Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230312e302f32342d3234203d3e20323636333034.roa
File: 3137302e37392e3230312e302f32342d3234203d3e20323636333034.roa (raw, json)
Hash identifier: XGB37MArRwV3hki0TQw/+udr3zBewlYCp8u6wHQStOc=
Subject key identifier: 8E:8A:AE:11:69:F1:05:5B:E6:16:65:30:8E:53:10:94:18:21:6A:17
Certificate issuer: /CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
Certificate serial: 474B1D5A4F7F8DB2B708DEE3107CD64D485ED6B8
Authority key identifier: 95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230312e302f32342d3234203d3e20323636333034.roa
Signing time: Thu 15 Aug 2024 22:13:08 +0000
ROA not before: Thu 15 Aug 2024 22:08:08 +0000
ROA not after: Thu 14 Aug 2025 22:13:08 +0000
asID: 266304
IP address blocks: 170.79.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4b:1d:5a:4f:7f:8d:b2:b7:08:de:e3:10:7c:d6:4d:48:5e:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
Validity
Not Before: Aug 15 22:08:08 2024 GMT
Not After : Aug 14 22:13:08 2025 GMT
Subject: CN=8E8AAE1169F1055BE61665308E53109418216A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:e7:8f:07:69:b3:e7:c6:df:11:f1:6b:fb:
a7:35:11:97:df:33:de:d2:6f:9c:85:ac:7d:ea:5e:
93:29:2f:a0:87:c1:a7:af:42:ff:f3:4a:a5:86:e2:
47:85:b4:ef:05:3c:54:32:32:aa:98:7b:06:5b:67:
c3:b8:52:81:11:96:10:20:42:9a:dc:4e:24:c3:f8:
19:a5:70:94:42:ab:28:16:51:88:30:79:77:3a:87:
e9:ca:e5:6e:c1:80:97:b2:d4:b2:2f:ba:1e:8b:c6:
a9:e5:10:e2:c3:4b:e0:36:40:5c:3c:c7:9b:ca:b8:
fa:41:4b:3f:fe:cc:63:8c:77:b3:b1:a6:de:07:47:
47:a4:71:51:6a:31:06:80:59:7d:7c:47:82:e6:c1:
26:cc:b2:4f:6a:c0:47:50:5b:7a:83:ce:f0:bc:e8:
ea:dd:54:3c:0f:f2:c0:e3:8e:40:d6:2f:34:e4:31:
35:96:9f:d0:7c:56:dd:16:be:62:e9:67:cf:cd:e4:
d9:6e:8c:38:30:21:98:ac:52:4a:b0:76:1a:cd:03:
11:7a:3a:fe:4b:55:e8:12:4a:65:50:6d:77:d6:ec:
2f:d5:8c:0e:a4:0a:8f:e8:9d:44:59:93:56:59:11:
1c:be:ce:8b:07:34:de:db:00:1f:5b:8c:c9:96:64:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:AE:11:69:F1:05:5B:E6:16:65:30:8E:53:10:94:18:21:6A:17
X509v3 Authority Key Identifier:
keyid:95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230312e302f32342d3234203d3e20323636333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a6:05:7f:29:71:8d:35:b9:46:d6:84:5c:cf:32:c8:39:41:
57:8c:c5:d0:f3:90:38:fd:4e:43:d2:90:f2:e9:3a:12:d2:e1:
aa:4d:09:d4:c5:07:48:af:b9:db:70:f2:b2:c3:d7:28:3d:3a:
72:ff:98:0a:9d:5b:17:12:db:de:f9:d2:aa:a9:65:d8:01:da:
fd:c3:90:c0:28:3c:3d:e9:f7:60:00:ed:f3:83:17:7f:35:bb:
31:18:93:d6:90:53:0d:ef:b6:24:50:10:e3:7b:8d:a9:b2:9e:
c2:93:54:23:b6:48:1d:97:86:b6:9b:5f:6e:78:51:57:1f:84:
78:25:a3:72:da:ce:86:82:fa:59:a1:ce:0a:29:14:11:90:a5:
06:85:0e:c1:8a:ec:42:b2:6c:c0:a6:31:31:55:5f:32:6d:6e:
c3:e4:e4:cf:74:15:08:14:f1:b5:a8:68:f6:f1:16:5e:ab:aa:
21:13:64:1c:5e:fc:63:3e:02:8f:ab:e0:42:40:70:08:a7:cc:
4e:97:9b:3e:fc:27:d4:67:a9:b8:7e:9c:ef:d2:c8:74:2f:1e:
58:55:fe:44:f1:93:6e:d8:b3:b2:25:e0:0f:3c:23:8e:80:bb:
b2:d9:ec:cb:d6:32:0f:38:3f:a6:9e:00:6f:37:5c:88:b7:bf:
08:16:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:54:15 2025 by rpki-client