Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: 62C8GqErHXNw/lO8HYH5cSd2Aay29gDz86L/M3UfgAw=
Subject key identifier: 16:EA:47:98:3E:63:25:CF:99:5C:0D:A9:C3:8E:F3:17:F7:ED:A7:B4
Certificate issuer: /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial: 2E8261A69EBB572EF407F8ED1358A7E14E60C323
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
Signing time: Thu 14 Dec 2023 12:52:35 +0000
ROA not before: Thu 14 Dec 2023 12:47:35 +0000
ROA not after: Thu 12 Dec 2024 12:52:35 +0000
asID: 265080
IP address blocks: 170.233.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:82:61:a6:9e:bb:57:2e:f4:07:f8:ed:13:58:a7:e1:4e:60:c3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Validity
Not Before: Dec 14 12:47:35 2023 GMT
Not After : Dec 12 12:52:35 2024 GMT
Subject: CN=16EA47983E6325CF995C0DA9C38EF317F7EDA7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:73:2d:88:96:a0:bb:81:7e:1f:ec:3f:50:
6e:26:1c:b3:5c:00:99:28:a7:92:a6:b1:3c:ad:42:
18:08:ba:99:89:9c:af:6b:bb:6a:73:ef:c3:d5:fe:
8c:87:44:18:9d:03:c4:bd:c4:5d:99:e5:3e:96:10:
38:37:cc:2d:3c:56:69:e5:bc:0a:91:98:a6:2e:84:
7d:96:a9:b8:6c:9a:30:03:f3:0b:bb:4b:15:a4:3f:
ce:68:e1:01:14:bc:94:16:3a:10:83:66:60:5d:4f:
1c:de:b1:62:8e:7e:4a:08:54:00:4c:14:31:21:4c:
99:90:03:76:50:c6:42:25:3e:5a:09:4d:da:66:d6:
48:26:5e:8f:85:8c:58:4a:b2:16:b1:99:19:23:65:
8c:2e:13:3a:97:b9:4a:56:72:83:f5:43:f9:e2:95:
72:2d:56:f8:d9:a2:8d:46:33:cc:ca:9f:6e:1d:e4:
82:a2:03:e8:a4:02:a1:f7:a6:9b:24:db:1d:1e:95:
73:82:b0:9d:fe:7f:e4:3e:3a:82:15:ae:9f:68:64:
7d:02:1b:a6:b4:c3:73:4b:20:f9:63:1f:4e:8a:82:
d1:f9:6a:9d:b7:93:c2:a6:a9:48:eb:3b:70:2a:2c:
00:2c:10:2f:83:7e:8c:25:df:4c:cc:5c:83:ee:d4:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:47:98:3E:63:25:CF:99:5C:0D:A9:C3:8E:F3:17:F7:ED:A7:B4
X509v3 Authority Key Identifier:
keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.123.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a8:10:c1:0d:c0:57:35:5c:cb:bb:20:be:e7:ef:98:d9:31:
39:49:8e:4a:7d:c9:5a:c5:d2:0a:b3:6c:87:3e:3d:b0:27:0f:
92:58:dc:ea:42:1f:54:b0:61:0d:b9:59:85:51:21:d6:be:df:
a1:61:ae:32:32:d9:61:64:a9:49:18:5c:ce:b3:45:8f:01:c1:
d5:98:3f:e9:4e:4b:54:b4:ee:e8:d2:ff:22:da:f1:8e:ec:6d:
69:a0:29:39:b0:75:8d:45:8b:ab:97:3c:6b:29:5c:1e:e0:ed:
e0:20:3d:ff:ac:78:d3:f6:a8:80:70:40:37:36:56:a4:0f:4f:
48:7a:e8:71:a0:6a:9f:ab:36:95:df:ec:a6:79:41:81:77:7c:
e0:90:ae:95:6a:1f:d3:03:6f:17:0f:d8:5c:1c:65:88:21:62:
fc:ec:a1:96:76:08:e0:a0:f9:5b:94:63:df:e6:47:4d:51:39:
d0:c2:3a:c8:33:da:b8:2c:f1:06:98:7b:16:f0:df:16:b5:3c:
ef:e8:d6:d4:94:31:36:46:b6:61:84:7d:47:b9:2b:0b:f1:12:
e1:66:22:0e:97:0b:be:f5:0c:ff:db:c5:79:c7:c6:c3:28:1c:
ac:03:bb:78:14:a8:65:41:b2:6a:8b:21:58:08:8e:91:bd:83:
64:3f:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org