Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
File: 3137302e38302e332e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier: tPZoIl1XisNqzmb1/4+5+1lXWv3akPHNK8L7cvWCmHA=
Subject key identifier: F4:B5:B0:82:D4:48:C9:3E:9F:28:84:58:93:44:F5:DE:97:FA:10:93
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 3A62F9A6C377C7AD67EDF554ABEA5D838C663F35
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
Signing time: Tue 23 Apr 2024 19:13:38 +0000
ROA not before: Tue 23 Apr 2024 19:08:38 +0000
ROA not after: Tue 22 Apr 2025 19:13:38 +0000
asID: 263627
IP address blocks: 170.80.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:62:f9:a6:c3:77:c7:ad:67:ed:f5:54:ab:ea:5d:83:8c:66:3f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Apr 23 19:08:38 2024 GMT
Not After : Apr 22 19:13:38 2025 GMT
Subject: CN=F4B5B082D448C93E9F2884589344F5DE97FA1093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:f8:81:6d:32:de:66:2e:b1:29:65:30:fd:
e5:26:bf:bd:14:b2:ba:f7:ea:03:67:75:58:ff:52:
d9:de:bd:ed:36:7e:a8:44:af:da:58:02:d5:43:f6:
f9:b6:6f:70:0a:93:86:fb:bc:42:89:9b:56:e4:ce:
45:94:e3:8d:2b:d8:77:6c:e4:d8:31:e2:63:5e:23:
7b:2f:3e:5b:52:d2:df:ec:93:ef:a7:4b:2d:71:18:
a8:16:4f:47:4c:5b:18:d9:8c:8b:ef:0e:6c:86:59:
34:bd:99:41:ea:bc:6c:85:5e:e5:77:a5:3d:d7:49:
48:61:e8:60:64:d7:0f:1c:f6:ab:b8:13:9f:3c:cb:
67:6e:53:99:6f:6e:2b:57:cf:0d:08:c0:1f:b4:89:
da:de:5d:30:9c:25:b6:00:63:60:7c:63:94:8e:4d:
92:f0:33:66:da:e5:93:60:8a:d6:da:b9:96:cc:b0:
e2:87:5f:5f:cd:60:03:bb:b4:fa:e1:9b:13:2c:35:
e0:f6:96:b7:da:66:45:b5:19:8a:91:e1:1f:8f:6a:
98:28:f1:0a:31:26:71:68:83:29:4a:40:a1:67:d2:
33:c5:90:3c:8a:d2:e1:81:3e:29:c9:44:c5:44:83:
96:90:8b:bd:27:c5:da:5b:c5:9b:39:ef:2f:e0:a1:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:B0:82:D4:48:C9:3E:9F:28:84:58:93:44:F5:DE:97:FA:10:93
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:92:5e:ea:12:27:ad:b3:f4:5e:08:17:ba:9d:ac:d6:a9:8d:
16:62:9f:2b:fd:d7:f4:7e:ab:17:4c:2e:aa:7f:de:89:8f:09:
2c:9d:ae:1d:42:86:c7:f1:b6:69:42:61:3b:a7:d9:cf:88:09:
21:b7:a3:e5:79:7e:20:9b:04:0f:ef:25:e8:23:fd:bb:98:14:
f5:13:48:a2:69:2f:b3:b0:ee:a7:73:51:87:e5:af:96:91:37:
43:de:f0:70:c7:48:ba:46:25:5d:bc:a6:29:c5:18:e7:bb:9f:
ae:94:bd:27:03:c3:c6:37:a0:bb:f1:c8:90:6b:7c:ed:50:ba:
06:24:20:73:7d:5e:66:a2:89:54:03:2a:9e:37:46:49:9a:1f:
ff:3f:bd:15:c8:ca:c0:c8:60:17:7d:22:f7:c3:86:71:76:76:
a5:9e:9e:6a:e2:cd:e4:f0:28:12:0c:99:5c:6f:02:70:04:40:
48:f8:3f:b5:83:12:97:55:35:6e:00:b2:2c:32:25:83:e1:66:
cf:b8:5c:82:04:6c:3b:95:fc:b5:d4:e2:11:ac:14:a7:59:a7:
5b:b9:5d:cb:73:81:76:e5:cd:fa:d7:d7:8d:a5:71:72:29:9f:
b0:42:9d:cd:07:19:d1:67:5a:d8:04:af:6d:69:31:0f:6c:7e:
80:8d:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:42 2025 by rpki-client