Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135392e302f32342d3234203d3e20323634393938.roa
File: 3137302e38342e3135392e302f32342d3234203d3e20323634393938.roa (raw, json)
Hash identifier: hcZuoKQ97OsuOiDk6RO3V6s5BkpXm3qjSVJuHF2xEzM=
Subject key identifier: AF:1A:C1:D1:89:EC:18:A1:D5:A7:2A:E8:C6:D3:8D:60:33:11:B1:10
Certificate issuer: /CN=BF74D0DF34465209B429D590F319EC137C0F9331
Certificate serial: 64FCB82FC4AB7A8F7C1B506F7018E0B695389268
Authority key identifier: BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135392e302f32342d3234203d3e20323634393938.roa
Signing time: Thu 11 Jan 2024 17:42:59 +0000
ROA not before: Thu 11 Jan 2024 17:37:59 +0000
ROA not after: Thu 09 Jan 2025 17:42:59 +0000
asID: 264998
IP address blocks: 170.84.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fc:b8:2f:c4:ab:7a:8f:7c:1b:50:6f:70:18:e0:b6:95:38:92:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF74D0DF34465209B429D590F319EC137C0F9331
Validity
Not Before: Jan 11 17:37:59 2024 GMT
Not After : Jan 9 17:42:59 2025 GMT
Subject: CN=AF1AC1D189EC18A1D5A72AE8C6D38D603311B110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:bb:71:a7:bd:de:08:f3:fa:82:a0:cf:e0:
b1:b4:91:f1:fe:52:cb:dc:46:ae:e5:ff:e6:b9:38:
56:d6:f9:ae:0f:ea:60:99:57:5f:ee:c0:10:91:d2:
29:66:55:2d:05:3f:3f:05:0a:86:2f:d7:06:08:3f:
b9:9a:9e:47:4d:ee:63:55:df:2a:90:e9:a6:b5:b9:
39:e5:73:01:6f:1d:42:6f:af:df:04:61:3d:91:d0:
a1:2f:1a:a1:86:8e:9d:84:24:56:e0:23:ca:19:9c:
5b:52:d4:f1:f7:5f:80:31:20:75:6f:bf:ba:0a:1b:
72:2d:a8:24:f4:60:f6:74:d1:ad:3e:82:bb:d9:5a:
e5:d1:41:91:55:6d:64:ff:6e:4c:81:19:e6:0c:6c:
2b:b2:28:80:7c:e2:83:28:26:9b:c2:41:ed:d9:32:
df:2a:db:85:6c:79:22:d2:75:04:99:a2:d1:c6:31:
8d:c5:04:c3:12:c8:b5:fb:d0:79:f0:5c:90:99:5e:
c7:a8:e9:e2:ac:aa:2b:27:fc:ec:5c:7d:5a:47:9f:
fa:42:56:87:dd:9a:87:41:37:99:03:a3:f3:22:3f:
f8:34:3c:4e:29:be:69:ec:28:4f:1d:6f:86:af:a2:
17:1e:61:ad:eb:33:22:66:a6:3e:c8:6b:fc:e5:de:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:C1:D1:89:EC:18:A1:D5:A7:2A:E8:C6:D3:8D:60:33:11:B1:10
X509v3 Authority Key Identifier:
keyid:BF:74:D0:DF:34:46:52:09:B4:29:D5:90:F3:19:EC:13:7C:0F:93:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/BF74D0DF34465209B429D590F319EC137C0F9331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF74D0DF34465209B429D590F319EC137C0F9331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135392e302f32342d3234203d3e20323634393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:24:17:59:60:75:4e:dc:de:4f:59:f8:da:9b:dc:cd:6f:0e:
