Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137302e3233312e32302e302f32322d3234203d3e203533313532.roa
File: 3137302e3233312e32302e302f32322d3234203d3e203533313532.roa (raw, json)
Hash identifier: vRCHFMcnZ0e2F/gkb0TGIIo7NDzTMY3uKZSh+W6eRwc=
Subject key identifier: C5:B7:5E:01:72:C0:50:05:B4:24:CB:90:C7:40:C6:3D:3C:B8:63:F9
Certificate issuer: /CN=DEEE3D28D5A12448565CED39037051D4B533893D
Certificate serial: 2B202133DA50DDC2A654C72E7CDC568D868497AE
Authority key identifier: DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137302e3233312e32302e302f32322d3234203d3e203533313532.roa
Signing time: Thu 21 Mar 2024 21:00:25 +0000
ROA not before: Thu 21 Mar 2024 20:55:25 +0000
ROA not after: Thu 20 Mar 2025 21:00:25 +0000
asID: 53152
IP address blocks: 170.231.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:20:21:33:da:50:dd:c2:a6:54:c7:2e:7c:dc:56:8d:86:84:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEEE3D28D5A12448565CED39037051D4B533893D
Validity
Not Before: Mar 21 20:55:25 2024 GMT
Not After : Mar 20 21:00:25 2025 GMT
Subject: CN=C5B75E0172C05005B424CB90C740C63D3CB863F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:6a:2b:b7:7c:81:09:bb:31:cf:19:90:31:
a2:bf:44:f8:93:67:ea:e9:dc:b8:cc:c5:ba:09:ae:
02:ee:b4:64:fc:e4:39:0e:b9:e3:cb:f3:74:8c:4c:
54:37:98:70:ff:ed:c6:c3:f6:b2:1f:e6:6a:51:e3:
18:12:ff:82:84:c9:8e:c9:2a:46:71:d4:07:56:9f:
78:b1:47:f3:13:29:b0:65:f3:f9:62:f8:e6:cc:54:
0d:a0:af:b8:49:57:ea:87:4e:30:71:a8:fc:f6:29:
d1:8a:fb:14:6a:5a:f6:4e:0c:c3:c1:c1:a7:d0:b5:
ef:e6:8b:0f:5c:55:d5:d9:62:fa:98:ac:18:28:37:
38:25:28:91:c5:7d:6c:72:3a:fa:90:06:d1:ff:5e:
72:c5:b3:81:cf:f9:47:41:2f:3b:71:6e:a8:13:61:
70:9e:68:5e:b3:e0:00:74:26:dc:6c:c5:16:52:03:
85:23:27:60:ec:df:10:af:b6:a0:f0:3a:34:a6:5f:
93:d2:fd:36:60:00:55:50:57:0f:8d:2f:7d:b9:c8:
51:a4:a0:83:39:2e:b5:1d:cf:dc:9a:fb:ec:48:c3:
d8:ef:34:c5:2b:a1:ed:3e:2d:8b:48:0d:de:55:da:
31:3a:e2:7a:94:68:22:d5:d1:94:14:97:38:83:33:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:5E:01:72:C0:50:05:B4:24:CB:90:C7:40:C6:3D:3C:B8:63:F9
X509v3 Authority Key Identifier:
keyid:DE:EE:3D:28:D5:A1:24:48:56:5C:ED:39:03:70:51:D4:B5:33:89:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/DEEE3D28D5A12448565CED39037051D4B533893D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEEE3D28D5A12448565CED39037051D4B533893D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/0/3137302e3233312e32302e302f32322d3234203d3e203533313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:1a:2f:93:64:26:b8:57:13:6b:1f:29:99:97:19:d1:d7:f2:
ba:fc:50:8f:b7:d3:ab:30:04:dc:a5:87:a8:78:83:b4:c6:83:
51:3f:37:14:69:3c:f4:be:58:88:59:c1:ea:8c:85:1f:c0:c6:
29:bc:12:17:28:b8:a8:dd:9e:f0:77:2d:e8:a0:4f:53:e1:0c:
4d:b8:e5:51:a1:a0:0f:03:4c:03:89:16:96:ec:a0:c7:5a:ca:
d8:9c:34:e4:59:44:3b:ed:2e:f0:b2:69:58:e0:24:9e:d8:bf:
92:41:02:d6:3a:fe:9b:03:16:4a:71:15:aa:04:1b:7e:96:6c:
42:70:fa:c6:df:20:aa:41:7f:4e:c8:04:5b:fc:af:d9:dd:02:
bf:6b:1f:8d:2c:2a:bf:e0:9e:55:67:5a:9e:be:88:de:88:52:
5d:b6:4a:df:67:45:95:82:44:12:75:fc:fa:a0:56:b8:77:b0:
46:43:12:45:79:0a:3e:40:87:eb:f9:44:12:f1:35:b0:23:c3:
12:84:fb:6d:82:e5:7c:e4:51:3e:f6:42:21:12:4f:f0:0f:cd:
6f:dc:e4:b5:c6:b3:8c:a9:24:24:ea:4e:85:31:7d:2d:3c:0b:
90:3b:a1:0b:eb:93:f6:44:73:5f:98:d2:0c:63:8a:09:dd:5e:
ee:66:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org