Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/3230302e35332e342e302f32322d3332203d3e20323730323633.roa
File: 3230302e35332e342e302f32322d3332203d3e20323730323633.roa (raw, json)
Hash identifier: uySSbpIMpHbQj7A9DrwV644TFkvh5BosFX9uyXWrfso=
Subject key identifier: 5A:8B:16:B4:44:4C:97:B5:69:4A:A8:18:F2:FC:B5:04:33:B5:63:52
Certificate issuer: /CN=17AAC2C76811E8BF20B2E355DAEC5DCB3401F780
Certificate serial: 2C0F7FEA65CA7C365D794337656D4ED99B5C436C
Authority key identifier: 17:AA:C2:C7:68:11:E8:BF:20:B2:E3:55:DA:EC:5D:CB:34:01:F7:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer
Subject info access: rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/3230302e35332e342e302f32322d3332203d3e20323730323633.roa
Signing time: Sat 30 Dec 2023 00:43:06 +0000
ROA not before: Sat 30 Dec 2023 00:38:06 +0000
ROA not after: Sat 28 Dec 2024 00:43:06 +0000
asID: 270263
IP address blocks: 200.53.4.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0f:7f:ea:65:ca:7c:36:5d:79:43:37:65:6d:4e:d9:9b:5c:43:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AAC2C76811E8BF20B2E355DAEC5DCB3401F780
Validity
Not Before: Dec 30 00:38:06 2023 GMT
Not After : Dec 28 00:43:06 2024 GMT
Subject: CN=5A8B16B4444C97B5694AA818F2FCB50433B56352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:4d:d2:75:a2:fb:e1:60:3b:7d:a5:00:fe:
44:32:8f:aa:8a:c5:df:04:5a:68:5f:2c:64:87:b2:
b9:dc:1d:bf:13:cf:39:be:84:30:00:cb:1a:31:d1:
5f:7d:75:b8:41:7a:b8:c8:c3:07:ae:d7:ec:b5:e5:
9d:32:22:d3:2e:b6:8a:d7:26:4b:87:2a:0a:98:f6:
d7:1f:f7:fb:ee:91:5e:48:60:80:6f:55:a0:cd:0a:
a5:fc:2a:d6:8f:9f:1b:1e:0f:0e:39:4c:08:8a:f5:
fb:ea:7f:ca:81:be:28:2c:85:40:13:5e:0c:6d:9e:
1c:4d:f4:07:62:93:5f:37:35:74:7f:e8:00:73:bf:
aa:b0:ef:8d:2c:50:db:cc:4d:eb:7b:4f:0c:19:73:
54:4a:41:c4:37:50:33:a4:30:24:2e:2a:b5:d6:34:
49:c5:e0:1f:d4:a8:95:63:2e:6c:c6:e8:59:71:b0:
75:e6:09:a0:64:66:d2:74:97:7a:ac:0e:6f:91:1b:
e0:a3:e2:1d:b2:ac:d9:0f:ef:e3:fa:bb:43:6c:32:
19:1b:c4:f1:14:2d:f5:e4:ea:56:7b:cf:89:5d:c0:
68:82:6b:e0:85:ab:cb:2f:4b:9c:42:34:23:29:2c:
08:84:8f:98:34:60:13:4a:46:52:d9:14:27:4a:33:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:16:B4:44:4C:97:B5:69:4A:A8:18:F2:FC:B5:04:33:B5:63:52
X509v3 Authority Key Identifier:
keyid:17:AA:C2:C7:68:11:E8:BF:20:B2:E3:55:DA:EC:5D:CB:34:01:F7:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AAC2C76811E8BF20B2E355DAEC5DCB3401F780.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/0/3230302e35332e342e302f32322d3332203d3e20323730323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:26:14:42:01:b2:89:9b:cd:cd:0b:5c:07:2a:18:5a:fe:7a:
8c:9e:be:bb:41:fc:a8:16:f1:8d:19:a2:b9:d4:3b:d8:5d:da:
bb:aa:68:10:38:40:ec:67:6a:f2:16:d7:a0:56:0c:b5:6f:7b:
fc:59:79:29:b1:87:09:5c:98:7c:06:64:73:b5:96:62:f4:ff:
70:51:5a:b4:9b:79:53:b5:6f:9f:67:ee:18:cf:28:b8:16:8d:
21:cd:18:dc:72:79:41:0f:4a:03:da:7e:8c:b1:44:cd:06:a3:
f2:d8:e7:ad:97:f5:43:8f:82:a8:6e:e7:dd:a9:cc:9b:09:29:
72:15:52:92:76:a9:7b:f2:ee:8f:69:d1:f4:7c:1f:2f:48:1a:
b5:96:0c:ba:09:15:d0:48:1e:e1:c7:10:53:dd:54:dc:70:11:
9c:92:c7:b1:1a:3b:fc:6d:35:50:6e:51:87:b0:80:ba:fd:84:
4b:44:90:65:85:d6:bd:d7:86:69:7f:4e:53:2f:b3:2e:36:7d:
8a:c9:c5:10:d2:df:93:da:05:7d:81:08:94:6b:2a:17:ae:88:
61:ba:84:33:a5:7c:ef:85:99:54:01:27:98:b2:72:47:88:26:
dc:6b:b5:2a:e0:52:97:96:e8:d8:5c:d5:c0:e8:95:42:c9:ff:
db:05:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org