Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
File: 3137302e38302e302e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier: 1hig1vxKFAwGT13paaxHtAfHx4ENo6Rb79ToaUgPEpc=
Subject key identifier: 3A:F8:C0:E0:60:D5:CB:9F:D8:7C:D0:D5:DB:E5:8C:17:86:CA:3E:5B
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 328FC07EE817F55874005F566E87CD0628A8CB33
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
Signing time: Tue 23 Apr 2024 19:13:41 +0000
ROA not before: Tue 23 Apr 2024 19:08:41 +0000
ROA not after: Tue 22 Apr 2025 19:13:41 +0000
asID: 263627
IP address blocks: 170.80.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8f:c0:7e:e8:17:f5:58:74:00:5f:56:6e:87:cd:06:28:a8:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Apr 23 19:08:41 2024 GMT
Not After : Apr 22 19:13:41 2025 GMT
Subject: CN=3AF8C0E060D5CB9FD87CD0D5DBE58C1786CA3E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:03:be:97:fc:9a:1d:7f:4a:c7:d5:cb:ce:
08:4b:a6:1f:19:2a:ce:6a:f1:8e:5a:31:c3:1d:11:
5c:90:20:75:c7:cf:34:ec:10:7c:0b:f9:38:9c:aa:
7f:8e:9b:63:9b:52:23:f9:f9:17:61:1f:9c:2b:94:
65:b2:ea:90:25:53:4b:43:58:9b:6e:e2:45:b3:bd:
f3:09:ac:20:36:e3:60:50:f9:90:fc:b8:f5:3e:ac:
6d:9f:3f:f0:51:f7:66:0c:fb:34:53:cd:70:58:1a:
d3:e7:7d:f0:85:23:b2:8f:f0:2a:e8:4a:e7:f9:89:
f8:a7:f8:d6:79:58:01:88:04:66:e0:ec:3b:48:39:
49:b1:03:09:96:92:b7:1a:63:08:3a:39:c2:32:6f:
a0:21:09:e6:8e:b5:22:97:50:8c:4d:70:27:15:b0:
c8:03:57:18:df:fa:9f:74:74:db:56:2c:f2:52:35:
bf:43:c8:fb:6d:1c:39:4b:39:68:91:84:27:b7:8b:
a4:03:ef:b4:ec:04:53:cd:79:09:84:16:b3:21:db:
5f:64:33:24:9f:ab:3f:ca:31:89:ca:73:a0:dd:6d:
35:78:bd:ad:3b:e2:df:38:55:12:80:10:cd:80:54:
96:55:6f:6a:eb:2e:7b:c8:f1:b4:82:d8:b1:6a:24:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:C0:E0:60:D5:CB:9F:D8:7C:D0:D5:DB:E5:8C:17:86:CA:3E:5B
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.0.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a3:0b:98:db:32:31:56:67:c6:2a:12:b5:90:be:e4:55:ab:
56:83:ee:fa:c4:17:62:3c:28:1a:92:0d:c2:2a:ba:e1:56:dc:
f1:23:9f:69:8d:de:1e:1f:a1:e1:78:ca:a2:c6:9d:d0:bc:77:
59:d3:03:32:5b:1a:c0:fb:6a:af:14:a6:80:fd:3a:b7:23:46:
29:0e:71:20:eb:3d:57:63:6b:5a:c2:18:33:38:b5:1f:2a:e0:
bb:19:f2:94:d3:63:6e:7f:51:a3:fe:da:74:80:86:90:4b:c6:
56:ad:9b:b7:60:1c:de:5f:60:cc:be:c1:da:70:2a:19:c1:de:
a3:ae:8c:82:38:09:93:03:7a:3d:6d:77:a8:66:d6:82:35:4c:
87:dc:a4:99:21:e0:a1:f7:ec:3c:cb:ef:99:33:19:3c:64:fe:
15:09:17:c0:33:ac:ba:36:9b:7e:fa:2e:c9:28:ad:61:1d:94:
fc:77:8e:34:30:c3:98:bc:94:2c:eb:52:e1:17:6a:59:06:01:
55:a6:3f:ae:b1:42:1a:6c:33:2a:eb:93:54:f4:ad:d7:7b:8a:
c4:85:de:c4:46:0b:23:ef:16:1d:f6:af:fd:0c:f4:93:b5:5e:
15:99:ad:20:02:e8:6d:67:d8:0b:fd:47:d2:c0:28:e4:49:58:
30:ec:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:45:56 2025 by rpki-client