Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
File: 3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa (raw, json)
Hash identifier: z7bIoGB1Bz9mmGWQiFst23uykcGeeNhowwLb+UOoFqA=
Subject key identifier: 40:D6:9A:15:72:D0:C5:84:77:8D:FB:0A:77:AE:CC:CE:F6:2A:62:FB
Certificate issuer: /CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
Certificate serial: 4B0513EB826714F1BD5D47ABC64A0A567A85E506
Authority key identifier: 2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
Signing time: Mon 18 Dec 2023 20:27:04 +0000
ROA not before: Mon 18 Dec 2023 20:22:04 +0000
ROA not after: Mon 16 Dec 2024 20:27:04 +0000
asID: 266359
IP address blocks: 170.239.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:05:13:eb:82:67:14:f1:bd:5d:47:ab:c6:4a:0a:56:7a:85:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
Validity
Not Before: Dec 18 20:22:04 2023 GMT
Not After : Dec 16 20:27:04 2024 GMT
Subject: CN=40D69A1572D0C584778DFB0A77AECCCEF62A62FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:d7:cb:6a:3a:43:89:59:95:0c:a5:ff:06:
e5:67:08:31:3a:35:ef:ef:6f:d7:7c:84:66:5a:78:
76:16:46:f1:bf:45:61:94:79:8d:5c:73:78:6c:03:
c5:5d:bf:2e:34:2d:d6:d6:66:c9:53:2c:4a:08:0d:
8b:6f:72:b4:ad:5c:2c:50:94:39:b4:db:9b:a9:b6:
e5:b8:ba:1f:11:84:ba:04:81:ae:fc:71:d3:a6:b8:
9d:0a:f4:d4:a4:c9:72:00:9c:e8:1b:c4:70:5e:a5:
a0:16:07:2c:ef:94:3c:45:f2:b7:dd:30:95:89:d8:
ab:ed:d8:82:2f:f0:b0:bd:a4:77:04:69:1a:27:54:
2f:0a:16:d8:b8:c9:15:b3:f3:b0:8f:1b:0f:e6:ab:
a2:3e:58:92:2b:00:ec:c6:8a:c5:c7:bd:23:04:bf:
ac:e6:dc:0b:0c:89:ba:09:1d:33:9c:18:5d:6e:93:
bb:31:56:ad:71:ef:81:ec:10:e7:5f:70:a1:50:c4:
47:1d:ee:9f:4a:ca:65:9c:f9:00:fd:ee:df:77:2a:
5a:2e:31:94:01:5c:c8:a6:8f:0d:03:a1:2b:d3:e2:
79:b5:27:4d:90:e6:a7:56:70:a3:56:36:52:18:78:
5e:7c:9f:d6:b5:fb:7a:11:29:cd:8b:3c:f1:eb:6b:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:9A:15:72:D0:C5:84:77:8D:FB:0A:77:AE:CC:CE:F6:2A:62:FB
X509v3 Authority Key Identifier:
keyid:2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:43:fe:6d:d8:97:3b:7e:9c:32:46:d6:d2:43:25:f7:22:59:
d9:a7:46:2d:4a:30:94:fa:9a:49:e4:7d:57:ea:df:5a:e5:f5:
15:57:5e:a7:af:da:db:53:3f:72:60:c4:9c:b8:ba:53:e4:a1:
a2:0b:ef:82:df:43:30:c9:c1:5b:2e:fb:53:4a:13:ad:c5:04:
d8:aa:aa:e1:67:c5:d8:37:be:5e:0b:b5:1d:d6:ed:25:ec:2a:
72:a9:83:f9:89:12:7a:28:85:1e:94:27:56:cb:f5:11:2b:c4:
7d:bc:3c:03:09:0d:a5:f0:11:04:6f:46:a8:4c:6f:f8:34:cb:
36:b1:b4:b4:3a:8a:0d:69:f5:74:de:45:1e:a4:da:f1:3e:4a:
92:c9:bf:9c:5e:12:99:19:1d:be:ef:26:35:89:d4:ce:05:95:
13:b8:5f:73:41:2e:86:d6:f2:ad:bf:5e:d5:b2:52:d1:a4:fd:
bd:3c:6f:c9:4b:9b:75:54:0a:50:da:a8:10:41:8b:dd:2f:da:
0f:1b:5c:c7:ee:36:30:07:2e:83:1f:d1:66:6d:a5:aa:f1:77:
4b:78:ef:be:b0:a7:5a:48:ea:d6:40:3f:55:ad:80:18:51:f4:
92:30:f4:7d:14:e9:96:a5:e7:67:9e:2f:64:d8:78:1b:c4:4a:
f9:e2:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org