Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
File: 3230302e31372e3132382e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier: 1THaCfLOvtjRaPvhITJ/Rc5xK+qh0nQZyEmr+vkwCkw=
Subject key identifier: A3:B6:31:6D:6F:5F:BA:62:A0:D1:04:50:ED:FB:91:BC:5D:BF:52:AD
Certificate issuer: /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial: 2474BF3188F69EE2EC713C34B71B69333C141BAB
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
Signing time: Tue 06 Feb 2024 15:29:40 +0000
ROA not before: Tue 06 Feb 2024 15:24:40 +0000
ROA not after: Tue 04 Feb 2025 15:29:40 +0000
asID: 1916
IP address blocks: 200.17.128.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:74:bf:31:88:f6:9e:e2:ec:71:3c:34:b7:1b:69:33:3c:14:1b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
Validity
Not Before: Feb 6 15:24:40 2024 GMT
Not After : Feb 4 15:29:40 2025 GMT
Subject: CN=A3B6316D6F5FBA62A0D10450EDFB91BC5DBF52AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:42:d0:3f:74:5a:92:ed:36:1c:a9:3e:15:
f1:be:5d:78:f7:8b:9f:8d:aa:49:0a:1f:96:3b:71:
3d:76:36:c0:00:69:0f:cb:3d:74:d0:97:4a:ad:56:
03:77:6e:82:26:4a:2a:6e:83:17:57:73:b2:a9:e7:
56:33:4d:84:8e:09:54:20:15:38:12:9f:e1:47:13:
e0:1e:4b:e1:2d:a8:a4:bc:c6:10:03:9f:07:a1:b2:
a2:a6:76:42:b2:9f:a1:32:a4:ab:5d:7f:e5:81:19:
6d:29:42:ad:61:f2:41:5e:9e:f7:18:64:00:f5:cc:
83:4e:3b:bd:16:56:56:06:3a:bf:f8:23:f6:69:f9:
c3:92:03:ab:99:16:0c:65:02:3c:c5:6e:f5:f6:8d:
a0:8e:82:16:df:31:26:e9:2b:49:58:fb:5f:21:fa:
29:c3:eb:3d:31:a5:91:aa:6a:d4:f9:e5:b4:e5:e3:
bb:36:db:93:c9:2f:33:a6:ff:62:7a:89:3e:c3:aa:
ca:f2:e1:59:17:3c:b8:69:a6:9b:f8:c9:a6:1d:85:
ee:88:e8:72:84:61:74:8a:07:3b:85:21:ee:31:bc:
ed:4e:77:f8:3f:81:9a:fb:79:ac:1f:d6:a2:5f:64:
b0:ae:ca:50:ab:da:12:6f:ef:ca:1d:6a:62:a2:f2:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:31:6D:6F:5F:BA:62:A0:D1:04:50:ED:FB:91:BC:5D:BF:52:AD
X509v3 Authority Key Identifier:
keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.17.128.0/19
Signature Algorithm: sha256WithRSAEncryption
18:d4:95:d9:7a:90:fa:27:f9:fc:b2:5c:6e:b5:49:43:0f:4f:
41:2c:33:cb:08:8a:a7:a5:50:19:0e:cc:89:df:bf:92:c2:7b:
26:02:50:0e:10:4f:9d:14:77:1f:2e:0c:de:cf:d9:dd:48:fe:
fb:63:6a:04:cc:9c:56:4e:41:30:02:87:c7:9d:3a:1b:f2:0d:
95:b5:ca:ce:bf:48:ce:22:01:1e:91:cf:46:30:fe:c7:94:ae:
59:04:ba:e0:39:a2:fb:e2:ef:f1:45:97:5e:90:b1:f5:b5:0b:
47:bf:bf:73:a1:19:4b:38:05:50:cc:2e:7c:fc:43:3d:ab:79:
03:5d:dc:f3:da:be:d8:90:11:e3:78:94:54:03:83:c1:1c:94:
76:98:79:4a:e2:cd:4a:ee:ac:a1:0e:05:23:00:41:f2:d4:dd:
83:00:29:2e:b7:d2:9a:90:0b:14:ad:90:e0:98:01:45:80:9d:
ad:6d:55:5b:30:0f:41:af:68:41:df:28:75:90:ff:a3:01:cb:
b0:73:30:2a:7b:aa:fe:ba:7a:8b:7d:62:e4:6a:be:21:53:e1:
58:53:60:e4:dc:8d:06:91:60:53:bc:0a:0d:42:ad:dc:b8:b6:
17:bc:b5:57:6f:a4:e8:96:7b:32:ae:8a:21:e2:d3:e3:32:36:
73:64:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org