Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: GlJ3RM2jDrN8FGyIQKG2qzMlH496TLIlHTWBMTt/ilo=
Subject key identifier: D2:F3:D7:2E:FA:02:04:CD:FF:7D:FF:88:63:84:35:70:EE:54:DE:87
Certificate issuer: /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial: 449D39715EB3F5E83C65FC789FE17823EFEC3239
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
Signing time: Thu 14 Dec 2023 12:52:35 +0000
ROA not before: Thu 14 Dec 2023 12:47:35 +0000
ROA not after: Thu 12 Dec 2024 12:52:35 +0000
asID: 265080
IP address blocks: 170.233.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9d:39:71:5e:b3:f5:e8:3c:65:fc:78:9f:e1:78:23:ef:ec:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Validity
Not Before: Dec 14 12:47:35 2023 GMT
Not After : Dec 12 12:52:35 2024 GMT
Subject: CN=D2F3D72EFA0204CDFF7DFF8863843570EE54DE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:13:cc:da:13:12:c3:45:79:bb:20:f1:0a:
80:ed:1a:93:da:24:ae:89:54:95:53:a5:4b:5a:26:
29:b0:84:f0:f7:03:2b:3b:34:66:81:1f:42:76:01:
41:dc:a6:ae:10:58:1a:32:d2:71:6c:69:42:aa:0a:
eb:9d:d2:d0:7d:ff:a3:ea:69:79:da:98:7e:17:b1:
b2:7a:af:16:52:fc:69:68:e5:ed:bd:7f:ae:99:ce:
04:db:73:89:a3:46:1f:8a:d2:69:14:e2:93:94:00:
77:b9:fd:1a:48:52:70:76:87:6e:ae:7c:70:20:78:
52:1a:f5:0f:5c:92:d8:97:24:89:6a:5a:a1:3a:14:
0d:c3:aa:c2:f9:37:28:b9:da:83:42:5b:7a:18:92:
c7:2c:63:05:4d:a6:9a:18:9c:74:28:55:c0:06:09:
ae:8f:99:42:90:81:69:e2:94:86:90:f3:18:d1:1c:
f0:16:d9:8c:c4:49:86:7f:4b:fd:ab:c8:e4:c9:84:
75:dc:d6:ae:42:21:28:d0:b0:93:cb:52:a3:89:1c:
ad:6a:a3:9a:75:e6:b2:c4:8a:46:6d:ca:99:50:b9:
2e:ee:bc:44:65:ec:30:ab:b9:a1:26:b5:b2:7b:56:
3c:21:8f:e2:fd:8c:25:e3:6e:db:34:3a:77:c5:be:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:D7:2E:FA:02:04:CD:FF:7D:FF:88:63:84:35:70:EE:54:DE:87
X509v3 Authority Key Identifier:
keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:8b:eb:bd:58:e6:ae:ee:2c:4c:c1:1c:11:3a:e7:6a:75:fe:
00:97:32:b3:1b:78:93:12:fc:84:8c:1a:84:a8:59:91:3b:80:
48:92:b3:79:2f:60:b5:e8:8e:e3:c8:1f:47:98:bb:e9:38:0c:
46:26:16:30:94:51:13:32:c1:30:73:ce:ec:b7:e4:7f:da:0e:
2e:a9:db:88:a1:ab:4d:76:d7:1f:c6:b7:8f:70:4b:89:02:38:
2a:e5:e0:37:16:5f:b0:58:ab:1c:a8:26:e6:46:b1:d9:80:d2:
fb:59:b0:ad:e6:1f:2e:55:aa:bf:f0:00:39:93:5a:3a:eb:17:
38:ee:ca:3a:ae:dd:ab:e1:22:f4:dc:52:75:bf:9c:9e:f5:71:
b7:ae:7d:8d:7b:49:55:0c:bd:a4:47:54:59:ec:a0:60:5c:41:
9c:4d:e0:d3:ab:8d:83:d0:04:37:45:66:e6:4e:e5:f0:ea:09:
59:d8:b8:e4:a6:26:0e:08:f3:3c:2c:b6:7d:a1:dc:ef:b1:3c:
c6:12:05:e9:9e:29:5a:01:f3:98:6a:8a:8b:93:81:66:56:9a:
30:d4:fe:c3:b2:9f:92:d3:c7:d0:53:43:c9:30:b9:21:1c:87:
bf:40:b9:32:78:a5:03:7f:ba:ba:a2:06:92:3a:c5:67:e1:70:
9a:af:4b:7a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURJ05cV6z9eg8Zfx4n+F4I+/sMjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5RUZDRDBFNzM3QTQ4OTcxMTZCMEM2MUVBQzY0NjEz
QjNERDI1QzAeFw0yMzEyMTQxMjQ3MzVaFw0yNDEyMTIxMjUyMzVaMDMxMTAvBgNV
BAMTKEQyRjNENzJFRkEwMjA0Q0RGRjdERkY4ODYzODQzNTcwRUU1NERFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kBPM2hMSw0V5uyDxCoDtGpPa
JK6JVJVTpUtaJimwhPD3Ays7NGaBH0J2AUHcpq4QWBoy0nFsaUKqCuud0tB9/6Pq
aXnamH4XsbJ6rxZS/Glo5e29f66ZzgTbc4mjRh+K0mkU4pOUAHe5/RpIUnB2h26u
fHAgeFIa9Q9cktiXJIlqWqE6FA3DqsL5Nyi52oNCW3oYkscsYwVNppoYnHQoVcAG
Ca6PmUKQgWnilIaQ8xjRHPAW2YzESYZ/S/2ryOTJhHXc1q5CISjQsJPLUqOJHK1q
o5p15rLEikZtyplQuS7uvERl7DCruaEmtbJ7Vjwhj+L9jCXjbts0OnfFvi/ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0vPXLvoCBM3/ff+IY4Q1cO5U3ocwHwYDVR0j
BBgwFoAUIJ780Oc3pIlxFrDGHqxkYTs90lwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC8yMDlFRkNEMEU3MzdBNDg5NzExNkIwQzYxRUFDNjQ2MTNCM0REMjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwOUVGQ0QwRTczN0E0ODk3
MTE2QjBDNjFFQUM2NDYxM0IzREQyNUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpeTANBgkqhkiG9w0BAQsFAAOCAQEAw4vr
vVjmru4sTMEcETrnanX+AJcysxt4kxL8hIwahKhZkTuASJKzeS9gteiO48gfR5i7
6TgMRiYWMJRREzLBMHPO7Lfkf9oOLqnbiKGrTXbXH8a3j3BLiQI4KuXgNxZfsFir
HKgm5kax2YDS+1mwreYfLlWqv/AAOZNaOusXOO7KOq7dq+Ei9NxSdb+cnvVxt659
jXtJVQy9pEdUWeygYFxBnE3g06uNg9AEN0Vm5k7l8OoJWdi45KYmDgjzPCy2faHc
77E8xhIF6Z4pWgHzmGqKi5OBZlaaMNT+w7KfktPH0FNDyTC5IRyHv0C5MnilA3+6
uqIGkjrFZ+Fwmq9Leg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org