Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
File: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (raw, json)
Hash identifier: wJm2252XxYpeOU8w7m1qkMaT98mOUFkcUs0/Wi+9EF8=
Subject key identifier: F1:F2:FE:36:05:E6:C5:17:BC:28:65:0C:CA:B1:28:45:B5:31:29:2E
Certificate issuer: /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial: 2583658D1ACB99B44046D0FDBE6723D88A902EDE
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
Signing time: Wed 17 Apr 2024 17:39:55 +0000
ROA not before: Wed 17 Apr 2024 17:34:55 +0000
ROA not after: Wed 16 Apr 2025 17:39:55 +0000
asID: 266289
IP address blocks: 170.79.0.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:83:65:8d:1a:cb:99:b4:40:46:d0:fd:be:67:23:d8:8a:90:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Validity
Not Before: Apr 17 17:34:55 2024 GMT
Not After : Apr 16 17:39:55 2025 GMT
Subject: CN=F1F2FE3605E6C517BC28650CCAB12845B531292E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:06:82:38:8b:34:d5:32:cb:02:8e:ca:07:
39:5c:f6:59:68:a1:76:4d:2f:9c:5b:3a:f2:67:57:
98:34:71:d8:18:95:60:eb:9c:1f:1c:4d:1f:f9:25:
72:2c:2f:a9:77:14:c7:da:01:5c:e6:70:e9:ca:c9:
ac:b4:01:21:25:d3:8b:8a:2b:1b:6d:3a:b0:b2:37:
cb:9a:09:8e:d3:ef:33:59:19:04:ce:ce:1d:73:80:
be:82:0d:d2:bf:28:56:f2:16:bb:a4:d6:87:be:64:
4d:93:2e:7f:1b:7a:1c:15:1c:7a:73:9b:3f:ee:eb:
f7:3a:11:b1:18:35:92:c6:c6:83:00:b2:7b:82:32:
22:b5:e0:ee:96:45:a8:9a:25:49:3c:d0:94:3f:76:
db:3f:ae:40:21:34:7a:f7:30:d0:e8:94:91:84:c2:
b3:bb:c9:c0:14:87:a3:4f:48:7a:88:39:a5:0f:80:
a4:49:6b:43:f9:a5:4f:34:72:b2:25:7f:3a:4e:d1:
d8:45:12:e1:0b:e0:ce:e1:9e:c2:cb:1a:99:6e:0c:
f3:ac:5a:7e:99:61:bd:8a:17:ad:08:8a:37:ec:94:
7c:77:56:56:34:60:4c:2d:5b:53:d7:4b:38:c1:4e:
27:a9:97:65:1d:cf:87:c3:de:a7:6e:16:3c:cd:1e:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:FE:36:05:E6:C5:17:BC:28:65:0C:CA:B1:28:45:B5:31:29:2E
X509v3 Authority Key Identifier:
keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.0.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:bc:11:07:84:80:9e:48:b2:da:e6:d6:00:ee:76:a0:37:5d:
b0:79:c5:42:03:83:5e:4b:31:16:78:f2:9c:dd:b2:8f:63:1a:
9b:8e:ba:4e:f0:34:6a:42:7e:a9:65:69:ab:dd:05:a2:9d:a0:
2d:b0:98:b9:0d:b1:3f:c1:60:24:f1:0a:7a:5a:47:95:2e:e1:
d9:6b:c9:81:a5:08:3a:4a:b5:46:f5:3a:76:13:3d:14:69:b8:
82:b9:cd:55:f6:be:c3:d4:61:51:84:00:ab:7c:29:79:35:3c:
72:2d:cc:5d:a4:ff:99:ec:3e:8f:f0:ac:e7:c8:00:0a:4e:08:
90:d1:53:ae:a0:59:db:76:5b:8d:96:c5:cb:df:ec:9f:20:43:
79:6c:99:02:21:36:e3:79:f5:97:96:79:a1:aa:81:f6:f0:aa:
16:56:33:7d:f0:d2:96:5d:1e:cb:0c:94:b5:14:17:ec:b3:20:
d5:30:b8:91:88:41:b6:4b:62:92:5d:e2:41:f6:cf:55:79:60:
0e:75:bd:3e:60:ad:a0:67:51:ac:d2:0d:88:56:27:19:a9:de:
8f:42:3c:01:2a:d9:41:7a:c7:5d:63:cb:f7:b1:38:0e:4f:63:
eb:73:96:09:ab:08:7f:89:68:f9:bc:1a:ab:ad:57:ee:2e:d0:
53:b2:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:35:18 2025 by rpki-client