Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa
File: 3137302e38302e3235322e302f32322d3234203d3e203533303738.roa (raw, json)
Hash identifier: ucQLK33e3lcZsfN4L6Vyg4Ul/FcTHyDFpVJU4H+3Swo=
Subject key identifier: 21:3E:4C:DD:09:80:6A:DC:E9:CB:9C:43:01:E7:8A:FE:02:F9:EB:A8
Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial: 506570B9B69AF6ABAA1E9222D65123563DED74C0
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa
Signing time: Tue 25 Jun 2024 14:10:38 +0000
ROA not before: Tue 25 Jun 2024 14:05:38 +0000
ROA not after: Tue 24 Jun 2025 14:10:38 +0000
asID: 53078
IP address blocks: 170.80.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:65:70:b9:b6:9a:f6:ab:aa:1e:92:22:d6:51:23:56:3d:ed:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Validity
Not Before: Jun 25 14:05:38 2024 GMT
Not After : Jun 24 14:10:38 2025 GMT
Subject: CN=213E4CDD09806ADCE9CB9C4301E78AFE02F9EBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:5a:d0:6f:ce:d0:bf:20:a6:b7:29:92:e4:
d7:8c:6c:3b:7b:0d:fc:0f:a8:15:bd:e6:60:87:fe:
81:96:61:69:50:4c:ba:14:98:16:86:a6:45:0d:cb:
6d:6d:31:3c:d7:5a:f3:46:bd:25:31:ba:f0:26:de:
a4:46:5b:6d:b5:d1:fe:82:79:4b:59:fe:e6:e6:da:
69:9d:84:c0:a3:0a:84:91:30:5d:88:6b:c9:09:6b:
b5:dd:56:23:e3:33:4f:a4:19:e9:8e:c9:d2:b6:50:
21:3d:e3:a9:8f:d0:a5:d0:36:bf:25:5e:b0:6f:78:
e9:0f:f1:d9:c1:ca:5e:e3:15:25:56:9a:dc:48:ea:
dd:4d:ba:ea:48:e1:58:ce:b2:b5:4f:da:98:e7:ec:
fc:69:7a:64:1d:d1:56:a9:32:35:73:d9:dd:76:f6:
01:6d:79:18:27:ef:81:bc:33:ec:4f:42:d7:5a:ae:
c4:50:4e:bc:a5:00:6d:d2:84:17:92:85:d0:6d:5e:
07:75:59:72:c0:79:92:12:8e:44:12:02:b4:f9:1c:
66:e0:61:1a:e8:17:57:78:5d:e9:6c:51:5e:9a:e8:
79:bb:3f:77:e4:55:29:06:7f:f8:e1:6a:83:46:ea:
74:b1:12:19:08:66:b6:1d:f7:b2:b8:c9:83:2d:dc:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:4C:DD:09:80:6A:DC:E9:CB:9C:43:01:E7:8A:FE:02:F9:EB:A8
X509v3 Authority Key Identifier:
keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.252.0/22
Signature Algorithm: sha256WithRSAEncryption
68:fa:4a:9c:d1:17:cc:67:0b:42:92:40:1a:a0:b2:01:e7:8f:
2c:7f:7e:11:7a:60:81:af:c6:20:04:28:af:6f:2d:64:11:c8:
b1:a8:36:c2:88:32:9a:60:55:bc:a1:3a:d0:f4:c8:73:bb:51:
b6:6f:c6:43:7b:4e:1e:52:47:ee:e7:3c:43:53:1b:13:ea:a3:
cc:46:79:ef:d5:67:e2:11:b4:70:fb:e4:1d:0b:ef:59:3c:8f:
08:4b:05:c1:7a:f7:b3:73:d0:e2:6f:e5:ca:67:94:af:45:22:
7e:87:6b:16:a0:51:2a:cc:07:34:6f:70:c2:45:1f:e8:59:df:
84:d9:5b:52:01:56:17:d9:a4:ad:17:d2:4f:e2:ce:a8:6f:79:
98:9f:99:5a:a0:9e:b2:83:e0:30:f6:f4:ca:8b:d2:2e:1d:b1:
d3:ed:31:02:b6:fa:ae:64:ea:5d:62:e2:77:0b:d6:a6:20:17:
99:a1:b2:ae:0a:41:6d:90:77:37:26:8a:bc:56:05:d5:8d:cb:
29:1a:b6:91:86:33:77:52:35:21:8f:db:b3:76:4a:81:13:35:
03:58:7a:83:70:8a:15:8c:bd:b6:84:12:fe:c8:50:9c:4a:b4:
7b:e3:f7:15:f0:09:46:5c:64:ff:6a:52:3a:3a:5c:53:b3:87:
47:15:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:11 2025 by rpki-client