Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
File: 3137302e38322e37322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier: xOPqSLtzOIuLQWiRvnAFplz8+YWbkBA5pJz6PyLADMA=
Subject key identifier: 31:3A:3D:3A:65:95:F3:24:BF:C0:94:04:7B:ED:4E:EC:51:D5:C1:97
Certificate issuer: /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial: 3C476578567C1F9037D4E823AD94936500B19C16
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
Signing time: Sat 30 Mar 2024 01:01:21 +0000
ROA not before: Sat 30 Mar 2024 00:56:21 +0000
ROA not after: Sat 29 Mar 2025 01:01:21 +0000
asID: 262569
IP address blocks: 170.82.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:47:65:78:56:7c:1f:90:37:d4:e8:23:ad:94:93:65:00:b1:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Validity
Not Before: Mar 30 00:56:21 2024 GMT
Not After : Mar 29 01:01:21 2025 GMT
Subject: CN=313A3D3A6595F324BFC094047BED4EEC51D5C197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:ae:99:5d:92:fc:10:71:ca:4a:91:ff:46:
89:50:06:04:bf:6a:56:4c:ec:f9:c1:ca:01:f0:60:
d2:45:3c:ba:3e:a6:92:72:95:49:05:78:76:48:fa:
c4:d9:9d:43:25:35:52:ac:d7:9d:fd:98:5f:58:7c:
e4:a5:1e:4e:60:a6:79:80:65:b1:d4:77:f1:db:30:
80:98:10:87:63:db:f8:e6:ec:a9:be:9a:27:07:7c:
05:26:18:43:07:d6:6c:c6:da:6a:ca:ba:6a:3d:f4:
e8:a0:6f:1e:87:e3:6c:0a:77:f9:b9:7c:3a:f7:e3:
7c:a4:40:5d:9d:e8:73:06:b2:5e:16:5c:89:5e:e4:
57:a8:e7:f9:fe:4d:9f:f8:b4:22:2c:64:a5:59:96:
19:19:b8:4c:76:1c:77:b8:e7:a8:b4:d7:26:0f:92:
e6:d9:53:2b:7b:70:b6:86:62:24:00:f1:87:5b:fd:
7c:c1:5b:f2:89:34:0f:e4:27:2d:ad:90:34:fb:c6:
24:6c:22:70:bf:f9:00:07:dc:0f:d0:cf:25:53:ee:
14:6e:2e:1b:bf:86:d1:70:c0:f9:b2:39:70:5e:09:
1e:58:e0:6f:bf:58:d1:ea:54:97:f1:ce:ce:aa:94:
37:1d:1c:a0:ee:ed:2b:23:32:08:a7:1a:54:ff:ef:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3A:3D:3A:65:95:F3:24:BF:C0:94:04:7B:ED:4E:EC:51:D5:C1:97
X509v3 Authority Key Identifier:
keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37322e302f32342d3234203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.72.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9c:e4:cd:4b:78:5c:08:48:51:bc:f5:12:a0:7d:9b:8e:cb:
d2:9f:bf:dd:7f:e0:a4:99:40:09:55:2f:af:c7:43:ee:2a:ed:
66:d4:3e:78:b4:ec:3c:a0:88:19:c9:5b:56:0b:98:cf:2d:5f:
15:ef:94:b4:37:3f:4d:23:b5:c2:1c:2b:aa:79:cb:b8:0a:14:
52:26:13:bb:74:b1:88:e3:06:3f:2f:e6:a4:1f:f4:37:d5:94:
e7:ce:f4:cc:35:3c:c9:c9:3c:8e:49:df:e1:3f:6e:16:de:3a:
b7:2b:99:69:4b:0b:60:26:f5:9f:b5:fd:3c:05:3d:ca:0b:a4:
24:42:95:83:21:7f:fe:ed:74:4d:3c:a5:da:d1:18:78:96:c8:
42:58:44:11:07:b3:39:6a:6d:f1:8b:ec:99:f3:57:a3:0e:09:
59:d4:3a:17:f9:db:79:af:c5:24:da:95:4e:c7:e9:25:66:10:
c9:22:99:2d:f7:91:8a:27:7d:3e:33:22:1b:35:63:cc:90:7e:
5e:ce:16:10:25:ec:d4:3e:d8:59:2a:44:e0:14:0a:ca:1d:22:
97:f0:19:6c:a4:4c:2a:17:b4:c7:f9:3b:b3:d0:13:61:e1:01:
cd:1e:f6:8d:ea:ec:7c:4e:13:95:59:63:4f:56:89:32:97:b8:
60:f9:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org