Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
File: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (raw, json)
Hash identifier: xQQ8ihbahZfr1qYbQjg0Q6oLQbjebno/AyYeKgydjeM=
Subject key identifier: D2:0E:D1:08:B8:AC:7D:14:73:E6:CD:AB:0B:ED:3C:A4:59:59:2B:D1
Certificate issuer: /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial: 6BB738671F44B67F18BDCD9C9A0D50F77A16FA24
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
Signing time: Thu 14 Dec 2023 12:52:34 +0000
ROA not before: Thu 14 Dec 2023 12:47:34 +0000
ROA not after: Thu 12 Dec 2024 12:52:34 +0000
asID: 265080
IP address blocks: 170.233.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b7:38:67:1f:44:b6:7f:18:bd:cd:9c:9a:0d:50:f7:7a:16:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Validity
Not Before: Dec 14 12:47:34 2023 GMT
Not After : Dec 12 12:52:34 2024 GMT
Subject: CN=D20ED108B8AC7D1473E6CDAB0BED3CA459592BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:c8:c6:33:e8:73:e1:36:6d:d1:55:40:07:
14:59:19:1d:b9:f1:11:89:85:2d:27:ec:88:89:67:
e4:ae:6e:24:39:36:43:28:93:7b:9b:a7:b8:2d:31:
aa:44:14:d5:10:c5:50:1f:99:1f:9e:2b:f0:c6:35:
21:f5:1a:e8:db:8d:13:cb:0c:f9:c7:07:bc:8c:e7:
65:33:4e:63:a0:98:00:09:b0:b4:99:26:1d:29:13:
a8:bc:e0:b1:2a:73:0a:f6:c7:5e:81:1d:03:03:0e:
d0:7b:90:1c:0b:50:29:34:44:74:46:86:d7:8a:fc:
8f:3b:fe:d7:af:ab:a5:4e:c7:52:5f:f4:5c:8f:6b:
05:0e:25:de:1d:35:29:24:37:95:b9:ff:f2:6f:4d:
91:39:3a:69:45:bd:bd:a5:eb:20:a6:95:7e:bb:12:
7a:c0:04:94:8d:d3:c1:b5:0e:ce:fc:11:81:53:55:
c7:6d:66:57:e4:bc:c5:d6:a1:d1:84:f6:9b:56:8a:
40:57:05:f5:2d:a5:eb:3a:17:f2:2b:92:21:5c:b6:
b2:c0:a3:f7:ad:58:45:4f:56:13:0c:82:4b:66:ac:
3b:11:f5:53:df:8c:4d:ce:f0:82:fe:99:c0:ad:56:
2a:2a:2c:53:e6:fb:2e:9c:05:36:9c:d3:e4:d8:77:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:D1:08:B8:AC:7D:14:73:E6:CD:AB:0B:ED:3C:A4:59:59:2B:D1
X509v3 Authority Key Identifier:
keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
12:85:77:d2:3c:3a:06:77:15:76:c1:49:9d:08:cb:9b:46:15:
f3:1c:52:01:5c:4b:02:5d:d3:63:52:52:68:f1:0a:6b:6a:e6:
42:b8:b2:f6:e0:40:f3:5d:72:4a:d8:32:3a:d5:9f:55:87:cf:
38:f1:df:16:17:62:43:cc:5b:dd:82:af:99:5c:94:6e:93:5e:
ee:d8:8b:fe:ca:13:fa:27:92:82:96:9d:12:0e:39:65:6b:0f:
7b:e2:f8:a2:9d:b2:64:82:bb:02:c2:c2:bd:e6:9c:f3:31:e2:
25:a4:a6:0e:92:9f:45:e2:8e:83:07:f6:7a:5f:c2:02:d1:ae:
ea:70:b7:46:d9:f4:6e:fc:14:51:b4:4f:6a:33:b9:e6:d7:e7:
cc:88:17:09:28:13:b1:ee:3c:59:f5:f8:98:8e:a8:d8:ef:01:
a2:b3:9f:be:0c:c3:bb:aa:63:33:16:fd:6b:30:f1:db:17:88:
b4:5f:fb:03:3a:99:fc:e0:cf:44:9e:9f:45:06:4a:18:1c:34:
92:06:da:ca:92:e7:e8:04:d3:fe:26:64:cb:46:c1:08:9b:98:
9a:3f:46:3e:7a:61:2f:4a:67:06:37:ad:1c:06:d5:f6:7f:07:
30:85:0b:95:43:c9:ed:3b:00:40:6b:39:30:6e:ac:3e:0e:9d:
1a:5c:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org