Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa
File: 3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa (raw, json)
Hash identifier: 2PmZrIk1SNagRdxE1RbygaPRfzzNO2m/OQeMaOWt0CA=
Subject key identifier: B7:08:B2:DF:AC:3A:7A:B4:0F:4F:04:0F:C1:48:E9:0D:E5:33:61:F7
Certificate issuer: /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial: 849D79488E4101AF5032DE724CDB8F5DE169D0
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa
Signing time: Wed 25 Oct 2023 18:58:24 +0000
ROA not before: Wed 25 Oct 2023 18:53:24 +0000
ROA not after: Wed 23 Oct 2024 18:58:24 +0000
asID: 265041
IP address blocks: 170.150.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
84:9d:79:48:8e:41:01:af:50:32:de:72:4c:db:8f:5d:e1:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
Validity
Not Before: Oct 25 18:53:24 2023 GMT
Not After : Oct 23 18:58:24 2024 GMT
Subject: CN=B708B2DFAC3A7AB40F4F040FC148E90DE53361F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:67:4b:2e:0f:2c:4f:78:ae:e4:73:d4:98:
f7:71:1a:91:dd:3e:4e:29:9a:d5:0b:a7:fd:20:75:
1c:92:78:f1:ae:47:7f:e6:73:d5:ed:69:df:d9:55:
87:2e:52:63:5a:86:dc:c6:dd:22:da:c4:d7:f1:19:
c9:03:e9:71:d0:db:63:87:62:3e:09:46:4e:4a:24:
38:7e:59:d8:07:6c:5b:c3:4c:94:c3:75:aa:93:32:
12:6c:19:d8:90:d8:61:ce:62:88:32:3d:c4:73:db:
75:c5:ec:a4:3b:35:b2:4a:86:39:af:cb:5e:19:b3:
81:c1:15:6c:88:20:45:d0:b5:c1:b8:ea:63:e2:a2:
a7:93:d2:4c:a9:a8:9b:ce:32:fc:b7:5b:1c:63:08:
79:56:88:e8:46:72:39:37:12:d1:b3:1d:27:2e:da:
15:57:98:2d:9f:22:57:59:2e:88:eb:86:d9:42:df:
ab:de:f5:ea:ae:b9:cb:65:13:af:85:57:4e:8b:df:
18:bd:63:bf:53:c0:66:c9:94:4b:7b:3e:39:a6:9a:
9b:c1:94:17:59:35:64:80:97:43:62:e7:56:c0:07:
74:c6:d1:8c:d0:89:3c:65:55:14:be:22:27:f2:ff:
14:d7:89:ed:f0:ec:e4:25:cd:0a:0f:49:c6:c4:06:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:B2:DF:AC:3A:7A:B4:0F:4F:04:0F:C1:48:E9:0D:E5:33:61:F7
X509v3 Authority Key Identifier:
keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32332d3233203d3e20323635303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.136.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e0:40:68:2a:fb:74:dc:7b:be:d1:8b:04:24:2a:fd:fc:f3:
69:67:cd:27:ef:23:4b:7c:32:aa:92:9b:df:56:0b:5f:58:b9:
97:a4:e3:51:10:d5:76:fa:da:1b:11:85:b3:5f:e4:07:a1:a7:
f7:f7:8d:1d:70:db:b8:c6:73:39:3b:05:d5:fb:66:9b:e5:5b:
30:c0:ab:aa:de:e6:11:64:5f:f8:0d:6a:a0:06:1d:66:04:40:
14:1a:bc:8f:dd:7a:6e:5f:6a:6e:27:8a:d1:14:46:6f:f0:0e:
c4:17:a9:a8:0a:2f:b0:88:4f:ec:f8:6f:53:cd:21:0d:36:70:
93:1e:16:f6:09:96:fe:a8:38:9a:aa:82:f6:f8:e0:c4:6b:25:
39:02:c6:65:04:b2:28:17:d6:69:8a:d8:78:b7:f5:02:b5:e9:
ce:80:5b:66:23:f6:1c:f0:a1:13:5d:e0:ad:40:20:2b:10:4c:
84:90:ae:08:c9:83:ca:be:3a:66:a1:01:6b:67:27:81:90:0f:
be:25:ff:e1:74:55:68:ac:c4:22:c2:04:c8:82:7d:6b:25:2d:
fd:f1:cb:18:62:0f:0f:17:23:99:57:a7:e9:a9:1b:cc:6c:99:
69:01:aa:c0:8b:8b:c0:79:c4:b1:89:3e:61:ed:6d:e6:03:21:
82:fd:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:03 2024 by rpki-client on console.sobornost.net