Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
File: 3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: k8bIaFzkUp493n4+foRz4/8ntFchQSE9E4Dc47SrZ6Y=
Subject key identifier: 10:F9:E5:C7:1B:7B:86:E0:2C:4D:4A:14:2F:81:30:71:A7:B2:94:8E
Certificate issuer: /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial: 6F6895AA8DBE9D3C57DA794C81AC2693EDED6DE7
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
Signing time: Mon 22 Jul 2024 18:02:13 +0000
ROA not before: Mon 22 Jul 2024 17:57:13 +0000
ROA not after: Mon 21 Jul 2025 18:02:13 +0000
asID: 28287
IP address blocks: 167.249.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:68:95:aa:8d:be:9d:3c:57:da:79:4c:81:ac:26:93:ed:ed:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
Validity
Not Before: Jul 22 17:57:13 2024 GMT
Not After : Jul 21 18:02:13 2025 GMT
Subject: CN=10F9E5C71B7B86E02C4D4A142F813071A7B2948E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:4d:e5:1c:87:28:36:7b:12:0e:12:fa:54:
62:45:8c:81:9d:5c:a3:ed:80:80:7c:4c:87:a6:79:
a1:82:f1:8d:bd:d4:be:1d:98:da:59:8e:c6:30:5f:
9c:87:f4:d9:ed:e0:df:86:1e:31:5a:95:4b:f7:d8:
50:ce:cd:b8:73:db:4c:83:de:51:25:b4:44:13:31:
69:e9:72:f6:b1:b7:0d:05:71:0d:20:c0:6e:ff:d7:
30:78:6f:a7:1c:63:77:48:c5:54:45:9e:ea:2f:62:
2d:b4:f9:63:a1:ff:fa:17:15:1a:fb:9c:4c:08:bb:
48:48:b2:bc:e6:23:ec:62:96:e7:e8:12:19:95:50:
e8:a6:dd:36:e2:4a:f5:7b:e5:95:bf:51:fa:bb:da:
79:3f:d3:df:11:ea:62:6f:6f:d1:74:8c:8a:ba:2c:
ef:fc:3e:71:d0:20:ca:3a:44:f2:71:56:1f:75:29:
26:b7:c4:d2:08:d1:08:ab:3f:ad:ba:a1:fc:db:04:
cf:5e:fd:75:7d:fa:84:70:e9:c6:6c:f1:e3:a0:e3:
34:8a:0d:4f:41:80:53:c7:53:d2:56:8a:a1:29:27:
03:ed:71:67:f9:7f:40:2e:5c:99:32:e9:6f:7a:23:
42:21:f7:fc:ab:f1:51:76:7f:f8:97:60:78:2e:7f:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:E5:C7:1B:7B:86:E0:2C:4D:4A:14:2F:81:30:71:A7:B2:94:8E
X509v3 Authority Key Identifier:
keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.176.0/22
Signature Algorithm: sha256WithRSAEncryption
11:2e:21:9e:7f:52:80:a2:db:6e:66:6e:08:84:db:bf:64:09:
8f:a0:3c:d9:cf:a0:a2:21:86:7b:13:fb:33:8a:fd:2c:90:e3:
7a:40:c8:35:63:b8:9e:f9:43:ff:dd:26:bc:c4:bb:8d:9c:da:
a6:dd:04:46:20:d0:ce:49:82:1b:24:2a:cb:af:44:35:a7:b6:
4e:29:29:ac:a0:e1:ca:bd:cc:ae:25:f1:31:84:35:a0:f1:4b:
ad:33:47:b3:66:19:52:e8:e5:57:1d:8e:90:dd:db:c7:d3:18:
a2:7d:fa:b2:8c:50:4c:27:d8:a4:49:54:01:ca:d0:70:52:17:
cf:9e:70:e7:22:d0:60:2a:7a:67:72:98:61:e4:6b:b7:ba:63:
14:3d:87:c5:6a:2b:b0:64:ec:a6:8e:e9:79:b2:b9:60:5e:98:
07:2b:3b:4f:c0:06:a7:de:a1:fd:b1:36:f4:31:aa:3e:1c:97:
80:d5:ef:a5:e6:4d:c4:c6:9d:ad:72:60:a0:ae:7d:e7:49:54:
75:1d:4f:66:a6:62:b5:6c:83:07:35:f5:0e:a8:dd:ee:5f:56:
b1:c8:f5:69:89:48:03:eb:37:45:22:d7:5b:67:dd:e5:54:bd:
49:1a:af:e8:c8:31:d2:8c:1e:74:23:02:0e:15:56:0a:f7:68:
d7:6a:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:45 2025 by rpki-client