Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
File: 3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa (raw, json)
Hash identifier: jZPFxp+Ua7XdgV5znIKdmgbUoMnZwZO6yMOO/gYWaIo=
Subject key identifier: E1:3F:B7:D8:C2:91:14:F7:AC:84:D2:D8:24:AD:46:46:1E:9A:8C:E1
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 618113BB9809ABDEFA8C3671BFC2141CC0C46FA1
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:06 +0000
ROA not before: Fri 22 Dec 2023 20:20:06 +0000
ROA not after: Fri 20 Dec 2024 20:25:06 +0000
asID: 263073
IP address blocks: 177.223.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:81:13:bb:98:09:ab:de:fa:8c:36:71:bf:c2:14:1c:c0:c4:6f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:06 2023 GMT
Not After : Dec 20 20:25:06 2024 GMT
Subject: CN=E13FB7D8C29114F7AC84D2D824AD46461E9A8CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:45:5f:a0:eb:54:0e:42:2d:1b:9a:af:cd:
b2:bb:25:55:70:3a:9a:ca:9a:00:26:81:3b:7d:f7:
91:ee:78:b5:b1:ed:09:b7:12:20:dd:92:cd:0a:da:
57:c0:f9:90:25:74:c3:25:ad:e7:be:58:36:f9:94:
b7:ed:75:b4:b1:8e:30:82:ab:4e:5b:e6:f2:f0:eb:
55:79:e3:e6:71:42:d6:21:b1:be:c8:ce:65:55:6e:
2d:45:05:95:d3:d1:cb:91:58:53:ad:d7:0e:43:0e:
a5:42:2b:78:31:9f:09:31:cf:33:f4:1f:85:ab:d9:
d3:bd:0d:9d:66:6a:bc:58:30:d2:4e:84:7b:ce:13:
18:6a:a5:67:58:ad:14:1d:3f:8b:d1:8b:68:a9:88:
49:c2:7f:69:87:ab:52:9c:19:d9:8a:25:92:ff:b6:
ab:85:d6:1b:1f:95:df:83:97:fe:ff:82:0b:e8:ba:
7a:fd:d6:2f:aa:a2:62:fb:46:a0:70:c3:53:6f:b0:
a4:8a:1b:35:cc:db:2f:fa:7e:18:a5:50:7e:8c:25:
df:c8:3b:7e:35:55:35:24:ed:1f:65:4a:92:ae:73:
44:d4:c9:2e:c6:52:5a:01:91:ee:cd:6f:a2:ca:8b:
c7:de:fc:72:f4:c3:a8:44:8b:e7:20:fc:6c:9c:ed:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:B7:D8:C2:91:14:F7:AC:84:D2:D8:24:AD:46:46:1E:9A:8C:E1
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:16:6c:39:53:09:a0:f7:90:ff:3a:f2:b7:6d:60:02:44:2a:
d2:8e:7b:2d:0b:e3:6b:47:6a:2b:80:8a:ef:cf:3a:b3:78:f5:
ef:bb:eb:9d:7b:aa:b0:52:e4:40:b5:28:40:98:0c:3c:3f:4e:
2d:a6:6c:18:07:c4:d2:bf:31:df:92:34:f9:02:45:fb:18:e1:
2d:cd:1d:97:50:8d:41:ce:83:25:45:6e:56:a4:6b:4b:f7:6b:
85:bc:cd:2f:2a:af:e3:44:5b:33:a1:89:20:8c:6b:7d:2d:79:
39:ef:f8:12:20:d3:55:3d:7d:b1:23:c1:90:0b:29:10:72:f7:
7b:ab:9d:94:19:65:e0:04:63:c9:58:b8:a4:19:bf:94:f8:3d:
58:43:0e:13:30:23:57:7f:d0:5f:e3:77:22:56:70:e3:b3:eb:
94:97:e4:7f:75:88:9f:e5:1d:28:5c:15:ed:a9:17:e5:ba:36:
5c:32:0f:55:1d:23:4b:f5:eb:de:46:3f:27:1d:d0:29:c4:18:
0c:ff:05:51:47:0a:99:a1:2b:cf:22:5a:c9:f2:9e:5e:3f:59:
df:5a:aa:ba:af:a1:95:04:16:87:43:8c:e7:71:9e:a3:95:f1:
5a:ee:db:6f:8f:17:69:1f:13:fa:59:2e:1b:58:82:01:47:f6:
bb:40:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:55 2025 by rpki-client