Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
File: 3137372e38372e31362e302f32312d3234203d3e203533313731.roa (raw, json)
Hash identifier: breHyxAtNEiCETJDLUYF6YWSpHOZNrbJmD1BYH07Q7E=
Subject key identifier: 76:D8:0D:44:64:50:B6:F8:40:8C:99:3C:0D:DB:CA:AB:2C:0B:B5:FE
Certificate issuer: /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial: 6EFA0F014380E1384EFDFAAFD17A23BFE3058F9A
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
Signing time: Tue 23 Jul 2024 12:02:30 +0000
ROA not before: Tue 23 Jul 2024 11:57:30 +0000
ROA not after: Tue 22 Jul 2025 12:02:30 +0000
asID: 53171
IP address blocks: 177.87.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fa:0f:01:43:80:e1:38:4e:fd:fa:af:d1:7a:23:bf:e3:05:8f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Validity
Not Before: Jul 23 11:57:30 2024 GMT
Not After : Jul 22 12:02:30 2025 GMT
Subject: CN=76D80D446450B6F8408C993C0DDBCAAB2C0BB5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:82:6f:78:de:3b:53:5e:19:92:56:08:9c:
85:dd:b0:5f:e0:ac:1d:6d:49:33:73:19:23:d0:a2:
83:3c:96:10:ee:5c:04:ad:09:71:3b:b3:06:22:79:
f3:71:f0:26:8d:ba:fa:46:f7:8b:1b:f1:44:85:81:
55:27:44:5d:e5:71:bd:25:88:0c:08:2d:ed:26:c6:
95:fe:57:34:a4:16:80:0b:f5:bf:01:93:69:0e:2a:
8e:34:07:a0:c5:e4:59:57:50:ae:46:fe:0c:7a:ca:
4a:db:fa:2b:cc:04:59:f6:6a:e1:5c:20:80:fe:22:
65:8b:46:31:78:78:ac:a0:52:3f:b8:db:b8:b4:4d:
a3:e4:57:60:0d:40:9a:ce:a4:a2:8e:b8:77:50:70:
ae:9e:d5:78:c2:30:60:5c:69:81:f7:e9:f7:10:04:
5f:d4:a6:5f:9e:b2:48:f0:f3:c2:9c:91:f0:20:31:
80:10:c7:e5:e3:a4:62:9f:00:5e:40:17:b0:4e:5d:
4c:d6:5e:2e:74:ab:0a:56:68:09:01:7f:68:1f:5a:
e5:6f:b8:c5:1f:62:8c:c2:b5:44:da:68:e7:ef:d5:
3e:26:a8:86:10:04:90:0d:8d:54:51:2b:02:ef:27:
f8:35:2d:2c:cc:e2:f6:4c:7c:c4:32:bf:e7:4a:20:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D8:0D:44:64:50:B6:F8:40:8C:99:3C:0D:DB:CA:AB:2C:0B:B5:FE
X509v3 Authority Key Identifier:
keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.87.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:46:d5:59:ec:33:cf:7e:e0:6c:2a:3b:df:3e:d6:72:20:43:
6b:ac:b9:5f:bb:89:99:88:e5:db:5e:d1:aa:89:e7:de:0c:23:
47:fd:c1:79:db:f6:d5:5b:55:39:38:75:f0:91:e3:bd:d4:a1:
90:af:b7:fe:b2:1d:c7:83:35:c9:49:3c:2b:53:e7:31:d7:ad:
08:82:04:c5:5c:54:b9:a3:a8:60:70:99:d5:e5:6f:98:39:0a:
9c:a2:e6:1e:84:4f:e1:1d:0a:a4:00:fa:72:10:b7:46:9b:fd:
f5:c8:0b:c2:34:c0:8e:a2:e7:67:85:a5:b9:c6:8b:a3:eb:f0:
6d:34:70:a0:5f:79:64:b1:95:49:79:85:74:07:f7:16:ce:91:
a6:4c:4b:8d:db:55:3d:86:c8:07:37:65:a2:4f:a3:cd:3c:3d:
ea:a2:5e:fb:66:5b:21:66:50:33:53:90:ed:f0:51:d3:69:eb:
25:33:62:f2:0c:f0:24:df:86:fe:af:cb:67:79:56:3b:31:04:
d4:2a:82:97:95:df:af:cf:7a:fe:42:13:80:fc:08:32:f0:b7:
54:c9:45:62:1d:3d:4f:4e:32:a9:59:bc:94:e5:15:27:04:a0:
b0:cd:82:de:4b:02:13:b1:0b:91:43:41:96:c1:26:4f:7e:79:
0e:d8:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org