Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32332d3233203d3e203631363231.roa
File: 3137302e3233312e3230382e302f32332d3233203d3e203631363231.roa (raw, json)
Hash identifier: o9nuTR3hn7XmDy9HGExCh/yf+jxGECwkqci3rgxDhro=
Subject key identifier: 98:F9:E4:87:1A:F7:8C:EF:EA:FC:67:1D:FF:12:93:C4:20:B0:44:AA
Certificate issuer: /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial: 1069F60E3E867C79179E24FEE305F2DF5319874A
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32332d3233203d3e203631363231.roa
Signing time: Tue 19 Nov 2024 21:21:36 +0000
ROA not before: Tue 19 Nov 2024 21:16:36 +0000
ROA not after: Tue 18 Nov 2025 21:21:36 +0000
asID: 61621
IP address blocks: 170.231.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:69:f6:0e:3e:86:7c:79:17:9e:24:fe:e3:05:f2:df:53:19:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Validity
Not Before: Nov 19 21:16:36 2024 GMT
Not After : Nov 18 21:21:36 2025 GMT
Subject: CN=98F9E4871AF78CEFEAFC671DFF1293C420B044AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:cb:c8:93:58:ee:b8:dd:72:0f:a9:b8:26:
95:91:04:77:83:12:ef:35:e7:30:3f:6a:3b:c9:37:
80:c6:99:16:5f:3c:54:48:9d:8e:69:e6:7b:77:a9:
be:24:37:a5:d0:9e:d5:83:d1:b7:13:f7:86:8d:7a:
e8:16:55:63:ed:9c:3d:cf:c6:9e:ae:e4:de:78:5e:
e5:ea:c6:1d:48:34:2f:74:98:c3:13:77:5d:0b:33:
29:f7:18:09:f7:c3:67:c1:af:32:77:1c:25:13:6e:
3f:70:a7:0c:71:88:dd:42:6e:76:28:89:fc:82:f6:
9f:40:08:02:8e:f0:84:5b:d8:05:2c:2f:96:8c:92:
fa:e3:ee:7b:cc:72:c7:87:33:b9:c4:3f:0b:75:d6:
9d:1f:d9:62:76:04:ff:42:a9:e0:aa:c1:d5:d2:22:
94:5f:cb:04:f7:16:91:5b:40:5f:da:7f:4d:3f:21:
e9:af:4b:8e:9e:e5:bb:7b:dc:9b:37:f6:90:4e:ae:
8c:98:27:f4:64:e0:ca:02:c7:29:b2:cf:ac:62:0a:
ea:7c:16:dd:4d:11:98:a7:2c:32:66:b8:77:30:35:
4f:32:2d:cb:ef:f0:d6:68:b0:ca:5c:1e:fd:c3:40:
47:db:46:f1:3f:cb:5d:91:d2:07:3b:72:74:db:6a:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:E4:87:1A:F7:8C:EF:EA:FC:67:1D:FF:12:93:C4:20:B0:44:AA
X509v3 Authority Key Identifier:
keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32332d3233203d3e203631363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.208.0/23
Signature Algorithm: sha256WithRSAEncryption
31:6c:b7:3c:e4:32:02:59:35:20:15:65:b9:8b:fc:ed:5d:8a:
28:bc:c4:f9:06:35:ef:2d:f9:f1:93:c3:83:2a:12:59:a6:ed:
d6:5c:14:06:40:64:63:2d:79:2d:d1:f3:49:a0:00:3b:4e:42:
0c:fa:a9:99:2e:a8:d0:42:64:ba:f4:07:4a:b3:58:b1:c6:65:
ef:39:3b:c2:83:b8:f9:3d:bb:a1:c4:a5:d2:f0:f4:10:39:b3:
0c:25:62:c3:3d:92:1d:fb:bf:1f:1b:d4:81:00:83:3a:8b:d7:
70:c9:60:3b:7a:d4:7a:e5:2e:f5:09:a3:5f:ab:09:09:68:31:
c0:b1:b8:e4:69:6b:56:46:22:88:64:9e:9c:12:05:fb:cc:ed:
35:f6:64:33:34:4c:64:63:58:5d:eb:43:f5:6b:71:67:db:2f:
be:15:e5:fb:ff:ce:77:87:f6:bf:17:3f:17:fb:d9:98:5d:3e:
93:75:f6:7c:32:48:44:34:60:7d:73:bf:a3:e2:f1:c3:8c:41:
a7:ba:81:33:ea:0a:9a:f4:24:7d:2f:2a:99:58:83:b0:1b:b6:
70:b9:2b:ad:d3:07:ad:90:80:6e:59:d2:48:fb:7b:4a:f5:db:
da:65:dd:c1:b5:7b:0b:94:ae:dc:45:34:c9:da:92:02:37:52:
21:ed:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:12 2025 by rpki-client