Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3332203d3e20323633343237.roa
File: 3137302e302e3230302e302f32322d3332203d3e20323633343237.roa (raw, json)
Hash identifier: Fas3qaniDzHbslo5++iYJfW69eJjTDj8j6LVQHuxLKw=
Subject key identifier: B1:BA:EB:89:8A:B7:10:B3:A8:C3:B8:46:2B:53:F3:8D:C5:27:47:5C
Certificate issuer: /CN=52BFE68872F7B80B9A500C430D620459628C64FC
Certificate serial: 71AE21F40CF9256E1C221BB874712B6BE8F1DA35
Authority key identifier: 52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3332203d3e20323633343237.roa
Signing time: Tue 28 Feb 2023 13:33:04 +0000
ROA not before: Tue 28 Feb 2023 13:28:04 +0000
ROA not after: Tue 27 Feb 2024 13:33:04 +0000
asID: 263427
IP address blocks: 170.0.200.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ae:21:f4:0c:f9:25:6e:1c:22:1b:b8:74:71:2b:6b:e8:f1:da:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52BFE68872F7B80B9A500C430D620459628C64FC
Validity
Not Before: Feb 28 13:28:04 2023 GMT
Not After : Feb 27 13:33:04 2024 GMT
Subject: CN=B1BAEB898AB710B3A8C3B8462B53F38DC527475C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:f6:3a:a2:2e:59:cb:79:0e:b9:6b:52:29:
6b:30:e9:f3:dc:1f:30:5c:f8:38:a9:56:17:ff:0f:
49:7d:91:01:d4:24:68:6d:e9:33:62:7f:e5:3e:41:
86:a4:25:d8:0a:b0:1c:da:72:75:20:ac:d9:22:09:
35:8b:2b:b6:70:a4:bf:5b:fb:2b:6e:c0:3d:95:f7:
d7:81:d4:b8:8d:a2:2f:13:db:e2:ac:f0:79:55:5e:
7f:03:88:50:2e:ba:5b:16:05:a5:e3:80:34:10:fd:
9c:a6:64:a8:b0:09:0b:77:3d:94:4c:e5:71:ce:27:
57:f2:b5:42:0f:72:0f:00:f1:f8:11:fc:80:86:7e:
87:e1:98:e5:5f:3f:3e:90:90:8e:d2:f1:e9:dc:96:
4e:ee:ff:c4:75:77:7e:4a:51:87:ce:09:2f:80:7b:
30:32:30:7a:ea:78:73:aa:11:3d:6c:79:52:e1:08:
e2:a4:52:79:26:67:8e:f2:de:b3:0f:42:56:aa:7b:
d0:11:98:a7:e3:81:fd:dd:4e:bb:d1:4f:9d:93:bb:
96:07:a3:67:8a:09:9e:1e:b6:ab:ae:66:ba:37:25:
4e:ff:54:bd:00:3b:3a:4f:ae:66:c5:c8:78:f1:2c:
fa:53:03:36:9a:dc:98:1a:aa:b6:d1:71:63:fd:a7:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:EB:89:8A:B7:10:B3:A8:C3:B8:46:2B:53:F3:8D:C5:27:47:5C
X509v3 Authority Key Identifier:
keyid:52:BF:E6:88:72:F7:B8:0B:9A:50:0C:43:0D:62:04:59:62:8C:64:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/52BFE68872F7B80B9A500C430D620459628C64FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BFE68872F7B80B9A500C430D620459628C64FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32322d3332203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ff:2e:f4:8b:a8:33:e1:e9:44:3c:b7:51:b5:3e:f6:f7:68:
f4:4f:7e:ca:09:c6:91:18:50:7e:20:c3:b6:5a:38:21:ce:d5:
38:ad:29:d9:bf:ad:1c:11:d9:98:ca:6e:02:5d:7d:ae:94:fb:
ae:c4:87:42:e2:f2:a9:53:b6:0d:88:86:8d:25:e4:6f:ca:5d:
da:f3:80:4b:87:87:9c:ea:f2:e2:a6:e5:63:62:6c:72:08:6c:
3f:98:e2:c3:ae:4f:fc:1a:3a:1d:c6:11:16:6b:69:38:ad:05:
28:54:24:5e:8a:9d:53:b4:4f:70:19:02:4b:ef:dd:31:e5:53:
df:20:a2:00:d6:92:22:bf:6f:f8:1b:bf:91:2f:78:e0:f5:bf:
37:40:ca:25:91:e3:e9:52:06:a1:eb:2c:a2:e6:92:ee:17:ae:
c4:85:fc:12:61:87:3e:20:dc:84:21:f7:14:09:2d:d9:27:64:
53:23:d1:e5:70:9b:d4:47:7d:4f:09:4f:f0:d9:97:ca:7e:12:
a6:ac:62:b3:a5:09:91:79:ce:e3:13:a9:da:53:dc:62:96:6f:
e5:86:16:80:74:0f:3f:5a:4e:f6:37:29:1a:cf:15:0b:00:33:
26:4b:db:db:d0:de:45:02:3d:5a:29:ea:25:3f:fe:5c:37:03:
71:52:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org