Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3137302e38342e37322e302f32322d3332203d3e20323633393435.roa
File: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier: DSczuPL5JzyCjpisTZJ0cls6AyAcw7SOsltR0aEoDQo=
Subject key identifier: 5B:EB:A7:29:78:7D:94:E5:79:4B:AA:56:A4:8E:C9:C6:EC:5B:3B:77
Certificate issuer: /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial: 26B1B8F7664ABA4A6414CAE13F69355BD2108779
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3137302e38342e37322e302f32322d3332203d3e20323633393435.roa
Signing time: Tue 27 Feb 2024 17:29:23 +0000
ROA not before: Tue 27 Feb 2024 17:24:23 +0000
ROA not after: Tue 25 Feb 2025 17:29:23 +0000
asID: 263945
IP address blocks: 170.84.72.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b1:b8:f7:66:4a:ba:4a:64:14:ca:e1:3f:69:35:5b:d2:10:87:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Validity
Not Before: Feb 27 17:24:23 2024 GMT
Not After : Feb 25 17:29:23 2025 GMT
Subject: CN=5BEBA729787D94E5794BAA56A48EC9C6EC5B3B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:c3:6a:af:d9:49:d5:d4:ce:83:dd:5b:df:
68:54:7b:68:9c:65:cf:0e:14:2e:1c:10:f8:79:d5:
8f:87:94:60:0e:93:34:b2:3e:d1:f4:c5:a2:16:7c:
97:ba:0a:a6:76:97:af:fb:70:77:38:f7:06:c7:17:
69:34:b2:b6:e5:37:e7:b2:f1:2d:1a:31:30:07:a2:
af:da:e1:86:44:f6:02:8c:26:0d:c0:c0:a1:12:76:
c4:a6:2d:1d:88:6c:35:e1:27:c7:a8:b1:d9:a3:a4:
ff:a0:37:d2:d9:20:74:5f:4b:48:77:0e:aa:40:01:
90:89:30:51:b9:45:67:3b:c9:09:bb:14:ad:41:9a:
d8:e4:df:a3:27:72:0d:56:fd:8b:63:64:61:d3:24:
65:21:7b:09:50:2a:0c:23:0a:39:02:f6:32:4f:4b:
25:f6:c6:df:ef:1d:bc:dd:9c:19:05:af:0d:c5:ce:
73:7a:f6:ba:5f:3d:3e:cb:9c:a8:7e:45:2b:17:e7:
7c:06:9c:23:54:b3:59:e3:8c:1e:72:dc:6e:05:26:
40:da:05:2b:7b:4f:63:b2:f9:b1:3d:73:3e:b4:45:
03:20:26:af:20:d9:dc:ad:77:98:14:82:7b:1f:a6:
70:fb:79:24:7f:0f:72:64:8a:d9:25:fd:fa:0c:d7:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:A7:29:78:7D:94:E5:79:4B:AA:56:A4:8E:C9:C6:EC:5B:3B:77
X509v3 Authority Key Identifier:
keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/3137302e38342e37322e302f32322d3332203d3e20323633393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.72.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e3:6b:bd:57:65:55:40:04:eb:44:1f:06:e8:61:eb:15:7e:
5e:d1:63:e0:61:da:46:43:17:87:d9:d8:bb:2b:2b:a2:80:3f:
dc:ac:79:f4:e0:85:a9:49:b8:c7:65:f4:af:8d:4a:3b:43:32:
6e:12:b0:e8:ae:04:c5:9c:d5:a0:18:55:e5:7e:ff:e2:3f:cb:
3d:18:78:da:d2:45:7b:c4:f3:c5:cd:b2:89:89:81:f5:3f:30:
85:77:b2:b5:6e:f7:63:42:e9:05:b7:be:57:82:64:28:bb:8b:
80:1d:1c:00:88:51:20:11:78:74:de:ad:e6:52:8a:52:32:ab:
e3:e2:76:66:b8:e0:0c:fe:14:72:5c:f4:83:8a:e6:71:78:c5:
40:66:92:11:c8:8c:4c:8c:3d:c0:5b:16:80:29:ae:82:5c:9d:
93:d9:c2:6c:0e:6d:71:b7:d0:7c:d8:d7:86:95:6b:f2:49:72:
70:2d:02:91:e0:5a:a7:0e:90:8b:0c:11:77:e2:ef:6b:44:19:
15:70:ad:b9:a1:2c:dd:9b:38:b2:a0:33:bc:31:42:80:02:c2:
6c:a8:cf:f9:5d:26:f8:ee:dc:5f:fa:7d:05:33:64:9e:2b:22:
05:f8:27:d5:a1:72:3b:ce:07:13:03:58:72:a4:a6:15:b2:41:
88:dd:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org