Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
File: 3137302e3233312e362e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier: p4i8X5/g03gdLUXRxiLG8fxjx8hULyds+PiqtkqvOhc=
Subject key identifier: 5F:F4:0C:C0:10:CA:48:C0:D6:A9:0A:C2:77:43:46:37:91:DE:0B:A9
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 4C81C432C2F516824FAA8924D02C221E2816C231
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
Signing time: Mon 15 Jan 2024 06:39:58 +0000
ROA not before: Mon 15 Jan 2024 06:34:58 +0000
ROA not after: Mon 13 Jan 2025 06:39:58 +0000
asID: 52977
IP address blocks: 170.231.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:81:c4:32:c2:f5:16:82:4f:aa:89:24:d0:2c:22:1e:28:16:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Jan 15 06:34:58 2024 GMT
Not After : Jan 13 06:39:58 2025 GMT
Subject: CN=5FF40CC010CA48C0D6A90AC27743463791DE0BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:69:a1:0b:4c:f7:0f:9a:f1:00:cc:f1:c0:
5c:f6:63:76:e4:e4:86:04:65:1f:17:98:fc:d3:03:
2f:9b:7f:e4:37:d9:33:9e:ba:77:3e:e0:47:fd:c9:
cc:66:0e:90:6b:dc:0d:f3:c7:c1:38:79:86:a2:4e:
cd:3a:9f:0e:3e:40:00:f5:53:7e:7b:f0:b8:26:ab:
bc:6a:f3:f9:2a:53:f5:6a:8d:b5:38:ba:d2:f2:76:
bf:a7:44:27:4b:ef:e2:e6:88:fe:42:88:c9:93:2e:
f6:7d:49:2e:5f:10:e5:59:e3:c6:fd:29:87:98:68:
dc:c8:c8:da:dd:7f:30:df:90:2b:9a:cc:a2:17:bf:
d7:5d:64:7a:9c:c0:7a:dd:7b:58:d1:07:c1:62:7e:
2e:26:31:a8:f0:c7:75:6f:55:3a:87:2e:20:27:54:
0b:2e:ff:1d:8c:9d:52:22:a6:f2:29:4e:27:b5:17:
ad:38:f2:9d:3e:c5:70:5f:3f:7d:8b:2b:1a:bd:92:
cf:f0:be:b5:40:a3:9e:15:3e:b5:0d:39:43:37:6b:
60:3c:8b:fe:ed:45:e7:7a:a6:65:55:76:d1:8f:29:
d9:d9:36:57:04:70:07:a0:e9:98:37:9e:df:9d:56:
9a:81:29:ec:be:05:a6:b5:ab:8c:00:0b:04:4b:c0:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:0C:C0:10:CA:48:C0:D6:A9:0A:C2:77:43:46:37:91:DE:0B:A9
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.6.0/23
Signature Algorithm: sha256WithRSAEncryption
80:3a:d3:04:64:b3:78:39:c5:dc:2c:a2:8f:ed:ea:ba:80:69:
e1:13:7e:eb:bb:06:28:05:25:ea:04:9f:85:45:df:f0:87:e3:
dd:26:cf:b8:36:78:80:8d:12:0e:60:b3:7a:31:35:bc:09:f7:
d8:a6:ff:95:2c:c3:2a:26:fc:bb:5b:55:08:2b:03:17:b1:a6:
5d:0a:f3:e6:c7:63:8a:02:88:0a:1d:a4:77:37:c9:39:51:75:
08:ad:e0:3e:6f:83:61:f6:6b:e5:38:c7:91:aa:dd:40:39:1f:
d9:74:5e:04:72:04:d4:bc:25:03:48:a2:5c:b7:81:cc:cf:bc:
f9:1e:86:26:3f:8e:db:a0:40:ce:3c:f3:8a:3e:c0:4a:c1:9d:
04:83:12:c9:05:3b:53:2e:e8:98:8d:33:a9:0a:fe:de:aa:73:
94:fb:f9:b1:ec:24:7e:ae:68:94:47:43:22:64:37:74:62:c3:
ad:2c:bd:c9:d1:43:08:e7:74:47:44:68:c0:26:e2:a2:04:26:
ce:64:e6:f6:e6:fa:0f:43:e9:84:1b:82:f9:27:d8:bc:0f:93:
de:29:e4:1e:23:0e:3f:09:2f:ff:02:ae:f6:47:10:ec:55:b0:
3a:24:2c:63:5d:41:a1:f7:fa:47:39:69:29:54:c5:5f:3a:8e:
af:6b:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:29 2025 by rpki-client