Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3234203d3e20323633343237.roa
File: 3137302e302e3230302e302f32322d3234203d3e20323633343237.roa (raw, json)
Hash identifier: fcdln0/Xc0yfPheeZe57BAc0ZGen2ucnT8HdjFoXx+Q=
Subject key identifier: AE:EC:5A:4A:04:C8:20:08:B7:48:72:32:C8:D7:E8:F3:A7:90:9A:2D
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 0E975A303F5570145F36A47217034D299FB720E7
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3234203d3e20323633343237.roa
Signing time: Sat 13 May 2023 14:29:06 +0000
ROA not before: Sat 13 May 2023 14:24:06 +0000
ROA not after: Sat 11 May 2024 14:29:06 +0000
asID: 263427
IP address blocks: 170.0.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:97:5a:30:3f:55:70:14:5f:36:a4:72:17:03:4d:29:9f:b7:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: May 13 14:24:06 2023 GMT
Not After : May 11 14:29:06 2024 GMT
Subject: CN=AEEC5A4A04C82008B7487232C8D7E8F3A7909A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:e5:64:6a:00:a8:fd:5c:d1:4e:25:3e:a9:
1a:66:77:c9:50:74:ea:27:2a:e3:a9:35:c0:fc:f5:
73:a5:61:87:47:d9:1c:f9:67:9a:69:aa:66:03:1c:
9f:70:8b:9c:dd:4a:b7:24:96:6c:6a:0a:f4:55:69:
d3:8f:22:dc:17:f2:9f:59:05:2d:1b:ea:15:49:56:
dc:10:e9:4e:e9:e4:e3:ff:7d:60:c0:c4:e8:57:42:
ee:60:9a:7d:bc:b2:ca:ed:ae:8d:b4:15:9d:fd:10:
5d:0e:a2:46:23:21:94:04:41:00:12:62:c6:2b:f8:
32:e0:e1:85:00:9a:a5:9a:c0:e6:00:2f:24:f2:d7:
42:05:3d:19:8f:7a:7b:b0:3d:97:e4:a8:b2:31:43:
5b:dd:32:6d:75:89:b1:bd:eb:2a:b6:55:1e:c8:74:
45:b0:62:56:f9:83:f6:7b:f4:d4:1a:59:6f:4c:53:
9c:12:54:c5:c7:6b:18:98:60:5e:93:44:63:e5:6b:
81:37:9f:fa:74:42:11:32:25:c1:81:6e:ba:7d:98:
88:f0:af:9e:42:88:9d:0b:9c:e1:85:e6:3f:49:5e:
a2:dd:55:f2:cd:76:68:7e:cf:cb:62:be:53:47:24:
fc:4a:37:9b:49:94:0a:2c:da:42:36:79:e2:1a:24:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:5A:4A:04:C8:20:08:B7:48:72:32:C8:D7:E8:F3:A7:90:9A:2D
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3234203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.200.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:d4:72:e6:33:f9:b6:80:45:37:98:bf:a3:c3:cc:56:7c:3f:
59:df:df:b7:47:09:cb:e6:76:ab:d3:cf:67:37:f1:5a:47:32:
e3:3e:08:4b:4c:b5:bc:61:8d:77:86:58:85:c4:dd:31:6a:49:
5a:d3:2a:82:69:d6:2a:92:ca:de:13:f0:75:7a:e5:7c:82:a1:
a8:9f:ff:62:16:15:a0:84:f9:68:09:37:60:e6:c3:fc:13:6c:
92:44:d9:cc:89:5e:ba:dc:b9:15:9c:89:0e:c6:91:a1:7c:7c:
a6:63:de:33:64:29:b1:87:8c:7d:bf:79:3b:12:57:6f:bf:10:
da:29:ec:d7:b0:17:66:5f:66:77:d2:ea:bc:06:02:d3:cd:94:
f9:a7:af:1b:18:ea:50:3d:81:e9:ef:dd:aa:13:4d:94:0a:81:
55:54:90:3a:64:0c:ad:0f:08:be:df:10:e2:05:79:e5:38:00:
be:4b:10:35:b3:b8:36:b3:db:aa:89:12:84:6f:55:9e:6b:c9:
22:6f:2b:6e:e6:db:5b:e8:8c:c6:7e:35:b3:3d:55:6b:65:14:
1b:fe:14:8f:1e:60:12:f3:f5:b9:80:a3:55:80:eb:f2:b9:17:
17:7f:3e:c9:46:d1:8a:81:d1:47:cf:68:61:6a:0b:ef:bb:6d:
9f:97:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org