Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32322d3232203d3e203532393737.roa
File: 3137302e3233312e342e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier: gpWkTosDYae9q2gQRy2T6aheCJ1oHQXhILmI8HNKiUs=
Subject key identifier: 5D:F9:F9:A9:C1:50:97:DD:2F:10:6C:A4:D1:A5:D7:2E:AF:5F:23:3F
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 307489F2EE9211D1AD67688FCA96B51FD8AE1415
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32322d3232203d3e203532393737.roa
Signing time: Mon 15 Jan 2024 06:39:45 +0000
ROA not before: Mon 15 Jan 2024 06:34:45 +0000
ROA not after: Mon 13 Jan 2025 06:39:45 +0000
asID: 52977
IP address blocks: 170.231.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:74:89:f2:ee:92:11:d1:ad:67:68:8f:ca:96:b5:1f:d8:ae:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Jan 15 06:34:45 2024 GMT
Not After : Jan 13 06:39:45 2025 GMT
Subject: CN=5DF9F9A9C15097DD2F106CA4D1A5D72EAF5F233F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:21:52:36:17:52:af:81:b3:99:e9:ba:fe:
ef:e8:e6:89:23:36:9f:4e:c7:fd:4f:bd:9c:1f:b9:
ca:f4:b8:8e:81:2d:54:4e:a7:ba:85:8d:de:ed:a7:
32:d0:91:51:67:f6:5a:82:09:6a:24:fe:32:cd:54:
14:c0:f0:d3:4e:9a:80:66:e3:53:92:f8:1b:43:7a:
e2:70:7d:ef:cd:d9:4c:c0:3c:78:f1:4f:ed:99:17:
19:9d:f1:11:b6:b4:41:2d:66:db:63:e3:20:c8:1f:
2d:9c:fa:b3:0b:81:a6:65:c6:6c:56:8b:aa:02:e0:
75:0f:96:28:99:cb:36:9a:d4:a0:37:5b:e9:b7:8f:
81:dd:1a:9f:a5:06:27:bf:0a:b8:76:4d:db:c8:70:
49:ed:c9:aa:5f:3c:c2:8b:38:75:a7:7e:11:c2:70:
f9:a1:a9:56:8d:55:30:91:66:00:0e:af:4d:a6:7a:
2e:c4:99:c1:80:74:50:e4:fe:94:10:8e:dd:7a:d9:
af:73:e0:b4:53:bd:e7:8a:07:63:13:86:16:57:17:
c3:ae:b8:27:bb:56:3f:10:cd:d6:d1:33:98:57:9a:
63:91:52:11:a6:b0:23:b4:6a:e2:2a:fd:7b:5f:d5:
d2:f6:33:5c:34:7e:73:56:fa:f2:d3:fc:4e:b4:46:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:F9:A9:C1:50:97:DD:2F:10:6C:A4:D1:A5:D7:2E:AF:5F:23:3F
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32322d3232203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.4.0/22
Signature Algorithm: sha256WithRSAEncryption
73:5e:85:6c:14:d4:f8:a3:1a:3c:83:6c:e1:85:9f:86:dd:00:
93:4d:e1:5d:29:6e:21:dd:fb:0e:85:dd:63:96:57:2b:59:c6:
d4:d2:07:8c:f8:d0:bd:11:6d:48:a3:3a:17:c4:25:5a:f3:2f:
ba:87:54:e2:b6:4e:a8:a0:67:d9:86:4d:52:2f:1e:1d:60:4e:
a0:e7:3a:07:cc:e7:60:cb:22:b9:13:13:9b:0b:d2:92:b0:e0:
62:3a:f1:5d:23:df:4b:ff:f8:4d:08:40:7d:95:eb:26:cc:fe:
1b:be:dc:4a:a9:27:39:5d:77:bb:ee:46:eb:dd:54:78:61:00:
e9:7c:eb:22:c1:43:44:ba:83:60:ab:96:56:17:9c:3f:7a:fd:
b8:a8:fb:ec:61:c1:d4:9f:c1:f7:7a:5d:ea:c3:5e:ed:0b:0e:
7b:f5:05:28:81:9f:2b:9e:21:e2:84:a4:6b:d8:94:0e:b1:ab:
8f:8c:3d:ac:56:b7:d3:14:7d:49:82:b6:35:a6:92:35:67:65:
29:20:e1:47:d8:91:f6:ca:af:2f:10:d0:ea:cb:01:5c:fa:8b:
1f:18:fd:78:86:c9:bb:bd:87:ee:dd:86:0d:c5:e4:af:fb:b2:
35:c8:71:ba:30:2a:0a:97:d3:f0:e2:25:18:18:28:dc:dd:2c:
1b:ca:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org