Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32332d3234203d3e203532363835.roa
File: 3137372e37332e32382e302f32332d3234203d3e203532363835.roa (raw, json)
Hash identifier: SUH+gJtTkp4A9sPmxt2lNepl3S1v45qLKci5jSPs85s=
Subject key identifier: 76:E5:FD:84:37:18:B6:D2:E7:A6:06:63:F4:45:1A:56:A8:7E:4A:AF
Certificate issuer: /CN=4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E
Certificate serial: 284FF210DE2D8F8A0B74A65B1E2D8D31D6C8AA55
Authority key identifier: 4F:BB:2A:67:B6:36:2C:5F:1C:1E:3D:6B:C8:33:D8:FD:D3:D8:49:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32332d3234203d3e203532363835.roa
Signing time: Wed 29 Mar 2023 20:14:03 +0000
ROA not before: Wed 29 Mar 2023 20:09:03 +0000
ROA not after: Wed 27 Mar 2024 20:14:03 +0000
asID: 52685
IP address blocks: 177.73.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:f2:10:de:2d:8f:8a:0b:74:a6:5b:1e:2d:8d:31:d6:c8:aa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E
Validity
Not Before: Mar 29 20:09:03 2023 GMT
Not After : Mar 27 20:14:03 2024 GMT
Subject: CN=76E5FD843718B6D2E7A60663F4451A56A87E4AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:79:8e:45:9b:af:df:9f:2c:d1:f5:48:ea:
a4:4e:2a:a9:54:f2:f9:fc:d4:68:7b:98:b3:85:96:
97:eb:0f:ce:ab:80:11:88:1b:22:e9:2b:b0:6d:71:
82:1e:f3:1b:78:45:40:a7:5f:8e:09:66:02:54:97:
cc:6f:12:63:93:59:75:cb:4a:8f:a9:f0:7c:f2:2c:
e2:b9:01:1d:b0:50:18:28:80:b5:37:f9:06:65:f1:
45:46:64:4e:78:cc:45:5d:d1:35:e0:d8:b9:ce:8b:
85:25:d8:26:ed:de:fb:b9:1e:b2:78:39:da:71:b2:
52:95:0b:ea:c7:46:a2:b0:49:56:38:02:ea:55:f8:
85:b2:b4:7e:15:be:a6:ad:8f:a0:59:a9:65:dd:61:
d3:6e:59:68:14:79:79:e2:64:b0:de:cc:f1:5a:82:
ed:8e:95:82:50:89:3e:70:1a:fd:66:30:b0:ac:4d:
2f:f6:99:68:ae:07:3d:f9:4c:b9:fe:63:ac:87:48:
af:c8:40:d7:bb:c3:d6:7e:c9:6e:24:41:23:46:61:
4b:58:b1:a1:18:b6:36:05:d1:9d:bc:91:85:a9:68:
fa:17:a7:13:c4:3c:ed:43:ab:e3:62:3c:65:38:ea:
ca:8d:21:19:de:f6:4c:e7:0b:8a:8e:7c:d2:d4:64:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:FD:84:37:18:B6:D2:E7:A6:06:63:F4:45:1A:56:A8:7E:4A:AF
X509v3 Authority Key Identifier:
keyid:4F:BB:2A:67:B6:36:2C:5F:1C:1E:3D:6B:C8:33:D8:FD:D3:D8:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FBB2A67B6362C5F1C1E3D6BC833D8FDD3D8497E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e37332e32382e302f32332d3234203d3e203532363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.73.28.0/23
Signature Algorithm: sha256WithRSAEncryption
34:b4:22:ba:3b:f2:80:78:d5:25:57:cd:1b:fe:6b:75:99:93:
f4:7c:70:4f:f0:24:be:b8:00:1d:b2:bb:9e:41:eb:91:84:63:
2f:a4:f7:8b:41:78:a2:7b:e6:07:54:5e:5d:c3:20:64:3a:ae:
48:31:5e:91:c4:52:7e:ea:dd:f0:46:24:8a:cf:4c:d1:b8:7e:
08:5a:4d:16:54:3e:1b:c7:99:b4:c0:09:f9:32:d3:1b:c7:a7:
c4:bb:d2:af:d3:46:66:af:3a:0d:b0:24:ad:cf:c1:6d:aa:19:
e8:7c:35:ac:ae:47:34:5f:1b:d7:5a:7b:0a:0b:30:50:2d:77:
db:5f:51:ce:7f:4b:3a:21:ac:d8:f8:61:7f:db:21:df:40:22:
15:43:d5:2c:aa:67:e2:96:82:3e:a7:5d:5e:eb:bb:94:65:93:
94:3f:f3:12:cc:38:9f:27:05:8c:a6:a6:c3:d9:95:7b:71:77:
d8:5d:f3:18:34:b2:1e:57:67:95:97:f6:63:cd:49:88:a4:d8:
13:ac:20:bb:6b:08:45:44:ba:21:ff:1a:47:d0:84:36:ab:fa:
61:8c:3b:0a:96:a0:56:62:35:e0:06:cc:e1:57:68:9c:51:5c:
3c:56:f8:be:05:a7:78:41:87:76:f9:17:4f:ee:25:05:48:1c:
7e:d5:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:14 2023 by rpki-client on console-fra.rpki-client.org