Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3232203d3e20323633333231.roa
File: 3137302e3233332e3230342e302f32322d3232203d3e20323633333231.roa (raw, json)
Hash identifier: GGAGwqomwFC6wi567YfHvlqUYyA/C7nF2K7R7RC8Gbw=
Subject key identifier: D5:5A:91:67:BA:AD:66:7B:36:6F:D5:6F:CF:46:A1:BC:C8:27:26:E2
Certificate issuer: /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial: 297AB002C37A947143CE0B53989E49470B2B70B2
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access: rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3232203d3e20323633333231.roa
Signing time: Thu 20 Jul 2023 12:43:21 +0000
ROA not before: Thu 20 Jul 2023 12:38:21 +0000
ROA not after: Thu 18 Jul 2024 12:43:21 +0000
asID: 263321
IP address blocks: 170.233.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7a:b0:02:c3:7a:94:71:43:ce:0b:53:98:9e:49:47:0b:2b:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Validity
Not Before: Jul 20 12:38:21 2023 GMT
Not After : Jul 18 12:43:21 2024 GMT
Subject: CN=D55A9167BAAD667B366FD56FCF46A1BCC82726E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:cf:2c:c1:60:75:e6:7f:60:21:c8:19:2e:
e1:90:8f:40:71:d5:94:4c:d7:dc:a3:d1:5b:2c:0d:
f3:07:95:8d:7c:5f:37:6d:0e:ba:eb:e9:10:2b:af:
e5:5f:7c:52:61:33:a5:09:ce:c1:5d:69:7f:4b:67:
ca:d5:d6:c6:d9:ed:b6:b8:93:49:21:17:c9:a7:39:
44:24:ca:63:4f:6a:21:eb:66:53:b3:df:da:ad:88:
44:b5:64:e4:57:59:7a:44:55:ed:21:09:9e:d4:f5:
31:bc:26:09:eb:5f:bf:02:eb:b5:21:87:22:2f:dd:
5a:17:9b:07:8f:60:d7:1b:17:6c:8c:77:45:09:86:
d0:e9:1c:f6:5f:3a:cd:d4:05:84:05:10:30:57:d1:
3b:49:1d:03:7e:1d:54:ca:fc:5a:74:ab:41:ec:8b:
f2:97:51:88:72:84:c3:a4:06:7f:cf:68:36:d5:d4:
ef:10:b1:f5:a4:86:d5:70:49:d9:eb:ee:9e:b4:4e:
65:b7:a8:14:ca:68:e5:59:35:06:24:1c:6c:92:7f:
92:91:ac:d4:c0:96:aa:89:38:90:ec:b6:58:20:fc:
e3:f5:00:dc:fc:bf:41:2f:51:1b:79:f0:23:a8:cc:
a4:f8:68:13:40:5e:32:68:df:07:0f:9b:a3:a7:32:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5A:91:67:BA:AD:66:7B:36:6F:D5:6F:CF:46:A1:BC:C8:27:26:E2
X509v3 Authority Key Identifier:
keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3137302e3233332e3230342e302f32322d3232203d3e20323633333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f9:05:e6:3b:d6:ca:73:d3:e8:c4:cc:dd:99:e8:25:81:4c:
e5:50:1c:95:59:4f:e7:a2:8c:fd:c5:3c:4e:ba:ae:74:00:36:
93:da:4c:c1:40:45:66:d3:fe:05:ef:59:42:c6:9c:fa:c3:32:
74:ad:5b:d6:f4:c1:5d:91:48:ae:df:83:e5:fd:78:1b:e6:a7:
8a:a6:45:6e:67:18:75:b2:c6:63:21:3e:83:db:ae:37:bc:92:
d5:d6:ed:84:a2:29:41:01:d5:57:5e:87:ac:cd:fd:02:ad:f3:
7f:4e:cf:53:6a:f6:6b:d4:0c:d6:89:77:6f:76:c1:5b:56:ba:
39:b2:ad:d2:e9:a2:09:1c:a6:ea:25:23:dd:95:f1:2d:9f:2c:
4d:fd:7f:45:b7:2f:c4:30:e1:a8:c0:ee:e4:8b:80:15:7a:79:
d3:74:d0:66:bc:3b:a2:02:80:d0:c9:b2:b7:e0:a1:b9:1d:3c:
82:9c:60:6a:dd:67:fe:de:08:09:e9:ed:18:c6:a4:28:be:70:
e8:3d:ee:d5:e9:96:e1:f7:4d:be:59:68:a0:69:0b:5c:16:53:
78:ee:55:6c:ca:9d:55:9e:22:c5:61:7c:37:16:e4:a7:88:2b:
e2:41:59:44:21:3e:39:72:3d:92:80:8f:44:16:97:ab:a4:ec:
2a:58:fd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org