Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
File: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (raw, json)
Hash identifier: IpDQIDAK4ltT5DPivkk+ZITrKbAQc/6slJsOAtbO6UM=
Subject key identifier: E9:5F:11:D2:90:C4:89:C7:0D:8C:D0:E3:21:B7:08:19:0F:09:4F:8B
Certificate issuer: /CN=A2EF5A29320B90E1B74D49BF320060FEC27F394F
Certificate serial: 2D73CFD737485008FA0F52D107AB975188A3902B
Authority key identifier: A2:EF:5A:29:32:0B:90:E1:B7:4D:49:BF:32:00:60:FE:C2:7F:39:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
Signing time: Thu 04 Apr 2024 13:19:01 +0000
ROA not before: Thu 04 Apr 2024 13:14:01 +0000
ROA not after: Thu 03 Apr 2025 13:19:01 +0000
asID: 266343
IP address blocks: 170.239.4.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:73:cf:d7:37:48:50:08:fa:0f:52:d1:07:ab:97:51:88:a3:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2EF5A29320B90E1B74D49BF320060FEC27F394F
Validity
Not Before: Apr 4 13:14:01 2024 GMT
Not After : Apr 3 13:19:01 2025 GMT
Subject: CN=E95F11D290C489C70D8CD0E321B708190F094F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:45:9f:93:54:5d:a0:c5:4b:aa:6d:b6:f8:
9b:8c:d9:0b:30:20:b6:d6:ed:6b:ec:a9:0f:1f:51:
5f:45:d4:85:1f:fa:3f:68:6f:55:20:7e:22:aa:a4:
f7:c3:10:c5:5e:40:0b:7c:24:f1:16:81:d7:7c:41:
79:ea:65:32:f1:8d:ac:50:32:17:8b:fe:30:f2:87:
f9:a9:04:68:59:0e:9c:17:b0:fe:7c:9c:e6:a2:e2:
0b:70:7e:32:2a:07:9c:4e:c8:be:2a:92:7f:71:6a:
ac:23:09:65:dd:bd:9f:ac:67:78:d8:26:d6:d4:a7:
16:4e:8f:6f:24:ef:da:de:53:f3:57:6d:66:ad:e3:
89:17:85:4f:ec:e8:a6:33:c9:d2:5d:2f:e4:ea:bc:
e7:71:7b:70:55:fe:88:63:f8:a4:13:1e:70:28:bb:
a6:4c:8a:b5:a2:71:7f:ae:4f:26:9f:6d:c7:61:f2:
2a:04:1f:1a:16:d5:6d:85:eb:6a:ae:b3:f3:28:4c:
60:5f:00:c5:09:81:7a:94:62:b9:ac:5c:d0:64:9a:
09:81:1f:5c:a9:9f:fb:a7:ed:32:2a:6a:84:c6:9e:
85:b0:16:7e:6d:6d:5a:15:25:eb:c4:3b:3d:4e:2f:
06:65:17:fe:29:7c:02:83:81:36:c5:d7:d7:e5:3f:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:11:D2:90:C4:89:C7:0D:8C:D0:E3:21:B7:08:19:0F:09:4F:8B
X509v3 Authority Key Identifier:
keyid:A2:EF:5A:29:32:0B:90:E1:B7:4D:49:BF:32:00:60:FE:C2:7F:39:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2EF5A29320B90E1B74D49BF320060FEC27F394F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/1/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.4.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ef:3b:fa:2d:88:f8:d2:d0:88:c9:49:29:c8:24:98:93:b3:
e7:7e:e3:b0:f4:8e:26:51:03:66:43:fa:11:96:e0:a1:08:48:
4f:8d:6e:bd:f2:f8:90:bd:57:eb:5e:4c:d2:34:8e:7f:80:f0:
18:cf:dd:57:70:e3:c8:43:74:ab:b8:f6:60:56:7c:ef:d5:a0:
20:96:e0:d8:41:e1:03:bd:80:85:d3:7b:c1:3b:86:0c:ad:eb:
3b:68:ce:0b:1e:2e:05:cf:1b:6b:7c:92:e7:95:57:57:db:2d:
3a:b4:c5:6a:14:75:47:9a:b0:2a:84:7c:7a:5b:34:d4:1e:bd:
fd:d4:aa:09:fc:cf:2b:9b:6c:69:cb:24:ef:56:a3:90:d4:84:
be:de:94:cc:6e:be:9e:3f:29:f6:ec:30:36:ab:95:45:da:98:
b6:5a:a3:2f:b2:76:97:ca:17:48:f6:bc:db:56:9b:85:b6:55:
6a:b9:3a:11:93:1b:91:82:ef:95:24:2b:c3:38:04:03:16:e9:
80:55:72:e6:a9:ed:1d:07:f7:1c:c6:b3:5a:46:1d:66:11:6f:
a3:18:fb:a6:a4:fa:13:07:fd:a4:34:b9:6b:40:d0:3f:c3:eb:
33:b8:fa:b4:97:1a:04:68:bb:c8:8d:eb:76:da:47:61:7f:1c:
af:9c:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org