Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3234362e3230382e302f32322d3234203d3e203238323538.roa
File: 3137302e3234362e3230382e302f32322d3234203d3e203238323538.roa (raw, json)
Hash identifier: RHhh4ZXxU1uNKlQyYLVaIaZXLf0s/0fxOu7K+WDYE0s=
Subject key identifier: 29:D2:FD:BE:CD:29:C9:82:41:B4:D7:21:8C:44:81:9F:22:43:D3:18
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 3C0F317A8BBB72D7AAE1C28FC5308809CDDCCA0D
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3234362e3230382e302f32322d3234203d3e203238323538.roa
Signing time: Fri 03 May 2024 21:21:37 +0000
ROA not before: Fri 03 May 2024 21:16:37 +0000
ROA not after: Fri 02 May 2025 21:21:37 +0000
asID: 28258
IP address blocks: 170.246.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0f:31:7a:8b:bb:72:d7:aa:e1:c2:8f:c5:30:88:09:cd:dc:ca:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:16:37 2024 GMT
Not After : May 2 21:21:37 2025 GMT
Subject: CN=29D2FDBECD29C98241B4D7218C44819F2243D318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:d1:fa:b2:92:8f:21:18:ae:f5:38:0f:09:
40:4f:e9:20:e9:f9:59:0e:8d:98:45:a0:eb:51:07:
93:c4:b6:2a:b1:26:cb:45:e8:fe:39:4d:e2:e4:24:
48:57:31:cf:15:8a:3a:b2:34:bf:fc:af:8e:ba:58:
1c:fb:b4:14:a4:67:59:21:af:d4:24:3e:83:22:f9:
23:c0:cb:51:1d:ce:c0:85:33:fb:7c:2a:b0:13:20:
d1:fe:89:4d:bc:ce:9c:10:a9:35:38:67:c8:e1:6c:
2c:db:23:98:dc:b7:86:2e:ab:cc:06:63:f2:bc:6b:
f1:cc:9f:c1:e0:64:cf:d4:35:0b:9f:ff:e2:8f:26:
8f:6d:cb:8b:45:6f:66:cb:80:60:cb:9d:be:83:59:
11:49:ba:91:0f:31:f0:9e:8a:8a:84:cd:43:d7:8d:
dd:11:11:5d:03:26:2a:2e:12:a2:12:60:dc:a2:0c:
d4:e5:ca:d1:9a:da:37:0a:77:72:3d:f8:aa:78:d0:
2d:8f:a3:8b:17:4e:0c:6a:48:9c:ca:d5:fe:f9:54:
14:e3:27:98:c4:b1:aa:1f:2b:21:6c:2b:22:e6:51:
86:58:a5:51:a2:89:12:9f:c6:d3:2a:bd:9f:6e:89:
ac:c2:41:0c:9e:27:30:b6:45:0c:4f:a1:42:76:23:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:FD:BE:CD:29:C9:82:41:B4:D7:21:8C:44:81:9F:22:43:D3:18
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e3234362e3230382e302f32322d3234203d3e203238323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.208.0/22
Signature Algorithm: sha256WithRSAEncryption
45:a0:80:64:27:fc:71:55:0b:80:5d:c9:f2:f6:cd:02:f8:96:
0c:36:58:7f:56:08:20:3d:8e:6f:dc:0f:c8:21:97:14:1a:73:
1c:26:2b:9a:bd:b1:ff:28:13:e9:aa:c2:a7:b7:4a:d0:1f:5e:
11:02:f5:03:12:5f:8f:e8:a0:90:f3:d3:50:e0:73:4d:0b:72:
1d:2b:8b:49:00:68:2d:41:d1:88:7b:06:fe:bc:48:c1:0c:c9:
a2:bc:a5:6d:d1:1c:92:7c:ff:a7:17:0c:12:77:1a:6b:56:31:
2e:c4:a4:f1:3a:a0:b7:ff:40:dc:fa:83:82:73:eb:67:37:fd:
ba:9e:df:67:bc:5e:d6:1b:2e:7c:e2:16:5f:34:34:0a:ce:7b:
e7:f9:c0:20:ee:c1:9c:b2:c2:38:ab:33:fa:cb:4e:a8:f4:c7:
6a:19:e7:85:89:7e:20:ee:95:11:5f:ad:0c:9e:41:6f:9b:66:
cb:bf:7a:bc:22:6b:e8:ac:e8:c4:67:d7:33:a3:ec:86:b5:ca:
6f:cd:30:7f:d0:51:7d:c8:20:81:1f:35:9f:3b:f5:38:0b:0f:
25:48:d1:99:f5:a8:4a:cc:32:98:c6:2e:ca:f5:00:25:18:4c:
d2:b9:6e:29:3d:42:95:d9:ef:70:90:4b:aa:28:14:0e:09:d9:
31:99:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:08:15 2025 by rpki-client