Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
File: 3137302e38332e38332e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier: QPLhkB7f9RurvfSJLm0rcDMcA3jct9V7YRsSRmUOnHQ=
Subject key identifier: F4:D0:27:5D:C7:CE:AA:A1:FB:20:F7:37:01:DF:15:FF:C8:60:E2:B8
Certificate issuer: /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial: 3895E9A0DFA17D32FA19190387246D335C64C46E
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
Signing time: Thu 30 Nov 2023 20:14:05 +0000
ROA not before: Thu 30 Nov 2023 20:09:05 +0000
ROA not after: Thu 28 Nov 2024 20:14:05 +0000
asID: 263026
IP address blocks: 170.83.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:95:e9:a0:df:a1:7d:32:fa:19:19:03:87:24:6d:33:5c:64:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Validity
Not Before: Nov 30 20:09:05 2023 GMT
Not After : Nov 28 20:14:05 2024 GMT
Subject: CN=F4D0275DC7CEAAA1FB20F73701DF15FFC860E2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:fc:84:3a:ff:e5:7e:c0:d4:b7:6e:83:d6:
fb:47:2b:fb:d5:2b:b0:40:8d:e2:2e:cf:0b:35:f4:
1e:03:a2:91:ef:64:7f:9b:3d:fc:4f:ce:43:d0:c5:
2f:5a:9a:6d:96:a5:50:b4:ef:6f:08:e7:1c:8e:8e:
72:c2:df:f0:c4:d9:45:d8:7e:48:ce:05:10:ee:9b:
a3:29:ec:86:5c:87:49:52:ea:76:19:5e:f3:14:a2:
0a:b6:f3:d3:0e:b2:7e:26:a2:d7:72:fe:50:7e:0b:
80:75:7c:81:c2:55:bf:97:ca:93:a7:70:75:fd:d0:
1d:ba:33:87:06:8c:23:9b:73:f3:0d:82:02:94:95:
59:45:34:c6:b1:37:01:1f:ae:b6:0a:e0:fd:38:99:
00:20:1f:7a:2e:bd:63:b5:e8:bc:b5:ab:53:96:2b:
2c:8e:c3:c7:8e:b7:c5:33:f1:3b:ba:09:79:09:76:
47:e0:42:b1:f7:4a:f5:43:1b:67:1e:bb:a6:d3:a7:
cc:1e:cc:35:e9:fe:77:65:24:1b:5a:64:83:8e:c4:
74:00:4d:51:82:3c:4b:22:ff:f3:d1:d1:0e:81:24:
d5:f4:50:12:57:2a:ee:8a:9f:98:2d:11:56:17:e1:
84:00:5c:e7:cf:35:82:0b:26:61:6d:09:40:3f:ee:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D0:27:5D:C7:CE:AA:A1:FB:20:F7:37:01:DF:15:FF:C8:60:E2:B8
X509v3 Authority Key Identifier:
keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38332e302f32342d3234203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.83.0/24
Signature Algorithm: sha256WithRSAEncryption
73:00:d0:4a:a0:8d:27:96:98:fe:c7:12:14:77:0b:cd:64:ce:
36:80:35:ae:5d:63:2d:75:06:b3:74:77:92:41:5c:d1:cc:23:
2a:35:cb:34:e7:f1:bb:cc:c6:f4:45:d6:f9:a8:4a:eb:f0:f2:
f6:5f:53:8c:67:b9:00:8f:e3:6d:f2:95:7f:83:4b:79:5c:d1:
7d:e2:ea:ca:04:70:cf:9d:bf:53:7b:87:9e:6b:eb:eb:6c:5f:
73:14:c3:06:23:23:6a:2c:c6:f5:a3:b5:f4:10:4c:16:77:8d:
91:78:6f:13:ae:d6:f5:fb:c9:7a:f0:67:5d:7e:7c:0b:b0:83:
5e:bf:34:f4:09:74:0f:96:74:f2:37:79:84:a5:38:15:f7:96:
f5:ce:06:db:bd:f7:09:2a:9d:f2:30:c0:87:7c:cb:b5:8a:dc:
bb:0a:10:c4:65:3d:71:99:b5:0c:5d:00:8a:87:48:1f:a3:6a:
b4:c4:6d:a0:ae:7c:e1:7e:ae:30:a4:ee:a0:0a:e7:b9:d9:b9:
59:22:63:e2:2f:59:da:fc:34:a5:61:fa:50:31:d6:46:9b:97:
65:f2:c6:66:f7:59:e8:d5:e2:06:dd:7d:46:fc:61:a0:f1:08:
58:93:7c:5a:11:57:aa:07:a8:fb:e3:3c:70:b4:cc:36:20:d4:
b3:9e:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:12 2025 by rpki-client