Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32332d3234203d3e20323632333031.roa
File: 3137302e302e3234382e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier: twun+Dph2cGrUCwTUroBiZ5l4s0mvV7dd/zK5TLCppQ=
Subject key identifier: EA:25:43:3B:DE:6A:9D:5C:5B:60:70:91:4E:98:B6:41:9D:8B:AB:8D
Certificate issuer: /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial: 7979D47C68E511C49096FB645E61AED7057959E1
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32332d3234203d3e20323632333031.roa
Signing time: Tue 12 Mar 2024 16:40:25 +0000
ROA not before: Tue 12 Mar 2024 16:35:25 +0000
ROA not after: Tue 11 Mar 2025 16:40:25 +0000
asID: 262301
IP address blocks: 170.0.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:79:d4:7c:68:e5:11:c4:90:96:fb:64:5e:61:ae:d7:05:79:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Validity
Not Before: Mar 12 16:35:25 2024 GMT
Not After : Mar 11 16:40:25 2025 GMT
Subject: CN=EA25433BDE6A9D5C5B6070914E98B6419D8BAB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:25:94:01:6d:f7:7c:92:7b:7d:0e:e4:57:
b4:65:d0:1a:ae:9f:64:89:b1:13:24:93:59:d5:2b:
2b:1f:f8:87:4f:ac:42:a3:16:29:de:63:c5:05:7d:
42:47:d6:53:06:91:73:13:41:89:6b:4b:7d:c3:de:
ec:ae:ec:72:8d:ea:96:88:a3:dd:08:07:b0:ba:8a:
5a:53:12:30:b6:29:63:9a:60:4e:8c:04:02:b8:51:
0b:6c:cb:24:53:b9:e4:75:0d:33:c7:02:f0:0b:f6:
f7:24:10:03:c2:81:1f:ad:77:78:03:d2:31:75:d3:
67:71:56:c6:d2:e2:76:1a:f4:9e:ad:96:e4:60:79:
ff:32:d1:7a:dc:7f:44:91:77:07:9c:df:73:53:54:
44:1d:12:dc:0c:60:d6:6c:5f:de:4d:c9:f5:98:65:
5b:a0:84:3a:d0:86:94:df:9c:57:4e:ac:fd:b7:34:
5f:1f:fe:7b:3c:b8:fb:74:4a:53:e5:b4:0e:c9:62:
1a:e4:e5:4c:fb:10:d3:99:05:3f:8b:dd:85:c2:c7:
ef:1d:52:62:dd:2d:32:d2:71:09:7f:53:ca:93:1d:
b4:e0:3e:cc:08:21:c4:8e:c5:98:34:a9:ba:ff:72:
21:da:83:e8:2a:00:ef:bf:87:88:bc:b3:cf:08:76:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:25:43:3B:DE:6A:9D:5C:5B:60:70:91:4E:98:B6:41:9D:8B:AB:8D
X509v3 Authority Key Identifier:
keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137302e302e3234382e302f32332d3234203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.248.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:70:66:2c:ac:98:85:cf:28:9a:fd:6e:32:64:01:dc:18:dd:
3e:c0:10:a5:f7:01:01:f6:8f:26:4b:e5:7d:8c:51:f6:3f:4e:
1c:52:04:6f:64:3c:51:0d:0f:07:d8:2f:16:aa:1b:53:69:26:
36:b8:0a:1b:7b:ae:c3:eb:2f:57:74:f3:8a:54:db:c8:39:aa:
84:e9:32:9b:e9:aa:53:5c:6a:c0:b0:3a:b8:52:84:96:1d:c7:
e8:4e:b8:6a:d0:e7:5d:ed:12:3c:dd:ea:e0:2d:5e:aa:8b:76:
bd:4f:de:c9:f5:04:cf:f8:df:72:17:4a:70:cc:a1:15:cb:0b:
49:1d:dd:2a:e1:56:7b:b4:c1:d2:c8:1c:be:8c:d8:02:8c:7f:
3b:18:f8:05:18:6f:05:9a:2f:39:2b:78:e9:ac:07:15:8d:98:
89:5e:f5:92:ba:68:1e:12:c2:d5:6f:03:94:18:5e:6f:91:7c:
86:b1:1a:4c:5c:74:64:87:3e:1c:fe:19:e8:e9:34:03:1d:e1:
cc:84:9a:04:1c:7d:df:af:53:d8:a3:bf:04:7d:a8:65:6d:cd:
b1:08:62:83:0c:3d:b7:b2:24:e3:8c:11:ed:10:72:20:53:b0:
3f:f6:7f:34:63:7e:4b:59:08:e8:e0:2c:d2:95:80:a2:c1:32:
68:a0:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:32 2025 by rpki-client