Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32332d3233203d3e20323633343237.roa
File: 3137302e302e3230302e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier: /fdotgJL/MFkFbYITUDfgdHqMdoaQBZ3pBqW4WWFHrk=
Subject key identifier: 88:08:67:48:EB:56:76:97:C4:50:FD:A2:81:8A:79:F9:EC:DD:D5:EA
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 0D76BDA1D6D638C6F7F3C13D04FD1C5B540147CA
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32332d3233203d3e20323633343237.roa
Signing time: Sat 29 Jul 2023 23:16:52 +0000
ROA not before: Sat 29 Jul 2023 23:11:52 +0000
ROA not after: Sat 27 Jul 2024 23:16:52 +0000
asID: 263427
IP address blocks: 170.0.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:76:bd:a1:d6:d6:38:c6:f7:f3:c1:3d:04:fd:1c:5b:54:01:47:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: Jul 29 23:11:52 2023 GMT
Not After : Jul 27 23:16:52 2024 GMT
Subject: CN=88086748EB567697C450FDA2818A79F9ECDDD5EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:64:5a:c6:1a:71:c4:d4:77:a0:ff:a4:51:
ce:a0:99:cf:cc:00:dd:ac:da:a7:92:91:37:0a:b7:
23:7f:06:15:58:a1:3a:c0:75:ce:e8:e1:d7:2e:4f:
89:7c:7e:ec:36:20:3a:7d:e0:d6:0f:15:f0:f7:d3:
5f:ef:1b:76:da:5b:fd:53:e7:3e:25:75:b7:9c:c9:
6e:ee:af:30:20:2c:1a:fc:88:58:4b:f1:80:72:bc:
31:25:3e:c8:0e:74:be:56:fc:72:28:67:c2:9d:dd:
14:d0:ca:d7:da:2c:26:e4:19:77:87:02:c7:e9:a7:
38:ae:fd:83:ea:d8:15:fb:01:c9:e7:c0:67:2c:fc:
44:e5:da:f1:a3:8a:c2:85:f8:50:01:bd:54:af:78:
9b:f5:b9:d7:5d:24:ec:1f:08:b7:7f:09:2a:79:13:
e2:2f:c7:f3:0e:3b:d6:a7:e0:92:bf:da:19:61:7b:
e0:eb:53:26:fa:f2:21:58:73:55:c4:87:70:35:72:
72:bb:0c:fe:57:78:83:23:7a:40:63:db:90:88:dc:
7b:4c:a3:dc:5a:d7:9c:a3:aa:e2:63:cd:f8:d0:ce:
5c:e0:e0:40:fa:8b:12:bf:5a:0d:0f:39:85:d4:a8:
e8:d2:e9:c8:e3:16:30:63:d9:6b:c4:dc:ec:b5:73:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:08:67:48:EB:56:76:97:C4:50:FD:A2:81:8A:79:F9:EC:DD:D5:EA
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32332d3233203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.200.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:d3:b5:7a:c4:5f:fd:e0:ef:ab:aa:bf:57:05:c0:11:c6:89:
56:31:f0:6c:5f:fe:ea:ba:62:dc:c0:77:38:59:d9:2b:97:17:
e3:c5:e0:76:da:14:46:39:86:b3:91:e3:37:64:18:da:50:4c:
56:f5:79:aa:ab:e3:6d:96:55:d9:a6:c7:a8:16:8b:13:6b:bf:
78:f5:df:0a:49:fe:2c:48:74:ed:dd:33:6d:1f:1c:f4:bf:9c:
52:9b:60:2e:a6:fa:ca:44:ec:cd:2f:c7:1b:d2:0b:ea:63:40:
4b:9d:68:3e:bc:7d:eb:ac:ea:26:76:fc:ea:b4:ee:78:9e:46:
81:bb:6f:1a:aa:75:0c:bb:a1:cd:b8:8a:8f:bf:d9:9c:29:a3:
9c:f6:df:a1:34:2f:79:7b:89:8f:7c:16:94:12:90:72:16:6a:
51:8a:a9:35:66:41:5f:51:0c:40:e2:bb:9c:e4:13:80:2f:ad:
e7:28:02:e0:b5:b9:9b:37:91:c0:0c:c3:c7:75:1e:8e:ea:f2:
cb:ee:69:1b:2b:d8:3b:50:25:1a:89:90:a9:21:d5:08:e7:36:
e8:f2:60:c5:ae:25:28:c2:0e:c8:af:61:66:97:0e:8c:48:29:
38:a4:02:1d:fb:4d:6a:3e:c4:8b:92:13:e2:0f:f9:90:74:85:
33:93:65:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDXa9odbWOMb388E9BP0cW1QBR8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0MDVDMEM5OTk3ODQxQzhGOUM2ODgwMURFMDUxOEU1
QUM0QzIwOTAeFw0yMzA3MjkyMzExNTJaFw0yNDA3MjcyMzE2NTJaMDMxMTAvBgNV
BAMTKDg4MDg2NzQ4RUI1Njc2OTdDNDUwRkRBMjgxOEE3OUY5RUNEREQ1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczGRaxhpxxNR3oP+kUc6gmc/M
AN2s2qeSkTcKtyN/BhVYoTrAdc7o4dcuT4l8fuw2IDp94NYPFfD301/vG3baW/1T
5z4ldbecyW7urzAgLBr8iFhL8YByvDElPsgOdL5W/HIoZ8Kd3RTQytfaLCbkGXeH
Asfppziu/YPq2BX7AcnnwGcs/ETl2vGjisKF+FABvVSveJv1udddJOwfCLd/CSp5
E+Ivx/MOO9an4JK/2hlhe+DrUyb68iFYc1XEh3A1cnK7DP5XeIMjekBj25CI3HtM
o9xa15yjquJjzfjQzlzg4ED6ixK/Wg0POYXUqOjS6cjjFjBj2WvE3Oy1cy3nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiAhnSOtWdpfEUP2igYp5+ezd1eowHwYDVR0j
BBgwFoAUv0BcDJmXhByPnGiAHeBRjlrEwgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC9CRjQwNUMwQzk5OTc4NDFDOEY5QzY4ODAxREUwNTE4RTVBQzRDMjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNDA1QzBDOTk5Nzg0MUM4
RjlDNjg4MDFERTA1MThFNUFDNEMyMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzMwMmUzMDJlMzIzMDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqgDIMA0GCSqGSIb3DQEBCwUAA4IBAQAu07V6xF/9
4O+rqr9XBcARxolWMfBsX/7qumLcwHc4WdkrlxfjxeB22hRGOYazkeM3ZBjaUExW
9Xmqq+NtllXZpseoFosTa7949d8KSf4sSHTt3TNtHxz0v5xSm2AupvrKROzNL8cb
0gvqY0BLnWg+vH3rrOomdvzqtO54nkaBu28aqnUMu6HNuIqPv9mcKaOc9t+hNC95
e4mPfBaUEpByFmpRiqk1ZkFfUQxA4ruc5BOAL63nKALgtbmbN5HADMPHdR6O6vLL
7mkbK9g7UCUaiZCpIdUI5zbo8mDFriUowg7Ir2Fmlw6MSCk4pAId+01qPsSLkhPi
D/mQdIUzk2WA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org