Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3230203d3e203533313533.roa
File: 3138372e36312e39362e302f32302d3230203d3e203533313533.roa (raw, json)
Hash identifier: 7ZB0FBYK0RbNr9APIE//8bk17rKu5xa9+BfuiQb7Xd0=
Subject key identifier: 59:FC:E6:7F:29:8C:C1:6C:66:FB:F7:F1:7A:54:72:1C:72:1A:91:A7
Certificate issuer: /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial: 09B1B01000839ECE533810A4E0138552D1914FD5
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3230203d3e203533313533.roa
Signing time: Wed 15 Mar 2023 20:04:59 +0000
ROA not before: Wed 15 Mar 2023 19:59:59 +0000
ROA not after: Wed 13 Mar 2024 20:04:59 +0000
asID: 53153
IP address blocks: 187.61.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b1:b0:10:00:83:9e:ce:53:38:10:a4:e0:13:85:52:d1:91:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Validity
Not Before: Mar 15 19:59:59 2023 GMT
Not After : Mar 13 20:04:59 2024 GMT
Subject: CN=59FCE67F298CC16C66FBF7F17A54721C721A91A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:b6:67:f7:c1:f9:e1:46:84:fd:6e:12:71:
68:ae:13:b0:28:b0:d3:90:9a:79:e5:64:84:7e:27:
f1:cd:23:a7:08:f3:5b:1e:c5:77:37:94:ba:da:ba:
a6:a7:6f:66:3a:b6:f2:ed:73:d9:f0:03:34:6b:08:
f5:f7:f9:b3:eb:14:18:44:25:9d:57:46:55:d9:04:
61:8c:b1:16:cc:ac:57:1c:10:f6:3b:bf:c8:66:ca:
85:5a:7f:c4:bb:7a:d3:9f:88:ed:ed:75:50:7a:fc:
9c:aa:1d:68:df:93:5a:ee:65:e3:94:8f:72:25:e7:
f1:ac:18:a1:4e:8b:33:bf:8f:c3:5c:79:c0:26:de:
8c:69:00:17:a3:72:0b:55:65:34:ac:43:bd:5e:72:
28:1c:ef:a1:10:af:66:39:ce:a2:de:3f:ef:b0:69:
6d:8d:43:e1:f6:d9:ff:c7:31:59:91:b3:f5:99:d3:
df:10:ea:95:50:28:98:b1:e3:2a:a6:51:5e:63:ee:
32:fa:ea:62:32:f9:5a:9a:ac:ba:03:3a:f8:ba:88:
c2:d2:be:54:ea:d8:a3:99:df:39:6b:a0:04:5f:39:
35:4b:0a:f4:b3:72:f0:61:b9:f7:69:4b:0b:53:db:
03:59:f6:bb:ab:de:94:56:11:75:f0:e4:22:4f:b1:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:E6:7F:29:8C:C1:6C:66:FB:F7:F1:7A:54:72:1C:72:1A:91:A7
X509v3 Authority Key Identifier:
keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3230203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.96.0/20
Signature Algorithm: sha256WithRSAEncryption
49:fb:d8:39:bf:6b:8a:39:5e:43:fa:54:21:37:77:8d:46:f1:
84:de:03:13:71:ba:f3:b0:ff:2a:c9:2e:05:ab:28:e3:09:c7:
aa:4e:33:fa:03:9e:56:c4:dd:c8:41:6b:14:23:11:5b:d9:b0:
af:c0:9b:e8:a7:14:a7:db:82:60:ba:c9:b6:f7:66:22:d3:80:
b1:68:87:0c:31:78:94:07:e1:71:f4:9d:7f:b2:e0:0c:11:08:
b0:d7:ff:b9:cd:a7:35:9a:47:f1:bc:4d:8d:dc:f5:4d:7d:8a:
27:c0:3a:68:14:20:e1:16:66:32:6f:93:0f:02:4f:10:29:4f:
e0:bc:11:5f:7a:2a:4c:af:57:88:5c:16:e8:4f:ca:6a:91:28:
37:87:74:37:f1:14:6a:ac:d9:39:b6:a8:6f:a7:99:07:03:6a:
41:51:ac:4f:af:00:30:a0:fc:0d:23:63:2a:10:be:2e:73:80:
ea:7f:9a:09:37:68:ac:a1:5e:8a:bc:dd:8b:9d:8d:a2:f2:15:
a7:4d:d5:6b:0e:b4:d6:52:74:c7:70:d0:73:b8:29:4d:83:ff:
ec:5c:73:a5:10:be:d5:0f:57:8a:42:22:6d:86:37:a7:15:5d:
f7:2d:d5:b5:c3:48:a4:3c:8f:fb:ef:98:7d:9f:35:a9:e8:94:
b1:9b:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org