Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32332d3233203d3e20323633343237.roa
File: 3137302e302e3230322e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier: 9aBq6o4woLf1ph8mi7cLyhtnGZTQC/Wj1PTjA7hQlVs=
Subject key identifier: 75:55:F9:00:B7:97:B2:6F:65:45:3B:EB:CB:C1:74:66:07:ED:E7:6A
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 6494FA2C5A948876D097C367587D51F0E6907786
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32332d3233203d3e20323633343237.roa
Signing time: Fri 09 Jun 2023 22:05:46 +0000
ROA not before: Fri 09 Jun 2023 22:00:46 +0000
ROA not after: Fri 07 Jun 2024 22:05:46 +0000
asID: 263427
IP address blocks: 170.0.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:94:fa:2c:5a:94:88:76:d0:97:c3:67:58:7d:51:f0:e6:90:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: Jun 9 22:00:46 2023 GMT
Not After : Jun 7 22:05:46 2024 GMT
Subject: CN=7555F900B797B26F65453BEBCBC1746607EDE76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:1b:a9:9d:47:73:75:96:f0:6e:dc:60:5d:
80:4f:7e:4b:5a:1e:dd:db:46:62:3a:15:81:44:cc:
eb:b1:9c:7f:05:40:67:b9:18:f8:e5:32:c0:42:42:
99:f2:14:86:c1:e7:63:70:70:88:e9:f0:f3:bb:5e:
1b:aa:a3:3c:cb:87:7d:b6:cc:23:ca:6c:f0:bd:1d:
a5:1a:b9:aa:bd:68:8f:46:c6:5f:8f:34:6f:04:01:
6a:fa:df:be:a6:76:4c:4b:2c:ca:bc:9e:71:ea:87:
2d:c1:40:49:7c:30:a2:94:7e:68:61:ea:05:58:d2:
db:82:49:c7:15:db:cb:9b:4e:33:1a:5f:29:e9:a1:
40:22:0d:74:f4:25:9f:5c:4a:2b:29:e3:54:43:7a:
7c:17:ca:07:04:bc:07:8e:ce:3b:c3:eb:39:ab:07:
8a:25:ba:c6:25:a2:4d:b1:d4:74:8c:fd:1f:79:60:
cf:ed:cc:05:71:85:00:6f:f1:e7:44:9d:60:a6:2a:
a8:d7:d2:74:a1:83:ed:cc:02:79:72:36:e3:16:55:
87:df:55:3b:3b:23:91:76:eb:82:5c:d1:a0:c0:ad:
39:e4:45:01:13:5c:e6:21:c0:c5:63:be:63:bc:06:
62:6e:5a:c8:87:02:b7:7b:56:9b:53:29:a9:81:36:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:F9:00:B7:97:B2:6F:65:45:3B:EB:CB:C1:74:66:07:ED:E7:6A
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230322e302f32332d3233203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:3f:b2:62:e9:02:e9:3c:16:fc:2d:0d:6c:49:25:8f:e3:da:
02:b1:fa:0a:11:3d:c3:33:b3:d4:c7:e5:0a:16:c6:0b:94:4c:
e0:65:ff:34:20:97:b2:b1:95:46:e9:0d:7e:de:7e:9f:c2:46:
e5:12:f7:36:fc:80:ec:28:9a:23:b5:33:35:e3:eb:cd:f0:4a:
78:ca:35:6f:18:c0:46:56:f9:9e:fb:60:b3:78:cf:6d:5f:8b:
ff:69:db:61:69:de:5a:e0:12:31:6e:ea:c0:b7:6c:07:91:09:
11:df:26:73:65:1e:89:a9:5a:22:7f:9c:70:06:a2:f5:55:72:
ba:17:c6:4a:a6:c9:6a:2b:82:10:d1:19:10:72:4c:f9:db:75:
a1:43:cd:6a:6a:2e:cb:94:2e:60:87:89:ae:36:08:b1:50:5f:
e0:54:65:5c:83:61:88:fb:6f:f4:64:1f:53:f0:2a:d2:42:6c:
ec:eb:46:95:c1:b1:a3:c5:15:4a:1b:4b:f5:db:fe:ed:77:a8:
9a:2d:55:d9:98:d0:37:d7:26:e1:e8:cb:1c:8c:ea:69:7c:9f:
7c:17:58:8d:b8:a6:76:67:70:c7:98:e7:0c:48:c1:97:41:ad:
74:4f:45:00:cf:6b:6c:88:c9:5c:a8:52:1c:28:0b:0b:89:9a:
5e:a9:2d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:12 2025 by rpki-client