Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
File: 3137302e38322e37322e302f32322d3234203d3e20323632353639.roa (raw, json)
Hash identifier: wh6KNVBMaksDN/Dc+5SrQrCCSQygCTRMW55sPsMJk98=
Subject key identifier: 0D:EE:E1:2A:31:0F:64:5A:5A:F0:05:32:55:64:DC:C6:9B:E6:72:12
Certificate issuer: /CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Certificate serial: 4810FC433EA155758D2D0BA6E333A76AB4A40370
Authority key identifier: 65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
Signing time: Tue 29 Oct 2024 19:46:46 +0000
ROA not before: Tue 29 Oct 2024 19:41:46 +0000
ROA not after: Tue 28 Oct 2025 19:46:46 +0000
asID: 262569
IP address blocks: 170.82.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:10:fc:43:3e:a1:55:75:8d:2d:0b:a6:e3:33:a7:6a:b4:a4:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Validity
Not Before: Oct 29 19:41:46 2024 GMT
Not After : Oct 28 19:46:46 2025 GMT
Subject: CN=0DEEE12A310F645A5AF005325564DCC69BE67212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:59:b0:8e:44:46:97:5f:93:74:0a:18:e7:
11:2b:4a:fc:b7:d7:34:b0:b6:ad:8f:b2:b2:7e:ff:
b3:35:e7:f4:2a:15:d6:0b:17:5b:65:6b:f7:aa:c4:
d4:6a:e7:e3:d7:59:3c:5a:f4:78:6c:98:d6:db:fa:
41:07:d8:69:a9:93:ac:d0:00:b6:bb:d5:95:08:03:
77:60:13:85:b2:1c:3d:64:82:61:3b:b6:f4:ad:fd:
b4:7b:40:eb:c6:e1:0d:9c:ff:29:c9:5c:bf:a0:22:
3a:ba:9b:bc:17:88:c6:21:02:10:f3:b3:64:c4:8d:
40:f6:e9:fb:e7:96:95:62:e2:24:fa:55:59:30:33:
df:e3:0c:0d:5a:1e:30:4a:85:1d:b8:fc:cb:e0:b3:
74:b7:83:fb:c3:d1:68:8c:e4:b5:3b:50:05:c1:8b:
36:3a:14:d6:82:c5:0e:35:4b:c3:fd:2c:35:33:f2:
ab:29:f3:74:c1:ac:ab:cd:cc:9f:8f:45:7b:d5:81:
db:13:d6:fb:0a:0f:14:7a:8f:cd:87:ce:cc:ae:6e:
46:29:0d:51:b7:76:4a:39:f3:7d:cd:85:19:ff:a9:
a3:bf:48:68:4a:76:7a:91:6c:7f:78:09:c4:84:33:
6a:6f:80:6a:da:83:51:91:d1:d1:ea:17:b5:20:33:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:E1:2A:31:0F:64:5A:5A:F0:05:32:55:64:DC:C6:9B:E6:72:12
X509v3 Authority Key Identifier:
keyid:65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32322d3234203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.72.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:34:64:29:8b:0d:9c:6a:f9:ca:79:c1:04:3b:14:5d:6d:e3:
39:40:fc:aa:25:12:ca:2c:78:26:9b:c0:91:17:6d:dc:c7:4c:
9b:88:d4:68:eb:17:e6:25:92:ce:31:c1:93:e0:f3:64:84:94:
76:84:42:a0:c7:2f:60:0e:12:e4:c2:fe:a4:3d:0f:c2:73:be:
7f:cc:c6:12:35:e4:2e:ae:7e:aa:07:bc:67:5d:bc:60:92:5a:
67:0f:5a:3c:83:12:31:0d:1f:11:51:53:9e:72:09:c0:48:fd:
66:1f:b4:a5:12:90:e6:45:63:be:0a:0a:08:fa:f6:86:85:82:
b9:9e:a9:b9:ef:aa:d2:bb:62:74:0f:6a:2c:8a:78:f3:7a:22:
6b:1f:ac:3d:65:78:31:98:7d:79:f0:2c:54:e2:06:77:63:89:
77:0e:cc:e5:3e:50:b5:39:3c:05:ff:29:6c:eb:cb:d5:76:a1:
2f:83:f2:bd:f2:5f:b8:06:59:6a:94:8d:5d:6a:bd:5f:25:5b:
07:d7:a7:78:7c:3a:a8:37:64:51:6c:85:a0:24:a6:a5:d5:65:
ae:75:b3:a6:f2:7f:04:4e:d1:ea:fd:02:63:c6:4f:93:8a:ae:
d4:1c:14:48:ac:ff:22:b9:46:ca:01:f8:f5:96:5b:57:d6:87:
c4:97:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:23 2024 by rpki-client on console-fra.rpki-client.org