Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
File: 3134332e3235352e39362e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier: qXi44epdzjJooWgRfjeLq+5cL0Sdgi1UsJVBYb97SaQ=
Subject key identifier: 21:CB:D6:C9:BD:D4:AB:87:6F:BF:E6:42:FF:4C:E8:7C:DC:52:5B:3C
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 4B6472A3FB261A02B534B2F762E9C14829FCA1C1
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
Signing time: Fri 12 Jan 2024 00:14:49 +0000
ROA not before: Fri 12 Jan 2024 00:09:49 +0000
ROA not after: Fri 10 Jan 2025 00:14:49 +0000
asID: 52977
IP address blocks: 143.255.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:64:72:a3:fb:26:1a:02:b5:34:b2:f7:62:e9:c1:48:29:fc:a1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Jan 12 00:09:49 2024 GMT
Not After : Jan 10 00:14:49 2025 GMT
Subject: CN=21CBD6C9BDD4AB876FBFE642FF4CE87CDC525B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:eb:c0:a2:80:ac:d5:cf:d3:e7:e2:d9:ad:
50:1e:e1:89:a0:ca:c0:ce:de:52:01:b0:c1:b8:df:
6a:82:6b:fe:bd:77:c9:b4:d9:34:85:c8:cd:16:35:
e5:65:13:ac:e8:ec:c8:48:0b:d8:d7:94:9e:aa:d7:
4f:43:b5:34:2d:dd:2f:e1:4a:8b:63:f6:d8:c3:c5:
26:4b:39:1a:be:71:a8:c3:34:63:4d:53:72:54:7f:
19:75:f5:fd:63:b9:f9:e4:6c:c5:0a:42:d5:a1:fa:
8a:d0:ea:35:51:cd:b3:1b:f5:06:2a:d6:8e:22:4b:
6f:85:d5:fc:c7:cd:b9:c8:03:2b:c1:26:a3:cc:17:
79:78:78:0f:e9:f2:bd:db:25:54:5b:7d:0b:ef:27:
db:8c:43:14:98:f3:4e:36:79:b9:37:f4:9f:9d:4e:
e9:5a:98:69:fb:69:77:fa:60:9f:1c:7c:5c:55:c8:
18:65:e3:27:16:fb:ba:83:b7:a8:23:39:27:b3:2d:
1b:93:a4:27:6c:57:ed:38:b6:3f:77:db:09:7a:ff:
05:67:f0:e9:ef:eb:7d:45:78:93:f0:e8:fb:d1:72:
01:c6:3f:7b:e5:7c:f8:e6:ed:3c:ee:8c:60:93:95:
4a:67:9c:f9:8e:29:b9:5c:7e:29:6c:59:a2:14:ff:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CB:D6:C9:BD:D4:AB:87:6F:BF:E6:42:FF:4C:E8:7C:DC:52:5B:3C
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:ec:77:fb:7b:d9:c9:08:93:24:c5:c3:6a:23:f2:6b:39:71:
c5:03:44:36:16:c7:15:c6:82:17:f3:2d:46:1b:8e:7e:1a:0a:
c4:91:98:41:b9:02:2d:e8:98:96:b0:82:c9:34:ce:1b:65:ad:
41:3e:29:37:a4:df:0d:6c:41:cd:23:d9:4f:01:4d:35:c1:74:
9c:53:f0:67:5a:38:74:7a:da:7e:2f:c6:48:33:c6:36:f0:3d:
3e:ea:02:28:81:51:da:41:9d:99:2f:02:d6:41:78:4b:1b:24:
d7:62:8a:6b:46:16:df:5e:b0:35:f8:7e:c4:96:55:86:2f:c2:
d1:ff:39:5f:ab:0a:b0:b8:7e:22:d6:d5:02:87:96:29:0b:27:
28:48:e8:0a:5e:91:eb:39:1d:44:dd:11:28:4d:c8:6a:7a:d6:
7a:bf:ff:07:47:24:4b:fb:a6:82:b7:7d:a2:d3:96:c9:c0:67:
17:4d:06:58:4c:17:2c:9e:b6:59:1e:f3:f9:e4:0b:3f:15:e2:
db:ed:05:e7:7e:17:86:3b:40:51:e1:c6:d5:a4:23:9c:5e:d2:
92:96:8e:1c:64:a8:b8:01:9c:9f:3e:8a:b1:14:19:7b:d4:8e:
7d:ac:72:c5:d6:2f:04:5d:5c:60:2d:59:2e:79:a7:c1:82:40:
82:c8:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org