Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230332e302f32342d3234203d3e20323633343237.roa
File: 3137302e302e3230332e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier: BZw2vhB0RCI9hTiTQG+0D3AaRI6GVPPukyUOKkQOFes=
Subject key identifier: 7F:89:9C:BA:62:ED:09:7A:20:8C:BA:1E:2D:B0:79:F7:9D:08:C5:86
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 61C5B3E9E2CC167917271CBF8F1EBB0EB1E09004
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230332e302f32342d3234203d3e20323633343237.roa
Signing time: Fri 09 Jun 2023 22:04:45 +0000
ROA not before: Fri 09 Jun 2023 21:59:45 +0000
ROA not after: Fri 07 Jun 2024 22:04:45 +0000
asID: 263427
IP address blocks: 170.0.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c5:b3:e9:e2:cc:16:79:17:27:1c:bf:8f:1e:bb:0e:b1:e0:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: Jun 9 21:59:45 2023 GMT
Not After : Jun 7 22:04:45 2024 GMT
Subject: CN=7F899CBA62ED097A208CBA1E2DB079F79D08C586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:84:d8:56:30:e1:fc:7d:8c:5e:b7:8b:ef:34:
8d:f5:5b:fb:4c:68:fa:6d:cf:f8:84:e0:7f:1c:d4:
2f:f2:c5:d4:59:10:21:d0:a4:af:4d:bd:44:55:ce:
95:d2:be:6e:b2:65:d5:11:66:c3:bd:16:e6:49:f8:
f7:5d:cf:d8:4a:76:b4:1a:cd:d3:4a:15:44:88:8f:
90:6f:64:9a:28:ac:f8:68:b5:19:43:b7:96:cb:b3:
bc:d2:cf:44:8f:96:5b:1d:74:93:49:07:7b:11:61:
29:47:8e:32:4c:3e:ef:04:e8:61:fc:00:93:a6:ad:
bc:31:83:0c:ec:da:b4:02:4f:a6:d4:8e:81:9e:64:
19:0a:af:4e:7c:4a:65:42:d7:2c:d5:9e:d4:f5:aa:
6d:2c:de:1a:ce:30:5f:1e:ba:2e:0b:aa:02:91:d2:
90:80:a3:83:d1:26:41:52:04:09:52:f9:b7:55:d6:
df:23:68:e3:b3:dd:42:29:ef:94:fa:d4:12:3d:be:
c9:37:f5:b8:37:ff:37:be:c0:5f:1f:3a:6f:c0:28:
bd:e2:eb:6f:bc:db:6e:23:6b:52:32:1e:78:8d:99:
de:69:80:63:bb:7e:d2:7d:e5:11:f3:8e:81:a2:ce:
6e:11:f6:18:bf:2b:68:8e:22:3b:4b:db:a7:15:28:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:9C:BA:62:ED:09:7A:20:8C:BA:1E:2D:B0:79:F7:9D:08:C5:86
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137302e302e3230332e302f32342d3234203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c2:88:7a:ae:6e:3a:57:9a:1a:06:57:ca:e5:41:0f:66:48:
4d:7c:7f:69:55:a9:da:83:78:0e:06:e8:46:cd:62:fc:48:51:
53:53:f3:3e:fe:82:19:3f:0c:c6:7e:d1:43:dd:f9:8d:cf:26:
0d:88:81:60:bd:f9:03:30:5a:b7:db:54:88:c1:f5:e7:db:0b:
ba:bd:4d:03:23:c9:4c:b4:e7:06:68:8a:03:48:42:ae:87:61:
70:e0:11:92:51:4a:72:34:cf:b4:56:11:60:b8:dd:a5:37:d1:
81:3c:89:90:c4:33:fd:14:77:64:c3:f7:48:7a:57:11:3c:43:
3c:1f:d3:48:af:e5:ff:12:ef:ef:86:d7:4f:2a:4d:f4:c3:9e:
06:cb:04:56:b0:cf:b9:d9:fd:ec:01:5b:1e:32:75:67:fe:2d:
cd:de:35:a8:42:45:19:71:ea:30:d1:c1:bc:d9:31:7b:32:62:
f6:f3:3c:08:ef:39:8b:2b:30:06:4d:b0:7c:ca:f4:8b:d1:cb:
d1:86:b3:d4:e9:fe:73:80:8b:7f:ed:c6:8d:cc:18:0e:47:69:
ea:52:38:90:c0:fd:22:cf:a1:df:98:62:2c:48:55:ff:b8:d9:
96:0e:43:ed:22:1e:ab:4a:1b:13:1e:58:56:85:0d:48:bf:e3:
7f:a3:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:14 2025 by rpki-client