Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3232203d3e20323632353639.roa
File: 3137302e38322e37322e302f32322d3232203d3e20323632353639.roa (raw, json)
Hash identifier: 7H03uCRF96IKr1Wods+wdUAjGPkfGcLUDn2me4p3Qcw=
Subject key identifier: B0:89:C3:6A:2F:A9:77:82:C2:C3:F5:E0:E3:85:63:79:3D:C8:05:A5
Certificate issuer: /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial: 370981ED852A76F8259B68DBB5A8F5DAE5C482A9
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3232203d3e20323632353639.roa
Signing time: Sat 30 Mar 2024 01:01:20 +0000
ROA not before: Sat 30 Mar 2024 00:56:20 +0000
ROA not after: Sat 29 Mar 2025 01:01:20 +0000
asID: 262569
IP address blocks: 170.82.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:09:81:ed:85:2a:76:f8:25:9b:68:db:b5:a8:f5:da:e5:c4:82:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Validity
Not Before: Mar 30 00:56:20 2024 GMT
Not After : Mar 29 01:01:20 2025 GMT
Subject: CN=B089C36A2FA97782C2C3F5E0E38563793DC805A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:eb:77:18:94:19:a6:bb:ab:40:4d:7a:c3:
80:ea:10:39:a9:b0:da:bb:e2:9d:14:b8:9d:df:9c:
96:0d:c8:42:a8:9d:e3:d9:db:62:f7:72:05:ff:1d:
01:cc:7a:9a:d9:70:f3:5b:0c:f7:ae:1e:59:8e:0c:
f9:b0:db:91:1b:6f:60:cc:81:ad:78:85:40:d9:ca:
f1:07:2b:2e:33:65:bf:3c:11:8f:e1:6b:eb:b9:e3:
ef:2f:1d:f7:dc:92:cd:e3:51:ee:cf:47:6c:77:39:
29:b4:a4:34:fb:6f:ec:a0:41:40:24:72:17:6f:c3:
8d:37:0d:91:5e:03:d9:8b:f5:1f:a0:87:d7:5d:f7:
40:8e:1d:fc:1b:1b:cd:17:39:62:dd:21:6f:6d:7b:
61:c7:f3:2b:76:a4:92:08:1c:a9:c0:4b:98:bf:00:
c3:ad:4a:50:77:52:75:08:cc:42:7a:15:65:b0:70:
17:37:a8:39:d0:8e:59:03:d2:5f:3a:cb:2a:f1:41:
31:04:03:3d:43:79:9a:c6:2d:81:97:d5:3d:2e:c2:
7b:c2:d7:6d:bc:a5:6f:fb:f9:d3:44:20:ea:2e:08:
63:28:b6:7b:f0:a9:4f:6b:cb:35:2f:e7:21:f9:5b:
aa:6a:3c:c0:f7:39:41:b9:2d:2c:c8:c8:a2:65:64:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:C3:6A:2F:A9:77:82:C2:C3:F5:E0:E3:85:63:79:3D:C8:05:A5
X509v3 Authority Key Identifier:
keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3232203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.72.0/22
Signature Algorithm: sha256WithRSAEncryption
18:af:6d:e0:da:17:06:21:a8:23:7e:8f:f0:8a:e4:92:b0:d7:
61:7c:5b:8c:cb:e2:11:57:3d:18:63:9a:68:ab:cf:31:2e:84:
90:d9:bf:81:9d:b7:8c:69:ad:64:ed:7a:87:73:5c:b6:84:17:
c5:ce:fc:43:6d:1b:75:1c:76:2e:eb:76:09:3c:60:2f:69:04:
6e:b3:ac:20:f5:35:d8:04:dd:d3:e6:5c:7c:d1:29:25:c0:65:
3e:ce:02:a4:10:17:8b:45:07:6d:eb:cf:8e:e9:2c:3b:28:0a:
08:6e:fa:21:61:cd:47:29:a2:3f:a2:37:ac:64:9a:6a:ab:d7:
4e:fe:97:a8:1a:91:d5:84:fa:06:60:94:e6:3a:17:05:85:ab:
27:21:20:61:ca:5d:e1:29:71:a1:2e:d8:8a:0f:20:23:6d:75:
8d:13:98:91:4f:00:37:64:df:57:3f:d8:96:13:6d:c2:e3:d0:
0f:77:5c:dc:49:64:82:75:a8:fc:7a:a1:ce:3c:60:e4:63:15:
e8:a4:14:23:ab:df:ff:d0:10:0c:56:3e:f5:65:65:c0:a2:88:
f9:38:f2:9b:92:e8:72:c1:f1:5b:8b:ad:07:3a:6d:0c:d4:d7:
a8:68:c8:a5:b7:cc:73:75:10:32:da:e9:87:0d:59:65:87:ad:
bd:84:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org