Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3137302e3135302e34302e302f32322d3234203d3e203533323436.roa
File: 3137302e3135302e34302e302f32322d3234203d3e203533323436.roa (raw, json)
Hash identifier: UwtA2NFLUhBeRsbHMOnh+E8R1wGi14ztkbXJnt53rV0=
Subject key identifier: 43:30:5D:AD:B5:6E:6C:55:C5:6A:85:4F:F4:A1:F3:62:DF:24:A8:17
Certificate issuer: /CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
Certificate serial: 6B620C0B93167B22829709F571EA2E7D660B8B1A
Authority key identifier: 48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3137302e3135302e34302e302f32322d3234203d3e203533323436.roa
Signing time: Thu 05 Oct 2023 14:28:08 +0000
ROA not before: Thu 05 Oct 2023 14:23:08 +0000
ROA not after: Thu 03 Oct 2024 14:28:08 +0000
asID: 53246
IP address blocks: 170.150.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:62:0c:0b:93:16:7b:22:82:97:09:f5:71:ea:2e:7d:66:0b:8b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
Validity
Not Before: Oct 5 14:23:08 2023 GMT
Not After : Oct 3 14:28:08 2024 GMT
Subject: CN=43305DADB56E6C55C56A854FF4A1F362DF24A817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:4c:d2:6b:13:fd:61:40:ff:04:14:57:f5:
82:1b:a6:57:94:c6:98:dc:a5:38:9b:fe:ac:9b:65:
19:d3:6a:d8:f5:be:70:d5:53:4c:15:03:8f:0f:f3:
53:ba:c7:6a:16:81:33:7b:74:38:4c:aa:e6:b3:5f:
b6:b1:99:7d:1a:42:1d:6f:98:a8:07:2d:71:a7:0b:
58:59:13:81:e8:fd:07:43:25:82:ab:87:f1:98:b9:
fd:d3:2a:c4:0b:9b:f6:d1:48:5d:d8:8e:0a:a5:4d:
4e:d9:40:fa:6b:b5:46:30:0d:56:fb:45:ab:a3:59:
c0:ca:cd:82:ed:35:54:f8:c7:90:a8:f3:6b:ef:40:
01:2d:dd:5c:da:01:40:e2:9e:40:a8:22:0a:5a:5a:
0a:d1:36:d4:01:ac:bd:f0:ba:f2:c8:60:0d:48:fb:
bb:dc:f5:37:8b:89:33:69:76:b2:7f:d2:91:6b:1f:
fe:80:71:be:69:0a:e5:77:4f:70:9a:ab:bb:ff:7d:
d2:18:6d:7e:38:3d:bc:88:de:73:89:00:0c:c5:33:
ae:0f:41:94:0e:10:11:b5:4e:65:df:35:db:80:0c:
90:74:92:14:25:a2:28:64:f5:29:de:da:94:54:95:
3e:59:ac:ee:50:f8:d0:cd:f0:0f:d7:ca:99:1e:28:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:5D:AD:B5:6E:6C:55:C5:6A:85:4F:F4:A1:F3:62:DF:24:A8:17
X509v3 Authority Key Identifier:
keyid:48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/3137302e3135302e34302e302f32322d3234203d3e203533323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:36:62:9b:c8:33:08:69:48:fe:18:e8:9d:dc:1e:c9:90:30:
4f:1e:f2:cb:5c:96:3c:35:e4:44:ab:38:ea:19:c4:0d:e9:b6:
35:79:7b:09:0b:9a:81:f4:59:b5:96:1b:06:63:3a:54:d7:bf:
d9:4b:a4:c5:42:1f:33:b9:dc:14:cd:ac:3d:03:5d:04:c7:63:
ef:f9:8b:d6:c9:97:01:ad:4e:93:9d:7a:c9:f9:6e:2c:20:fe:
c6:ca:75:18:7c:cc:8b:5f:a7:12:ba:8f:20:c5:9c:20:d1:9c:
ab:d3:ee:7f:08:d8:2b:34:34:42:8b:1a:43:b3:03:b1:9e:20:
5d:b3:33:d0:bd:f2:d0:91:a5:a1:5e:00:01:c3:4f:ed:01:4d:
49:1a:36:ef:17:5a:78:53:73:c5:d3:1d:c2:6e:8e:4e:7f:e4:
47:8f:f8:d6:37:ef:bb:99:9c:fa:85:2c:84:f3:14:39:75:8e:
96:ac:19:3e:f1:0f:cf:f4:bd:0a:18:65:c9:67:56:51:cf:de:
d4:2c:ea:b8:d8:34:7e:5d:7b:c5:58:0c:e5:9d:23:53:a0:9d:
c4:e0:4a:21:4a:0a:ce:2e:b7:76:36:09:76:64:83:5f:80:71:
90:a9:4f:1a:be:ca:2d:f3:5b:ed:35:36:98:1d:88:3b:af:d4:
30:6d:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org