Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
File: 3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa (raw, json)
Hash identifier: jkoEPVj5CwO+UHZUwS1R8VzH1Md5GDd+v74YV5Y+1eE=
Subject key identifier: 92:16:E1:3E:48:37:EC:76:3C:C1:77:D8:43:EE:31:70:10:97:13:05
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 2B43D866BE9A0009D8B702488B6B7A08129B3A85
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
Signing time: Wed 08 Jan 2025 02:08:07 +0000
ROA not before: Wed 08 Jan 2025 02:03:07 +0000
ROA not after: Wed 07 Jan 2026 02:08:07 +0000
asID: 266020
IP address blocks: 170.245.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:43:d8:66:be:9a:00:09:d8:b7:02:48:8b:6b:7a:08:12:9b:3a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Jan 8 02:03:07 2025 GMT
Not After : Jan 7 02:08:07 2026 GMT
Subject: CN=9216E13E4837EC763CC177D843EE317010971305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:00:0f:bc:d7:30:e5:1f:06:b7:29:a8:51:
31:08:25:37:7e:a3:a6:9f:39:85:19:77:8f:1e:43:
0d:77:8b:5e:18:1b:72:7c:ed:b8:ef:3e:66:b1:3b:
d3:73:3e:d9:9b:01:1b:f6:89:1c:93:6a:cf:6a:06:
c6:73:3b:c3:e0:01:45:97:a1:a9:51:77:99:b1:3b:
da:bf:03:f7:18:b6:e3:df:2d:9a:70:ea:51:2a:c6:
60:af:24:e5:c4:61:33:36:8a:98:ec:4b:9f:54:26:
91:e4:ba:33:cc:91:5c:9d:c2:8d:d9:87:43:5d:60:
43:10:05:ca:66:8f:df:14:b7:c9:d8:e0:ed:10:c5:
3d:5e:ee:11:3d:fe:d6:e1:9f:71:f2:15:52:ef:39:
34:d2:09:63:9b:9c:bb:88:59:dd:82:b4:f2:94:d5:
74:2e:f3:b7:43:24:41:a9:80:8d:ff:43:68:5d:ec:
02:b0:ac:09:ae:d3:07:2f:b1:46:a8:9e:a9:af:5f:
8c:c6:89:7b:0c:34:a4:d7:12:ff:4a:4a:a4:c2:65:
76:f6:7c:26:50:c3:ea:b5:92:97:3b:51:11:16:e2:
2d:6e:5a:40:3f:7c:2e:83:62:71:0e:f0:33:5b:f5:
c3:1b:79:de:cc:26:9a:1f:27:7c:80:84:fb:00:73:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:E1:3E:48:37:EC:76:3C:C1:77:D8:43:EE:31:70:10:97:13:05
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:37:71:d5:a0:10:9d:49:26:b4:f3:d4:4a:f6:1c:97:df:1d:
78:f3:fc:a4:79:e7:e5:2c:cf:6c:56:01:e2:13:2e:1d:d0:b2:
18:e1:92:74:7a:8e:5e:65:7c:d1:78:95:b7:e4:da:87:10:e1:
af:ab:0c:00:48:30:c8:a6:88:7b:7a:8c:1b:2c:f2:f6:99:1a:
4d:8a:0a:1c:f5:6f:14:48:5e:9f:f2:ad:e4:44:9f:66:27:47:
73:4b:3c:58:88:17:0e:43:7a:c0:58:43:42:fe:41:03:78:2f:
97:c4:39:e0:3e:58:4e:67:a8:d0:b0:8d:ba:42:80:ea:a7:f9:
6c:3a:e2:98:07:c7:88:77:3f:bf:21:6a:0d:97:97:01:39:ce:
9d:ae:78:b1:88:b7:ab:0c:27:a0:2e:4b:a9:4b:fd:92:e3:d8:
28:65:4f:8a:5e:b7:5b:ab:f5:b5:03:91:01:ce:82:f0:dc:86:
d2:aa:e9:43:12:13:48:44:e7:64:c8:9f:b5:43:89:9d:1a:ea:
df:5d:b9:2a:15:37:d8:38:e1:2a:4e:7c:07:65:92:28:fb:a5:
98:40:bc:73:f2:70:d9:9c:6c:bf:d6:77:4a:de:5e:04:20:df:
1f:02:90:ba:1d:c8:54:3a:10:00:69:13:dd:c9:79:69:41:d1:
d9:79:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:50 2025 by rpki-client