Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
File: 3137302e38342e31322e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier: VVUVZ4cHY8tpMUds+QzayntK0TEfn+AoGQz8QFZT58I=
Subject key identifier: 81:08:45:65:25:B1:39:3A:9C:F2:10:87:EC:2D:AC:7D:C9:22:A3:75
Certificate issuer: /CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
Certificate serial: 4F4169538A9A2A7902F19CE927CC2208061FAD54
Authority key identifier: 98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
Signing time: Mon 15 Jul 2024 18:29:39 +0000
ROA not before: Mon 15 Jul 2024 18:24:39 +0000
ROA not after: Mon 14 Jul 2025 18:29:39 +0000
asID: 264987
IP address blocks: 170.84.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:41:69:53:8a:9a:2a:79:02:f1:9c:e9:27:cc:22:08:06:1f:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
Validity
Not Before: Jul 15 18:24:39 2024 GMT
Not After : Jul 14 18:29:39 2025 GMT
Subject: CN=8108456525B1393A9CF21087EC2DAC7DC922A375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:fb:36:a6:36:ca:8d:ab:5c:58:f9:e9:80:
87:38:6e:77:11:03:6b:9d:91:11:a2:70:19:26:c2:
e0:79:20:e8:05:8b:09:58:9f:0e:85:7a:4c:54:be:
f9:4c:0c:54:79:0e:26:ad:3b:3e:34:cd:84:eb:8c:
aa:3d:61:6b:78:43:45:81:58:13:e4:c2:4d:cc:ff:
48:af:ba:c7:25:75:14:78:00:39:44:2b:e1:2d:98:
5d:28:99:85:3e:c0:b8:4c:03:c2:ce:7a:f4:07:ea:
e9:09:12:9e:90:10:c9:2b:05:26:e0:ee:8d:34:0a:
94:df:e8:76:57:09:79:1b:cd:90:4c:50:2b:76:82:
e9:c1:60:00:54:7e:91:5f:e1:12:ae:0f:5f:06:09:
15:b1:29:0e:de:0b:bd:69:15:74:18:5a:a3:d2:f6:
19:8d:0e:dc:71:e8:1a:0e:44:54:15:2d:4f:d6:b1:
96:f8:d8:32:bd:fa:b6:80:45:02:17:bf:32:15:2a:
3e:0a:13:66:f1:ea:fe:5e:2a:1b:97:37:e3:20:06:
d8:82:14:5d:30:c2:e4:00:1a:05:e8:49:69:b5:5b:
94:f0:52:ee:6d:97:cc:a6:2e:f1:60:8d:fa:82:ad:
16:77:89:0f:04:71:c5:52:e7:e6:44:a2:00:7a:cc:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:08:45:65:25:B1:39:3A:9C:F2:10:87:EC:2D:AC:7D:C9:22:A3:75
X509v3 Authority Key Identifier:
keyid:98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.12.0/22
Signature Algorithm: sha256WithRSAEncryption
11:88:c4:cd:cd:79:0a:78:27:3f:a5:d8:92:30:ff:f7:96:a1:
65:64:dc:0b:c2:ec:85:35:e8:78:7f:83:67:dd:5f:85:7a:cf:
bf:90:b1:ce:9b:fa:dc:10:ad:24:05:a0:64:10:0b:3f:d8:7b:
94:41:17:be:f2:17:43:b0:4c:65:c5:3a:31:2b:eb:4f:bb:ac:
af:47:62:f7:08:fb:31:60:bf:2e:0a:d1:81:3e:2c:b7:b3:0e:
3b:3d:be:ac:0a:80:1e:9c:13:67:97:33:45:83:40:5d:11:54:
ab:ad:a7:ec:1c:d4:bd:cb:ff:38:fd:9e:75:2f:06:a4:17:5d:
03:5a:f4:62:74:a1:ec:db:12:60:e7:58:fd:e0:8b:95:29:f1:
29:b4:9d:93:91:11:cd:46:c4:67:4c:e0:8b:f2:e9:53:99:39:
39:9b:c8:c7:f4:94:56:37:9f:a9:70:35:9f:b5:e9:74:92:8a:
0a:b7:46:bd:fd:4a:7d:47:e6:ae:4d:dc:1d:fd:80:9f:0b:7c:
a8:3a:df:6b:56:d3:ac:0b:c3:8f:22:14:a0:0f:b0:d2:ea:78:
a5:d3:67:33:6d:f4:38:98:bd:5b:c8:60:a8:d1:bc:bc:89:56:
61:80:e2:7b:c7:c6:bf:be:82:27:fd:22:c4:3a:2e:44:91:dd:
ab:58:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:26:49 2025 by rpki-client