Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32342d3234203d3e20323633343237.roa
File: 3137302e302e3230302e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier: eL80EJVOgUOYTs41YGhr8RWrv7SYGvSCWcAXwHlfeiQ=
Subject key identifier: 5E:F9:F4:E7:6E:A2:9A:14:47:48:4F:2D:1B:19:32:48:FD:72:86:3C
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 2C3747DDCE2CDFA19425F0957FADDDD960881446
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32342d3234203d3e20323633343237.roa
Signing time: Fri 09 Jun 2023 22:05:04 +0000
ROA not before: Fri 09 Jun 2023 22:00:04 +0000
ROA not after: Fri 07 Jun 2024 22:05:04 +0000
asID: 263427
IP address blocks: 170.0.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:37:47:dd:ce:2c:df:a1:94:25:f0:95:7f:ad:dd:d9:60:88:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: Jun 9 22:00:04 2023 GMT
Not After : Jun 7 22:05:04 2024 GMT
Subject: CN=5EF9F4E76EA29A1447484F2D1B193248FD72863C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:a2:b1:ce:6a:06:2a:51:9c:29:a4:b4:81:
17:e1:9b:1c:3c:44:0f:07:57:25:b4:da:3b:b8:f9:
b5:44:3a:c0:b0:22:2e:1f:a5:96:8b:f0:2f:c2:bc:
40:1b:d4:7d:0c:cf:3c:6d:3f:53:37:83:ad:be:b9:
45:0c:b6:58:47:19:ab:3a:c6:ba:b8:51:db:e9:fe:
2c:12:cf:93:d3:24:94:c7:3b:13:9d:45:78:22:e9:
f9:d2:00:4a:70:47:da:7b:9a:d0:d4:bf:39:5f:30:
ab:75:7c:66:4d:5a:fb:f7:5b:09:b8:3b:31:e7:39:
df:14:0b:d0:fd:e7:db:df:96:4f:4f:fb:96:bc:5a:
d0:7f:28:ff:2b:35:0e:7e:3d:a0:e6:c5:2e:e5:19:
e6:eb:2f:e2:b2:45:a9:fb:20:a6:d8:d5:be:f5:9c:
d8:21:bf:40:c5:2b:37:5f:93:ea:c8:06:8a:4a:17:
9f:70:ad:a8:db:8c:63:7d:a5:11:7b:01:1a:14:02:
ad:e8:25:e7:d5:2c:11:15:54:a0:44:89:e9:1f:4d:
cf:c2:18:4b:ec:95:d5:de:e0:42:fa:52:16:66:ae:
5b:20:bc:12:1b:c4:95:84:88:43:44:29:74:4f:85:
d2:9c:d2:7a:4e:0f:c8:00:de:a7:3d:c1:83:d1:80:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:F4:E7:6E:A2:9A:14:47:48:4F:2D:1B:19:32:48:FD:72:86:3C
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230302e302f32342d3234203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.200.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0e:65:29:c0:81:29:97:4d:c9:a6:f3:62:ed:b9:03:cf:0c:
4a:0f:ed:8d:ee:fb:04:d8:77:bb:9b:69:9c:44:47:e3:ae:09:
c5:d5:e7:fd:b8:50:d7:e6:2b:88:db:f2:38:49:cc:90:e5:ca:
60:f6:b4:73:70:8a:61:ee:7c:1d:0c:fe:45:22:48:31:a1:04:
c7:fd:7c:e5:a2:e3:70:72:1f:9b:ec:74:4a:b5:75:84:67:f2:
3b:e8:0b:cc:06:b1:b1:e7:9b:15:e8:94:ab:9a:42:7c:98:58:
fc:c1:b5:7a:58:1f:9b:f9:91:c7:a9:59:09:ea:a4:72:d7:f7:
59:e9:92:77:9e:0b:55:e8:bb:e4:fd:09:59:98:0c:05:0f:9a:
8d:a4:10:22:7f:fe:d6:a3:09:c9:b7:5e:e3:39:fe:00:ad:5a:
f4:f6:a5:4c:b7:ab:4f:c9:aa:39:8f:30:3e:8f:88:a2:61:8d:
95:35:e6:40:fc:25:13:10:45:fa:3c:4a:30:83:f6:47:1c:48:
c6:10:e1:77:49:2e:ce:2a:2a:69:f6:cf:79:7f:d9:73:88:78:
fe:e3:50:32:80:19:35:72:01:ac:1a:fc:4f:c6:05:e3:58:6c:
f3:9d:d3:17:b5:37:52:9b:fb:23:d1:21:9c:c1:7a:f7:27:6a:
6f:bd:26:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULDdH3c4s36GUJfCVf63d2WCIFEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0MDVDMEM5OTk3ODQxQzhGOUM2ODgwMURFMDUxOEU1
QUM0QzIwOTAeFw0yMzA2MDkyMjAwMDRaFw0yNDA2MDcyMjA1MDRaMDMxMTAvBgNV
BAMTKDVFRjlGNEU3NkVBMjlBMTQ0NzQ4NEYyRDFCMTkzMjQ4RkQ3Mjg2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2b6KxzmoGKlGcKaS0gRfhmxw8
RA8HVyW02ju4+bVEOsCwIi4fpZaL8C/CvEAb1H0MzzxtP1M3g62+uUUMtlhHGas6
xrq4Udvp/iwSz5PTJJTHOxOdRXgi6fnSAEpwR9p7mtDUvzlfMKt1fGZNWvv3Wwm4
OzHnOd8UC9D959vflk9P+5a8WtB/KP8rNQ5+PaDmxS7lGebrL+KyRan7IKbY1b71
nNghv0DFKzdfk+rIBopKF59wrajbjGN9pRF7ARoUAq3oJefVLBEVVKBEiekfTc/C
GEvsldXe4EL6UhZmrlsgvBIbxJWEiENEKXRPhdKc0npOD8gA3qc9wYPRgDczAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXvn0526imhRHSE8tGxkySP1yhjwwHwYDVR0j
BBgwFoAUv0BcDJmXhByPnGiAHeBRjlrEwgkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC9CRjQwNUMwQzk5OTc4NDFDOEY5QzY4ODAxREUwNTE4RTVBQzRDMjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGNDA1QzBDOTk5Nzg0MUM4
RjlDNjg4MDFERTA1MThFNUFDNEMyMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzMwMmUzMDJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqgDIMA0GCSqGSIb3DQEBCwUAA4IBAQAoDmUpwIEp
l03JpvNi7bkDzwxKD+2N7vsE2He7m2mcREfjrgnF1ef9uFDX5iuI2/I4ScyQ5cpg
9rRzcIph7nwdDP5FIkgxoQTH/XzlouNwch+b7HRKtXWEZ/I76AvMBrGx55sV6JSr
mkJ8mFj8wbV6WB+b+ZHHqVkJ6qRy1/dZ6ZJ3ngtV6Lvk/QlZmAwFD5qNpBAif/7W
ownJt17jOf4ArVr09qVMt6tPyao5jzA+j4iiYY2VNeZA/CUTEEX6PEowg/ZHHEjG
EOF3SS7OKipp9s95f9lziHj+41AygBk1cgGsGvxPxgXjWGzzndMXtTdSm/sj0SGc
wXr3J2pvvSbo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org