Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32352e302f32342d3234203d3e20323634303031.roa
File: 3137302e302e32352e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier: 3/FsvDd+SJ9t95H7AOaXHEIukgkiHHe3XWTqEj3ltrY=
Subject key identifier: 1B:AF:D4:66:F6:C3:84:C5:BE:95:7C:2D:02:81:B3:30:C8:7C:DC:F1
Certificate issuer: /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial: 098930B0C64ABAEC3EF28AA77232E095CF969994
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32352e302f32342d3234203d3e20323634303031.roa
Signing time: Thu 18 May 2023 17:11:25 +0000
ROA not before: Thu 18 May 2023 17:06:25 +0000
ROA not after: Thu 16 May 2024 17:11:25 +0000
asID: 264001
IP address blocks: 170.0.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:89:30:b0:c6:4a:ba:ec:3e:f2:8a:a7:72:32:e0:95:cf:96:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Validity
Not Before: May 18 17:06:25 2023 GMT
Not After : May 16 17:11:25 2024 GMT
Subject: CN=1BAFD466F6C384C5BE957C2D0281B330C87CDCF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:1d:ae:a1:a2:47:42:c1:2b:85:95:c6:ed:
a0:25:65:50:47:12:a4:14:63:ee:03:0e:0c:10:c0:
e5:e5:a6:cb:89:98:d9:9e:a6:2d:4a:f8:04:b5:36:
a0:38:14:1a:5c:86:2f:25:0d:d8:85:08:e8:28:82:
f0:ca:87:66:fe:93:98:2b:16:12:42:0e:72:c3:30:
a8:6f:fb:66:60:05:c7:6f:32:4c:88:ab:b4:29:2a:
d6:d2:54:d8:36:5e:e7:f4:17:7e:ff:ff:48:8c:14:
c3:2f:cf:6a:ba:35:41:a6:ca:8a:07:38:5b:23:58:
be:58:28:e0:d9:ef:6d:c1:3c:09:f6:63:fa:93:17:
2f:c9:55:60:19:87:91:29:ac:eb:5d:85:96:39:81:
e0:df:84:8b:89:23:df:47:23:1b:a6:1b:e5:bd:4d:
88:6d:37:f7:9e:20:38:c9:89:91:18:ed:82:7f:64:
d4:be:38:e1:62:0c:da:f2:87:91:df:1b:22:ef:0b:
a4:b0:a3:f2:de:a6:7e:33:29:ac:e7:66:ba:e6:bd:
57:f1:22:1d:54:12:2b:c9:8e:87:d7:b2:c1:19:7f:
78:f4:06:83:6d:a1:ca:b9:53:72:be:42:b7:2a:31:
be:7e:b8:ac:87:f6:fd:c8:d6:fb:f2:d5:4b:26:4a:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:D4:66:F6:C3:84:C5:BE:95:7C:2D:02:81:B3:30:C8:7C:DC:F1
X509v3 Authority Key Identifier:
keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32352e302f32342d3234203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.25.0/24
Signature Algorithm: sha256WithRSAEncryption
06:cf:0b:e4:bc:05:06:99:06:09:1c:d7:5e:20:0e:0f:02:20:
2b:51:9b:43:4d:1c:d9:20:b7:d5:af:94:4f:eb:e8:d6:a3:26:
4c:d9:cf:b6:f3:0f:16:61:5c:87:84:ad:cb:de:ca:25:ce:3a:
4f:60:1d:31:6d:2c:a0:8c:87:6d:f5:3c:7b:04:4a:cd:27:89:
ed:c6:89:50:e0:37:13:3e:25:0c:1c:52:b1:9e:e2:cc:f9:ed:
0e:cf:3c:68:c1:fc:e0:4b:e8:a0:53:79:ad:01:91:dc:5a:34:
7c:73:c8:78:0b:8c:30:b3:c8:be:e2:ef:28:78:be:e3:e9:32:
0b:f6:8e:0a:09:58:12:d1:dc:30:14:5b:90:b1:ac:cf:ba:1f:
e6:98:76:41:e9:4c:fa:44:35:6a:e0:a6:0b:e2:0b:33:09:57:
3e:cd:e7:68:35:5c:a4:19:1b:f4:d0:9a:32:fa:dc:c6:dc:40:
ec:10:0e:d0:d9:23:21:09:3d:fb:80:69:8a:10:fe:54:e6:2c:
24:f5:60:57:d8:90:d2:d2:54:63:ff:81:07:f4:a6:2b:0c:50:
d8:c4:e7:26:00:a5:a4:28:bd:23:60:24:fa:8d:ac:76:54:7a:
88:2c:57:d7:f0:11:d7:14:63:f9:cf:28:53:5e:81:24:8e:f4:
6f:52:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:17 2024 by rpki-client on console.sobornost.net