Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36342e302f32322d3332203d3e20323632353134.roa
File: 3137302e38302e36342e302f32322d3332203d3e20323632353134.roa (raw, json)
Hash identifier: EgDcc3zxWcQfu8oClanrpnV1u2KIDamuKqUzUZAVYAE=
Subject key identifier: 73:29:7E:82:4F:C6:40:C5:E4:E8:46:B0:20:A5:8C:77:5A:63:DA:64
Certificate issuer: /CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Certificate serial: 02D40C812FE14AAA6184630D448DB109A099C757
Authority key identifier: CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36342e302f32322d3332203d3e20323632353134.roa
Signing time: Tue 07 Mar 2023 21:41:47 +0000
ROA not before: Tue 07 Mar 2023 21:36:47 +0000
ROA not after: Tue 05 Mar 2024 21:41:47 +0000
asID: 262514
IP address blocks: 170.80.64.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d4:0c:81:2f:e1:4a:aa:61:84:63:0d:44:8d:b1:09:a0:99:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
Validity
Not Before: Mar 7 21:36:47 2023 GMT
Not After : Mar 5 21:41:47 2024 GMT
Subject: CN=73297E824FC640C5E4E846B020A58C775A63DA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:79:6a:c5:57:21:2f:e0:08:f2:37:75:a5:
a0:d8:e6:27:8e:aa:6d:eb:0b:c9:2c:fd:80:35:7d:
be:59:d7:ed:44:c2:54:ad:23:46:ae:86:b4:21:04:
8e:0d:0f:e8:1a:d2:8d:00:55:d3:3d:04:4a:0c:e0:
85:c1:83:f4:42:51:e0:b7:5f:76:95:0a:a2:26:be:
11:4e:c6:5d:85:bd:69:7e:67:36:e3:ba:06:8a:03:
87:b3:82:e1:6b:c4:56:84:66:e5:49:d0:ef:05:43:
44:a5:84:26:1a:6a:8b:96:e7:23:e8:88:eb:3a:61:
1d:6f:a2:cb:75:ff:82:0c:bf:66:3a:c1:45:62:59:
96:77:3d:c0:f9:05:c4:fb:f7:16:9c:e2:d9:20:7b:
28:ef:af:2b:c4:12:5b:c2:76:d0:df:c8:03:40:d1:
72:d5:ad:b3:6f:6f:7d:37:0b:e4:32:84:2a:24:e7:
e9:d0:f5:8f:44:3e:2d:9c:ff:0d:08:68:50:2b:1a:
1e:80:f1:c8:b2:72:ab:9f:c6:fc:92:d4:cd:88:28:
ba:e8:0c:21:e0:0b:0d:84:f7:6b:ff:ff:b0:0a:18:
b2:67:a1:c8:3f:ef:52:84:65:84:f3:a2:eb:d0:c8:
d4:8e:4c:b3:27:88:f8:da:11:88:e2:75:8d:56:8b:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:29:7E:82:4F:C6:40:C5:E4:E8:46:B0:20:A5:8C:77:5A:63:DA:64
X509v3 Authority Key Identifier:
keyid:CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/3137302e38302e36342e302f32322d3332203d3e20323632353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.64.0/22
Signature Algorithm: sha256WithRSAEncryption
37:da:68:66:af:9f:07:b3:7c:11:ee:0b:3a:7c:ee:9b:1d:13:
bc:62:d4:2b:8c:1f:ee:96:b9:0c:5a:b2:7a:05:5a:e7:3e:1b:
56:e1:2f:76:b0:f5:0c:0f:95:31:19:7b:d3:71:6b:4e:7d:53:
67:48:28:e0:63:cd:80:59:22:b4:3a:a0:07:e2:2e:8b:80:8e:
50:3b:50:87:da:26:c3:c8:fb:de:15:16:00:31:d8:c1:c8:99:
ab:28:34:4c:6a:f6:82:44:7a:26:82:9c:15:54:30:96:13:5f:
3a:61:6d:76:21:a7:49:66:d7:68:a8:49:96:9c:3f:13:ec:85:
68:22:64:83:05:c0:04:8a:e7:16:8e:9c:64:48:c6:f0:17:94:
81:d1:e6:68:6f:2f:0a:27:37:1e:9e:00:af:55:ac:ae:64:6c:
73:cf:32:9a:10:f2:a9:42:3a:d1:e4:cc:e0:ed:c0:58:fd:ac:
38:a0:8b:33:7f:0f:d3:02:b3:94:81:71:f0:be:d9:c7:8f:97:
be:34:0b:95:98:19:bb:2a:53:99:f2:1b:b3:bb:c1:d1:ab:61:
e6:25:df:86:b3:e8:3a:ff:5a:63:77:48:ab:6e:db:37:70:e7:
bc:93:29:1d:b2:bd:f2:f0:20:12:44:06:ca:ae:34:e7:5d:a0:
d9:26:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org