Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
File: 3137302e37382e38302e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier: yntiR9sMAMEqnmP4kf+8eU146VZtsUFMmuW1taIen8w=
Subject key identifier: 6B:4F:44:D1:3B:F3:CB:A6:68:A9:75:56:41:8E:59:9A:32:A0:45:51
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 41C99723FCFB607593BB2D7B38915E19BC3E692D
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:07 +0000
ROA not before: Fri 22 Dec 2023 20:20:07 +0000
ROA not after: Fri 20 Dec 2024 20:25:07 +0000
asID: 263073
IP address blocks: 170.78.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c9:97:23:fc:fb:60:75:93:bb:2d:7b:38:91:5e:19:bc:3e:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:07 2023 GMT
Not After : Dec 20 20:25:07 2024 GMT
Subject: CN=6B4F44D13BF3CBA668A97556418E599A32A04551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:69:f4:f7:fb:c5:30:63:52:4a:5a:f2:d1:
15:ca:a0:d0:c9:77:ed:6d:e0:9a:0e:03:d8:63:b5:
03:dd:8d:dc:cb:73:cc:12:64:3f:33:40:6d:b3:38:
14:98:b5:2d:b2:63:62:ab:4f:99:d4:82:64:5d:86:
4b:4b:6d:83:23:a8:43:60:ad:98:c8:0e:23:79:6a:
83:3b:58:e3:75:6b:ce:10:1f:52:9e:e0:ca:a7:87:
ff:5d:4c:d3:e9:5d:5e:f0:31:fd:55:cf:49:02:2a:
c3:cb:9e:78:8b:43:b1:85:a2:21:1d:d8:21:11:db:
57:97:38:ba:d4:66:2a:54:4b:af:9e:33:e1:6a:7a:
23:36:5f:bc:e3:30:88:a2:55:26:bc:5f:ad:9f:6b:
32:b7:da:59:27:20:6e:a6:27:b1:d6:a9:de:58:01:
83:de:32:11:94:a6:2d:1c:5e:ab:40:49:b9:77:c2:
4f:8c:76:bb:47:9a:ef:39:19:cd:78:fa:4e:ff:f3:
a4:7f:27:c3:6c:4c:0e:c7:88:3c:c1:b4:f2:01:46:
7f:dc:81:40:82:8d:ca:5e:4f:45:cb:fb:3f:0e:d1:
e2:4f:f2:4f:ef:ec:72:18:23:cc:c4:cf:96:81:6b:
03:8c:9b:e4:35:16:cc:a7:2d:f0:01:9c:30:47:87:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:44:D1:3B:F3:CB:A6:68:A9:75:56:41:8E:59:9A:32:A0:45:51
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:9a:34:8b:e7:55:ac:ef:f9:a2:d3:9a:ab:1f:c9:5b:e7:6c:
d0:9a:f5:5a:db:3a:70:6b:aa:5d:c2:ec:3d:b0:60:f6:64:ce:
b5:7a:2b:2c:d6:11:e4:e7:30:81:c7:3a:5c:6b:b6:69:38:9c:
10:0b:f0:f8:d2:1a:1a:9f:5f:1c:95:18:47:de:3e:79:0d:39:
bf:94:e8:da:a4:bc:7c:ea:ac:60:51:f4:06:cb:4b:40:c2:29:
84:96:82:e9:ed:43:e7:b6:0c:4c:68:1d:34:dc:32:ba:18:1f:
11:f1:43:5a:71:86:3f:65:73:82:7a:45:92:85:83:c0:b3:3a:
76:c8:3e:c1:df:13:2d:38:9d:79:58:78:e4:eb:b9:57:54:32:
58:a8:29:40:b9:92:73:5b:30:41:45:38:6f:8f:ef:8f:f6:bd:
db:25:9b:2c:48:5f:80:fa:f2:2d:b9:77:15:71:f5:6f:d9:27:
43:3e:b9:ef:1c:a9:5f:25:2e:4e:e3:0a:4f:a8:96:2c:e8:11:
5e:f1:73:93:2f:f1:5b:81:a5:b2:46:8f:e1:94:e1:0e:88:d8:
75:f2:a0:0a:14:40:7e:7f:63:63:14:2f:8c:1b:4e:f5:48:7f:
3c:70:71:0f:28:dc:23:58:4c:c6:7b:7f:9e:44:95:44:81:8c:
4a:2a:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:41 2025 by rpki-client