17:a0:71:c0:2f:85:16:8f:7e:15:64:73:4e:f2:da:92:6c:27:
ac:60:15:05:af:6c:46:55:9e:06:33:be:e5:39:81:a9:7b:88:
0f:8e:42:24:f5:2f:fa:25:fb:d1:1d:bc:26:6a:36:18:b9:4c:
9f:6e:6a:3c:92:a4:5f:22:fe:0c:31:07:17:10:a7:95:b4:97:
f2:ba:3b:af:4b:33:05:e4:22:94:6f:e8:3d:13:3f:06:c3:b7:
9f:f5:5c:a8:8d:b9:c8:3d:29:57:a3:3b:9a:ed:aa:23:e5:91:
ec:39:c0:02:90:ca:57:c5:81:aa:f3:6d:d5:e2:b9:2a:71:3b:
fd:e8:c0:cc:8c:01:ec:4f:7c:71:5c:15:dc:06:35:a6:b5:1e:
81:d0:77:c0:f3:b4:75:f6:1b:bc:0b:00:f8:6d:96:62:eb:43:
e0:ae:36:0d:d4:e5:05:be:82:a0:fb:ce:99:72:dc:83:77:41:
49:3e:f1:62:0f:88:43:af:ff:6b:0c:81:c9:ba:89:34:ac:fd:
5d:db:b6:31:a9:18:82:29:b4:d7:2e:3a:be:d1:a9:c7:64:15:
01:44:b4:60:ff:aa:3f:81:fa:93:89:81:ca:df:b5:aa:bf:5e:
f7:9c:b7:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZPy4L8Sreo98G1BvcBjgtpU4kmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3NEQwREYzNDQ2NTIwOUI0MjlENTkwRjMxOUVDMTM3
QzBGOTMzMTAeFw0yNDAxMTExNzM3NTlaFw0yNTAxMDkxNzQyNTlaMDMxMTAvBgNV
BAMTKEFGMUFDMUQxODlFQzE4QTFENUE3MkFFOEM2RDM4RDYwMzMxMUIxMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUU7txp73eCPP6gqDP4LG0kfH+
UsvcRq7l/+a5OFbW+a4P6mCZV1/uwBCR0ilmVS0FPz8FCoYv1wYIP7mankdN7mNV
3yqQ6aa1uTnlcwFvHUJvr98EYT2R0KEvGqGGjp2EJFbgI8oZnFtS1PH3X4AxIHVv
v7oKG3ItqCT0YPZ00a0+grvZWuXRQZFVbWT/bkyBGeYMbCuyKIB84oMoJpvCQe3Z
Mt8q24VseSLSdQSZotHGMY3FBMMSyLX70HnwXJCZXseo6eKsqisn/OxcfVpHn/pC
VofdmodBN5kDo/MiP/g0PE4pvmnsKE8db4avohceYa3rMyJmpj7Ia/zl3hYnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrxrB0YnsGKHVpyroxtONYDMRsRAwHwYDVR0j
BBgwFoAUv3TQ3zRGUgm0KdWQ8xnsE3wPkzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMC9CRjc0RDBERjM0NDY1MjA5QjQyOUQ1OTBGMzE5RUMxMzdDMEY5MzMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNzREMERGMzQ0NjUyMDlC
NDI5RDU5MEYzMTlFQzEzN0MwRjkzMzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d0THhCRnRCSGpNSllMVVlQYU40V0s5QVViQ3NmS2RTa2U2dkZQNFlyV3hZLzAv
MzEzNzMwMmUzODM0MmUzMTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVJ8wDQYJKoZIhvcNAQELBQADggEBAB0kF1lg
dU7c3k9Z+Nqb3M1vDhegccAvhRaPfhVkc07y2pJsJ6xgFQWvbEZVngYzvuU5gal7
iA+OQiT1L/ol+9EdvCZqNhi5TJ9uajySpF8i/gwxBxcQp5W0l/K6O69LMwXkIpRv
6D0TPwbDt5/1XKiNucg9KVejO5rtqiPlkew5wAKQylfFgarzbdXiuSpxO/3owMyM
AexPfHFcFdwGNaa1HoHQd8DztHX2G7wLAPhtlmLrQ+CuNg3U5QW+gqD7zply3IN3
QUk+8WIPiEOv/2sMgcm6iTSs/V3btjGpGIIptNcuOr7RqcdkFQFEtGD/qj+B+pOJ
gcrftaq/Xvectx8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org