 2023 17:22:36 +0000
ROA not before: Wed 08 Nov 2023 17:17:36 +0000
ROA not after: Wed 06 Nov 2024 17:22:36 +0000
asID: 27715
IP address blocks: 177.67.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:8a:31:54:85:df:3f:f5:0f:46:92:c9:50:d7:c1:5e:ad:48:5a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Validity
Not Before: Nov 8 17:17:36 2023 GMT
Not After : Nov 6 17:22:36 2024 GMT
Subject: CN=828F45889E4AFDCF07D58186BB43B81217508862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:e2:e3:a8:dc:71:7d:5d:66:01:a1:1a:81:
71:fc:0b:d2:b5:c5:6f:3f:1b:13:99:8a:49:c5:d6:
ad:99:19:48:46:f6:09:79:7b:f9:5d:d4:4e:9a:86:
b4:c2:e7:51:c6:27:aa:6c:80:c1:83:b8:57:2b:a4:
51:b7:35:e1:3e:80:00:4c:db:17:06:1c:9c:89:4f:
a1:bf:44:80:45:5b:e9:f6:bb:d6:be:40:bf:93:3c:
4b:f9:69:fc:50:cc:54:d2:e1:71:04:f7:05:12:76:
b6:14:72:f0:4d:0b:1c:b0:31:e0:bf:b4:07:ff:70:
51:78:11:a0:a9:e9:9d:08:91:54:81:91:54:55:7a:
61:e1:84:7c:ca:68:0f:01:50:f5:d2:2e:93:bb:c5:
98:e5:b1:21:da:48:9a:75:c6:c1:b8:94:63:71:12:
18:01:a0:da:d1:84:17:a8:bc:21:5b:cc:fc:c7:25:
0c:e2:8f:a0:f3:fb:4a:37:75:77:4f:c0:c9:38:f7:
7f:4a:c0:2d:4e:17:65:c6:95:1a:39:82:cb:0e:ec:
fd:f5:d4:18:f3:33:e2:ea:83:ee:4f:d0:d1:09:34:
87:9e:00:b6:46:6e:84:81:d7:34:bb:e7:60:56:48:
63:c9:d2:64:12:29:14:46:e9:dc:26:c1:1b:8b:ee:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:45:88:9E:4A:FD:CF:07:D5:81:86:BB:43:B8:12:17:50:88:62
X509v3 Authority Key Identifier:
keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132372e302f32342d3234203d3e203237373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.127.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:a1:4a:49:5a:8a:80:ee:a0:60:ce:fb:47:69:12:1a:ac:26:
64:3d:29:a7:96:7b:ca:73:a6:8b:86:a4:78:2e:5a:ad:4b:6a:
e8:2f:34:d4:7d:ee:d6:78:a2:4d:81:85:2a:ff:90:2a:36:29:
2e:05:22:07:a4:06:70:98:c2:16:0e:c7:79:c3:8d:84:00:dc:
5b:2b:df:da:40:11:7c:f4:7a:28:d5:a4:b9:2d:82:2c:be:57:
0d:f1:4a:5d:b1:b0:39:40:d2:05:39:3e:c0:9b:4d:93:fe:b7:
c9:93:6c:78:ac:e2:2e:00:84:3e:f2:46:06:c3:0d:62:fa:65:
00:49:59:af:15:ba:75:3b:5b:2c:14:d6:8e:ce:c9:90:da:54:
f5:e3:82:18:94:1d:04:ed:63:a2:a7:a8:fd:eb:5c:d4:86:32:
36:bc:06:0d:d8:98:bf:93:de:da:03:28:db:19:b1:dd:c8:b1:
d6:e8:a0:fe:88:2f:e1:9d:82:64:63:94:80:33:aa:72:d4:39:
0b:2d:65:92:bf:4a:a0:dd:8f:94:22:9c:fd:88:ad:62:9e:8c:
dd:b0:a9:e2:0e:87:8b:58:12:a6:43:cc:5a:7f:76:14:f9:26:
e1:68:83:ed:bc:a6:e2:a9:c5:22:96:89:e4:c0:db:3e:3a:cd:
b8:cc:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:06 2025 by rpki-client