Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
File: 3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: Ot7IQzF9qF060Ti8kphNeGLgkXjUYkfhZFjdVxykors=
Subject key identifier: EB:70:94:2C:75:E8:25:16:6D:2D:57:AD:BA:0C:57:CC:F9:06:4F:04
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 4D5005C649899BBFBA394BA08920068F9F3B4ECE
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:13 +0000
ROA not before: Fri 22 Dec 2023 20:20:13 +0000
ROA not after: Fri 20 Dec 2024 20:25:13 +0000
asID: 263073
IP address blocks: 177.223.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:50:05:c6:49:89:9b:bf:ba:39:4b:a0:89:20:06:8f:9f:3b:4e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:13 2023 GMT
Not After : Dec 20 20:25:13 2024 GMT
Subject: CN=EB70942C75E825166D2D57ADBA0C57CCF9064F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:60:e6:66:8b:f5:51:af:0d:6a:c0:af:1e:
93:ae:da:05:49:2a:22:d6:24:31:bf:61:66:e7:ad:
6f:a5:13:3d:48:a6:f5:cb:bf:f7:7e:24:3f:2a:0f:
5d:ec:de:48:f1:6b:85:05:3f:ca:7b:cc:3d:71:ea:
1e:d1:d8:63:f6:10:69:60:6c:20:e2:5e:0d:22:25:
e7:ff:00:24:e8:c4:00:2c:1e:a3:f9:86:23:f3:44:
9a:b6:f3:20:f7:54:c1:7c:1f:db:f6:b6:c5:60:b2:
42:db:59:ab:fc:b3:8b:23:ab:b8:b8:c2:57:ea:fa:
2a:72:f9:5f:53:46:ca:56:ca:e2:03:55:86:68:82:
11:ef:b2:46:75:fe:d8:6a:70:15:89:02:c7:27:2d:
c8:65:79:60:d2:95:19:1c:50:6f:48:f3:94:ec:fa:
6c:5a:16:ee:55:9b:4a:14:ac:78:c1:95:2e:c9:26:
e1:c5:dd:10:c0:d7:46:a1:07:2e:17:18:bf:30:c4:
09:af:3d:52:f3:66:9b:4e:76:07:e0:78:11:32:79:
c1:40:d5:04:c6:0a:08:13:4f:94:0e:78:a8:13:20:
a8:bd:1f:8f:41:71:ba:80:3d:86:b9:75:e1:e3:61:
6e:b0:1d:3e:4c:bc:78:24:cb:f6:dd:8a:2a:bc:3c:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:70:94:2C:75:E8:25:16:6D:2D:57:AD:BA:0C:57:CC:F9:06:4F:04
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a9:1e:7a:ea:ba:50:a4:6e:60:b0:9c:a9:dd:5b:12:2b:a5:
a6:e2:c1:ea:d7:84:8f:18:60:1f:e5:38:69:e2:12:96:ff:3c:
3a:1f:3a:68:6f:bb:ee:14:32:04:fb:87:2e:2f:a9:02:a5:24:
a4:a4:8c:95:59:4f:ef:5e:3e:8b:46:1a:a1:5f:96:3a:b7:81:
78:df:61:64:40:73:9b:ac:df:b5:80:44:c8:b4:25:21:51:3c:
44:67:d5:c4:58:1e:0e:89:f2:ea:20:04:4f:ae:a1:92:15:b0:
d7:16:92:a5:7d:d3:ea:84:c4:e1:ca:cf:98:21:fa:f0:90:bb:
5f:af:f1:13:76:56:12:ca:d6:e6:78:34:fb:6b:2d:de:b1:fd:
cc:9f:bb:73:5c:13:2b:97:6e:4a:0a:34:42:fb:da:4c:af:b9:
21:ea:a8:0d:2a:5a:7e:94:7b:59:a1:95:ba:73:0d:3a:6f:6d:
80:80:7d:f4:3a:a6:4d:f1:3f:8f:67:bf:3b:59:d5:bf:c6:8b:
78:35:f4:00:f6:58:5d:5c:d8:eb:e8:07:ed:70:b1:db:11:ea:
de:b6:52:66:d0:7b:19:b1:7e:8d:90:e9:4a:76:1a:42:31:e0:
42:e6:18:18:84:ef:ac:d4:49:cd:72:39:0f:d5:6c:cc:07:a4:
4e:34:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:41 2025 by rpki-client