Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
File: 3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier: ANKTWfrzFNW4QpYX8txpXw45TBX47LAJmSxRuDJkNcE=
Subject key identifier: 88:35:5A:F2:47:D4:82:42:A9:C3:A3:A6:55:E0:F8:C3:21:0D:DA:7A
Certificate issuer: /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial: 021A52E66851B34D4B0F3007171F98E87CBA4BBB
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
Signing time: Mon 22 Jul 2024 18:02:18 +0000
ROA not before: Mon 22 Jul 2024 17:57:18 +0000
ROA not after: Mon 21 Jul 2025 18:02:18 +0000
asID: 262272
IP address blocks: 177.21.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1a:52:e6:68:51:b3:4d:4b:0f:30:07:17:1f:98:e8:7c:ba:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
Validity
Not Before: Jul 22 17:57:18 2024 GMT
Not After : Jul 21 18:02:18 2025 GMT
Subject: CN=88355AF247D48242A9C3A3A655E0F8C3210DDA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:87:e7:77:cc:f5:ea:4e:ad:c2:1d:8a:9f:
6a:ce:c1:e3:65:e0:41:49:b0:df:85:95:4b:41:6a:
5a:a8:6b:d4:89:cb:f9:5a:0c:04:e2:9e:d8:f9:b2:
81:61:b5:1a:e0:b6:cf:22:b8:d4:0b:27:5b:73:98:
93:48:38:b1:af:9d:d6:e2:90:dc:e4:59:21:8a:a7:
be:0b:61:76:6f:67:32:ea:3a:0c:da:c9:fc:20:e4:
5d:f1:43:d0:dc:60:b6:fb:0f:c1:b4:fe:bd:9b:6d:
e0:4a:86:49:67:4b:5f:2e:fc:47:af:e9:b7:5a:c5:
2b:2f:42:ff:cb:5d:27:37:13:bc:41:22:fe:41:39:
2b:03:a6:46:86:3b:60:ea:26:ba:09:70:47:4c:18:
7a:f8:37:b0:64:fc:cb:97:19:f3:1e:b0:ed:ef:99:
ec:67:90:12:26:0b:71:51:91:49:4b:69:b4:e7:7c:
92:5f:17:9f:30:cf:1a:dd:6e:fd:9f:de:29:22:e3:
4b:dc:06:61:5c:68:06:79:54:11:a1:8e:58:8d:a4:
20:3a:14:64:da:68:c3:de:4c:82:ee:12:81:72:85:
97:73:3e:5c:5b:80:0d:6c:ac:dc:e4:ed:d0:f2:db:
ca:0b:a9:95:0a:fa:28:93:f6:93:7d:e0:4e:ac:0b:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:35:5A:F2:47:D4:82:42:A9:C3:A3:A6:55:E0:F8:C3:21:0D:DA:7A
X509v3 Authority Key Identifier:
keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.128.0/20
Signature Algorithm: sha256WithRSAEncryption
26:d9:77:d3:93:6d:67:cf:32:51:a9:82:61:3f:5f:48:0c:40:
43:b2:2a:2e:85:75:cb:ae:a4:34:df:bb:7a:c9:e1:17:c6:f0:
c1:89:f1:94:04:8f:01:ff:e0:22:e5:5b:16:a2:7d:5c:9a:76:
94:89:c0:ee:96:3d:b1:0a:71:f0:84:7b:44:1f:69:b1:c0:35:
f3:18:95:78:ce:c0:84:6b:ea:f5:4a:76:12:11:dc:5b:54:e3:
d0:7e:4f:e9:57:c9:f6:8a:43:d6:b9:8c:5f:c5:42:0a:a7:27:
44:4b:57:ba:2a:6f:6d:45:a7:29:9b:4d:f0:59:92:c4:27:d9:
99:30:b2:1f:68:c5:7e:51:53:b6:29:89:5b:fe:b9:4d:ef:c9:
e2:c0:4b:4d:43:81:dd:b6:0e:45:2f:a4:d7:43:38:fb:57:31:
a1:05:90:0c:55:d2:dd:cf:4a:fa:28:23:45:9c:a9:51:68:15:
a9:e4:ed:9e:e2:97:5a:72:ba:cc:82:8b:23:58:66:a4:4d:b2:
17:41:bd:b0:0f:d6:be:96:cf:1e:a8:90:84:f3:5c:9b:37:d6:
32:d6:4d:fe:57:2e:df:37:ec:46:2e:4b:db:88:61:fc:8d:14:
b5:3c:07:97:07:06:d1:85:a8:b1:d0:4a:72:44:af:b9:7f:0d:
32:4d:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org