Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa
File: 3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa (raw, json)
Hash identifier: JCxp39zJ2i5BmEKZn3wFmeJ1/Zup6R430I27yfJ1oY8=
Subject key identifier: 32:59:33:1C:77:2A:FC:44:65:E3:9E:7C:0A:AB:A7:2C:F8:A0:BC:CE
Certificate issuer: /CN=420A61C1F966588AE8CAED095F58CB189089BBBC
Certificate serial: 63E0DFE6A9AEE788D33F16045C82AC8CB443D774
Authority key identifier: 42:0A:61:C1:F9:66:58:8A:E8:CA:ED:09:5F:58:CB:18:90:89:BB:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420A61C1F966588AE8CAED095F58CB189089BBBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa
Signing time: Mon 06 Nov 2023 12:14:29 +0000
ROA not before: Mon 06 Nov 2023 12:09:29 +0000
ROA not after: Mon 04 Nov 2024 12:14:29 +0000
asID: 265079
IP address blocks: 170.233.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e0:df:e6:a9:ae:e7:88:d3:3f:16:04:5c:82:ac:8c:b4:43:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420A61C1F966588AE8CAED095F58CB189089BBBC
Validity
Not Before: Nov 6 12:09:29 2023 GMT
Not After : Nov 4 12:14:29 2024 GMT
Subject: CN=3259331C772AFC4465E39E7C0AABA72CF8A0BCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:02:0d:00:27:ed:14:56:89:4c:6d:79:45:
3c:cd:91:03:0b:98:74:95:32:91:31:04:66:ce:70:
aa:c2:4c:69:a4:2c:67:ff:e9:7c:52:0b:40:87:df:
f3:cd:2d:dc:53:b8:93:1d:d0:6e:42:8e:d1:73:cb:
46:c4:44:2d:8f:51:0a:53:98:8b:1b:14:83:75:77:
2b:a4:d8:aa:ff:98:fa:af:a8:89:d2:4d:37:d3:d1:
67:0b:e3:5f:90:17:96:14:c4:cf:df:8e:33:4b:05:
8a:a2:2c:77:e9:86:ed:6f:79:dd:78:9c:23:fd:f9:
be:e7:b2:46:23:51:53:c5:50:5f:64:df:7a:85:0a:
12:5d:e8:93:e2:1c:d2:9b:4f:27:db:a4:86:e2:92:
65:c6:a8:06:f7:23:d2:77:f7:86:a3:e5:62:b9:5f:
80:5c:43:cc:38:00:1c:6e:07:df:05:79:ef:51:79:
42:da:25:ae:61:b3:23:f1:76:99:6a:80:16:d6:9e:
f6:0f:3a:45:8d:bc:8b:44:a4:e1:fa:44:0b:30:e6:
a1:4a:92:55:39:a7:3e:ae:db:ef:b8:88:a5:e0:9c:
97:06:cb:a3:57:1a:25:1b:b2:2e:fa:22:44:32:58:
c7:ec:f7:b9:c0:83:9a:cc:78:88:45:68:74:19:4a:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:33:1C:77:2A:FC:44:65:E3:9E:7C:0A:AB:A7:2C:F8:A0:BC:CE
X509v3 Authority Key Identifier:
keyid:42:0A:61:C1:F9:66:58:8A:E8:CA:ED:09:5F:58:CB:18:90:89:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/420A61C1F966588AE8CAED095F58CB189089BBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420A61C1F966588AE8CAED095F58CB189089BBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/0/3137302e3233332e3133362e302f32322d3234203d3e20323635303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.136.0/22
Signature Algorithm: sha256WithRSAEncryption
94:9e:08:aa:fd:68:dd:18:0b:f6:c1:0c:07:eb:7c:92:64:ca:
e7:d5:b8:de:ac:d8:0c:26:24:77:bd:1d:4b:f0:74:39:e2:5b:
22:36:48:81:c0:31:6e:a0:73:9d:21:12:67:7a:cb:5a:08:aa:
76:89:3a:f3:29:4e:d9:57:81:78:82:06:83:a3:b2:49:74:e9:
cf:f0:96:f3:3c:07:78:ae:00:7b:a5:2e:96:e5:13:6a:42:d7:
90:c5:d7:d5:55:06:79:f8:15:d0:dc:90:01:a7:9c:8a:72:97:
bd:ec:f1:3a:f5:fa:e2:6d:a9:54:3a:f2:e7:16:20:04:a5:d4:
6c:77:16:6e:b1:ea:55:90:0c:06:d7:8c:b2:aa:1c:a7:e9:b2:
90:25:33:6d:b0:7d:45:c6:dd:ec:f8:1a:74:4d:be:75:fc:a7:
19:90:af:a9:ff:7d:72:1a:c7:f4:75:0f:1f:94:2b:4b:96:c0:
88:3e:c1:1f:14:f9:3f:2e:cc:f9:35:30:20:be:f1:1a:08:5a:
63:ff:f4:9d:d4:2a:e0:23:5e:2b:49:48:a6:2c:19:00:74:6d:
36:bb:d6:e8:78:8a:52:d3:2a:8f:ec:39:1f:05:a7:76:28:46:
de:19:d5:b9:f6:5b:2e:2b:44:0f:f0:cd:ce:70:13:22:9c:f0:
5d:da:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org