Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33332e302f32342d3234203d3e203238323436.roa
File: 3138372e312e33332e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier: RwEWDSwdOISVB0JDkwN69xxyvzyFx+vIdWdS5nUteDs=
Subject key identifier: F6:FF:8A:6B:D5:F4:BF:71:57:7A:E0:45:07:E5:0F:68:98:D1:E7:B8
Certificate issuer: /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial: 24D17D3D4DAB2D677B2798201759BF73F26757AA
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33332e302f32342d3234203d3e203238323436.roa
Signing time: Thu 14 Dec 2023 14:57:24 +0000
ROA not before: Thu 14 Dec 2023 14:52:24 +0000
ROA not after: Thu 12 Dec 2024 14:57:24 +0000
asID: 28246
IP address blocks: 187.1.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d1:7d:3d:4d:ab:2d:67:7b:27:98:20:17:59:bf:73:f2:67:57:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Validity
Not Before: Dec 14 14:52:24 2023 GMT
Not After : Dec 12 14:57:24 2024 GMT
Subject: CN=F6FF8A6BD5F4BF71577AE04507E50F6898D1E7B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:28:e4:62:b0:e4:d6:71:05:ac:d4:6c:6d:
64:8d:77:c1:af:08:b5:c8:c2:bc:13:c6:4d:69:a3:
3f:7a:69:75:ac:ca:1d:4b:1f:0e:91:ae:89:39:0a:
c2:83:c5:b8:35:98:fa:82:4f:8b:b0:2e:6f:db:c8:
2b:92:8c:89:58:98:e7:8f:cd:a7:06:41:3d:fb:b4:
11:2f:43:2d:0c:a8:b6:2f:28:0d:7f:ed:02:86:5e:
78:ab:ba:7f:8f:90:3d:f5:8d:a9:88:3f:7a:48:87:
69:0a:e3:82:3a:c1:e0:2a:a8:8a:c8:52:7b:79:1a:
8a:b6:10:02:c5:cd:c1:1d:87:a6:95:42:1f:91:72:
c3:70:29:58:32:5b:52:ef:24:69:26:21:13:86:39:
9d:60:4f:45:f7:e1:43:c6:aa:06:36:e2:4f:64:a5:
54:2b:39:1c:aa:7f:8f:44:56:8e:ce:ab:a2:cb:d1:
49:9a:09:de:85:60:26:5f:f2:4b:d8:3f:8c:f7:1b:
a7:42:e0:63:f3:10:a2:89:de:35:eb:d4:9a:56:61:
c1:0f:20:40:bc:7b:7b:59:19:f9:39:76:87:da:08:
09:7b:f4:7a:da:ed:d6:09:29:bc:52:cc:98:6d:cd:
c8:36:f2:67:32:89:d3:3e:ac:71:2f:87:e6:c5:45:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:8A:6B:D5:F4:BF:71:57:7A:E0:45:07:E5:0F:68:98:D1:E7:B8
X509v3 Authority Key Identifier:
keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33332e302f32342d3234203d3e203238323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.1.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:37:7c:1f:09:1d:08:8e:71:c7:e3:2c:5c:37:3a:b2:32:f7:
d0:11:f1:6a:55:5c:99:4f:5a:e5:43:1c:fb:df:37:7e:67:9b:
8a:d9:31:25:a3:bb:96:48:8f:41:37:52:0a:d4:44:cf:39:ae:
52:80:9e:05:9d:df:df:fc:33:6d:87:b2:0d:b0:8a:6a:86:96:
eb:1d:4a:49:38:cf:c4:40:17:b7:9b:9b:33:c9:4e:43:9f:4a:
06:f2:9f:8f:eb:62:26:28:f1:5e:23:ba:48:f1:c2:50:2e:d9:
e1:9a:9b:36:16:92:06:9b:00:a3:6a:6d:ac:9e:9e:90:6e:a8:
1e:82:92:89:ac:e4:51:72:0a:3c:ec:78:47:12:67:97:1d:34:
b5:7a:6b:15:0e:06:e1:f1:b3:df:f2:6f:0b:be:1c:46:8e:9d:
55:e0:8c:73:34:73:c0:f9:2b:b8:fc:af:14:c1:28:11:0c:fc:
b8:ff:e1:35:f7:0f:5d:47:f5:d9:21:c4:c1:84:40:a6:ae:48:
6a:c9:7f:20:37:e2:2e:5f:b3:29:ab:f5:bf:1f:3a:cc:94:49:
b2:d5:e7:b9:d3:36:e4:6f:57:b7:ad:5e:a4:1d:63:6b:f4:74:
30:29:fa:40:52:69:87:b0:48:3b:64:44:84:54:15:a7:bd:c4:
00:76:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:41 2025 by rpki-client