Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
File: 3137302e37382e38302e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: u5A/baQW/JvKYXDysjZ6hx/wFlVk8h0BwTMt1A+fI1w=
Subject key identifier: 9C:F3:4B:CB:1A:EE:B8:48:F6:2B:CD:BA:28:3D:1B:6F:FC:4C:FF:56
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 05B11661BCE642D1F29092DF9B18162DFAC39B98
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:11 +0000
ROA not before: Fri 22 Dec 2023 20:20:11 +0000
ROA not after: Fri 20 Dec 2024 20:25:11 +0000
asID: 263073
IP address blocks: 170.78.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b1:16:61:bc:e6:42:d1:f2:90:92:df:9b:18:16:2d:fa:c3:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:11 2023 GMT
Not After : Dec 20 20:25:11 2024 GMT
Subject: CN=9CF34BCB1AEEB848F62BCDBA283D1B6FFC4CFF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:a3:cf:6b:ea:e2:7e:6b:ea:de:da:bf:86:
36:5b:0b:e4:6c:cb:a6:bd:20:48:ca:2e:a3:88:41:
84:6b:ea:f8:60:f4:6c:13:0d:97:07:ad:d0:0c:01:
e2:cf:37:c4:1c:e0:06:0e:34:95:8b:b2:37:e4:7e:
9d:24:94:ed:0c:75:15:e0:f3:1a:b8:a4:09:f5:26:
2a:74:db:5b:1e:03:62:0c:1d:7f:6d:49:69:57:f8:
cb:ed:9f:7d:b7:e9:30:30:1e:50:ce:de:9f:fc:45:
7c:4b:a1:4d:4e:01:a7:33:54:bd:95:11:08:da:af:
91:01:fd:74:f1:0b:f7:be:bf:c7:f8:36:ca:f9:e6:
76:7e:94:13:ef:96:0d:69:ee:75:d0:77:e8:0a:e4:
06:27:7a:07:97:12:b3:80:7f:31:a0:d0:a2:1f:55:
e9:d0:fb:d1:45:2a:36:4d:95:b1:be:ba:1b:67:8a:
24:96:80:7c:0e:d3:9f:bd:da:7c:96:7b:59:7e:dc:
5a:f5:48:89:67:43:43:cc:13:9c:27:fa:af:2f:2a:
9b:24:2a:a8:97:8a:c7:d5:4b:89:5d:f3:c8:76:f9:
45:be:11:1f:d1:06:56:cd:67:a6:db:2e:5e:00:e2:
53:7e:15:f2:e3:e8:e2:ee:7a:da:4a:e0:d9:b7:c0:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:4B:CB:1A:EE:B8:48:F6:2B:CD:BA:28:3D:1B:6F:FC:4C:FF:56
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c3:25:6a:22:b1:f0:f1:5a:83:46:90:57:a3:42:c7:28:9b:
0f:6e:af:ce:d9:3a:cb:ba:cd:53:b8:19:cf:fc:65:46:94:8b:
31:94:38:2b:e9:e4:00:db:16:73:e2:57:85:c4:45:bd:f5:39:
85:55:63:4a:b1:3d:48:e4:9b:51:01:5c:5b:a9:95:f8:c6:63:
a5:39:5f:7f:27:fa:54:03:7e:ec:47:33:ae:8e:ce:8f:5e:0b:
98:63:11:32:2f:bb:92:41:4a:b9:63:bf:89:70:0e:10:b6:bb:
b9:ea:4f:f1:86:53:b7:50:0d:d7:17:ac:0b:85:76:e7:a8:94:
3a:7b:bd:29:8a:67:f2:ea:ed:4c:ba:b7:68:36:0b:ca:53:c1:
79:19:5e:6b:09:be:30:85:1c:1f:c9:f8:92:72:80:39:dc:ad:
1b:42:5c:da:5a:91:6e:df:24:59:27:fd:37:12:d5:16:7e:61:
2e:5a:96:a8:d9:b4:cc:00:81:55:e1:6c:d8:e7:f2:12:59:6b:
46:45:37:69:0e:90:e7:8f:02:31:0d:40:02:34:a6:f2:3b:e1:
12:87:b7:05:78:21:53:fb:fb:67:5a:55:7e:48:4f:c4:6c:6d:
73:7a:98:d0:16:50:c6:98:ff:3a:44:cd:e6:08:63:ea:ae:93:
98:23:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:42:24 2025 by rpki-client