Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230312e302f32342d3234203d3e20323633343237.roa
File: 3137302e302e3230312e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier: qaZ412RJ1r7ncnEIIhz8HjrlBMsHqJ2gQAIJPkKOa1M=
Subject key identifier: 2C:AD:69:C4:EC:68:39:F6:B0:11:35:F5:DF:53:7C:29:3C:1C:25:8E
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 3D860F847ACA74F4759F209891B8B7937212BEBB
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230312e302f32342d3234203d3e20323633343237.roa
Signing time: Fri 09 Jun 2023 22:04:59 +0000
ROA not before: Fri 09 Jun 2023 21:59:59 +0000
ROA not after: Fri 07 Jun 2024 22:04:59 +0000
asID: 263427
IP address blocks: 170.0.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:86:0f:84:7a:ca:74:f4:75:9f:20:98:91:b8:b7:93:72:12:be:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: Jun 9 21:59:59 2023 GMT
Not After : Jun 7 22:04:59 2024 GMT
Subject: CN=2CAD69C4EC6839F6B01135F5DF537C293C1C258E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:a1:81:25:d7:04:04:37:b3:ae:12:99:3e:
9a:a3:b2:3d:36:a2:f3:82:9f:60:66:0c:1f:5a:8c:
b8:9c:1c:f4:85:a5:8d:0d:26:29:df:f9:cd:1b:f7:
14:99:4f:33:a0:86:67:f7:aa:96:6d:1b:f7:57:a4:
f6:06:44:6b:08:bc:cc:20:57:48:8d:f2:02:ef:8f:
85:6c:b4:6e:c0:99:a1:eb:72:b4:93:3e:b5:72:f4:
60:b2:fa:39:c3:3f:eb:08:18:81:fc:06:8c:78:11:
ec:2b:48:a1:43:d8:6a:40:95:33:aa:0a:28:cc:b5:
2d:64:5e:fe:ca:ca:ff:67:5a:da:8f:9e:82:c3:f5:
f3:f8:ac:37:0d:93:e9:cc:6d:9d:06:69:00:5e:86:
88:c7:06:3e:ec:28:2c:c4:3c:86:18:0d:b0:0c:8c:
7c:57:11:cb:1e:69:83:40:58:08:ce:e0:71:8c:5d:
1b:41:3a:5c:cc:72:31:f6:cb:b3:c4:26:a9:ce:e6:
ba:aa:2f:24:63:08:16:55:a1:d4:0e:8c:47:58:a7:
ae:c6:a3:f4:95:7e:7f:60:cb:56:45:08:07:41:e2:
db:cb:ff:24:31:ae:5e:8e:04:dc:97:21:57:7b:55:
16:23:bf:31:37:8a:50:fb:a6:36:c8:e1:a7:93:b0:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:69:C4:EC:68:39:F6:B0:11:35:F5:DF:53:7C:29:3C:1C:25:8E
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230312e302f32342d3234203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d7:d8:f6:07:b1:03:fb:9b:5e:9f:ed:99:88:bb:17:e3:4d:
6d:c5:2c:81:d9:87:43:35:40:ed:da:de:51:fa:fb:76:e3:d8:
0c:1b:20:92:12:3d:80:bd:ff:f0:7c:77:25:be:fb:f7:03:cc:
fa:e2:39:d7:2a:6e:a2:52:63:78:be:fe:01:69:78:d1:35:74:
ae:ec:59:17:28:7b:dd:ba:48:bf:1f:24:a4:f9:f9:a4:f2:89:
da:3a:54:c6:0b:41:1c:95:e3:4c:73:27:04:9c:cc:db:5d:02:
71:80:1f:38:91:ac:93:5a:3b:f8:28:9f:d4:c2:b4:ad:7f:cf:
47:44:9e:10:43:33:9d:71:49:10:a6:81:6b:96:57:74:0f:a7:
2d:a8:f4:32:8b:0a:bf:a0:38:82:6e:c0:81:2e:cd:82:db:28:
90:d3:a5:46:28:64:91:52:09:37:3a:b4:01:fd:1a:44:29:ad:
62:86:24:a8:db:40:29:38:46:1b:e2:13:a6:a7:1c:26:e7:02:
65:13:ab:ce:d3:3f:40:27:f1:c3:fd:d1:66:b5:5a:a0:8e:31:
89:e5:40:43:28:61:49:2d:e9:a7:78:5d:8c:13:dc:78:ae:5c:
b9:47:2d:e8:d3:c9:7a:28:52:e0:e1:96:4a:44:32:e1:00:3f:
c7:30:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:15 2025 by rpki-client