Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32332d3233203d3e203532393737.roa
File: 3137302e3233312e342e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier: aS/yWp1Gz1qvWth4lf6JLhHdm/9HweD9ug5fUpEp5lY=
Subject key identifier: 39:99:AB:81:42:16:AF:55:B7:9E:61:7A:E0:63:76:75:D7:7B:99:E9
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 215093E6E2DDDEDAC8D2B15D95C8F7C2519803E7
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32332d3233203d3e203532393737.roa
Signing time: Mon 15 Jan 2024 06:39:58 +0000
ROA not before: Mon 15 Jan 2024 06:34:58 +0000
ROA not after: Mon 13 Jan 2025 06:39:58 +0000
asID: 52977
IP address blocks: 170.231.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:93:e6:e2:dd:de:da:c8:d2:b1:5d:95:c8:f7:c2:51:98:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Jan 15 06:34:58 2024 GMT
Not After : Jan 13 06:39:58 2025 GMT
Subject: CN=3999AB814216AF55B79E617AE0637675D77B99E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:fa:73:a0:11:45:22:0e:59:4b:be:a4:44:
64:2d:fa:c6:ef:9d:0e:d2:12:f4:e0:78:0f:2d:01:
d7:1d:0d:4d:12:a8:5f:a3:f4:be:36:3c:3d:a6:53:
8d:84:33:59:b0:df:90:ad:a9:ea:85:a4:80:84:c4:
7c:9a:9e:07:2d:53:f5:a7:0f:d1:78:c8:ee:22:f4:
93:87:72:b2:5e:49:a4:78:5d:2a:3a:bd:9b:fc:5d:
9a:e3:0a:41:a7:8c:18:31:74:17:01:e2:67:79:ca:
88:c0:20:5a:d1:c5:d7:f5:24:2f:78:ed:5e:be:ff:
2e:6b:d9:78:29:b8:71:31:92:8f:bb:86:72:86:80:
fb:f8:7a:6f:ad:0e:06:ab:ec:ca:39:1e:c3:43:f8:
7e:d6:92:85:0f:ad:e8:8a:71:c9:a3:4e:60:0c:b3:
7a:0d:c9:d6:88:c9:16:b3:f7:0e:05:09:9d:3b:1b:
b3:d9:37:77:c3:c5:17:5b:2a:3f:07:b9:1c:10:8b:
ae:8b:f8:d7:ef:a2:7d:2e:c7:d9:00:a1:54:de:e6:
19:99:69:bb:01:4c:b9:c3:f0:a5:9d:67:5b:92:ed:
36:eb:7c:88:1d:c8:7b:e5:53:03:18:99:26:ca:e6:
b1:20:8f:d2:39:6b:82:02:3a:e4:44:cb:95:f4:13:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:99:AB:81:42:16:AF:55:B7:9E:61:7A:E0:63:76:75:D7:7B:99:E9
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32332d3233203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.4.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d0:b7:8e:d4:42:9e:a5:a7:5b:02:35:fa:d1:42:8e:8c:98:
41:37:d0:8f:35:23:7b:d0:41:40:c7:20:fd:a3:6b:71:07:d3:
79:fb:2d:38:c3:bf:39:55:8a:ac:8a:e3:d2:41:73:00:81:1c:
58:f2:8d:c2:a7:97:f3:77:e2:a5:36:6c:68:a8:b5:ac:42:54:
9f:ae:42:72:d9:d9:cb:66:99:e1:14:11:0e:93:da:74:17:e8:
55:d6:13:71:5d:d8:ba:73:cf:af:f2:97:61:fd:25:32:a8:1e:
e9:5a:64:b4:e4:69:e2:cf:da:e2:74:1c:c4:5f:42:4d:33:82:
ac:e5:b2:fb:57:e7:07:b6:fe:2b:3f:1e:77:f0:54:1c:d6:26:
b2:8b:fe:f7:36:25:5f:f6:a3:48:78:e5:a2:c5:31:9e:7e:9c:
f6:a5:0a:94:1c:f9:c4:e6:84:2e:8b:5f:41:f6:d0:79:57:c2:
8c:1b:4e:a6:5a:5b:00:d9:41:e7:2e:8e:86:e8:8a:33:ce:e4:
d3:26:b8:51:cc:f3:36:52:5b:a7:13:79:0f:ba:58:0b:a2:1b:
1e:32:04:ed:3b:5d:bb:af:4c:11:77:cb:d0:95:a3:c4:28:df:
6b:bb:0d:23:6b:6f:fa:37:36:3e:0d:44:58:7d:6d:45:d3:54:
d9:d4:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org