Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
File: 3137372e33392e37322e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier: xNmGrQYbpFMOsUa7/fC0B/aEnKGHjmH2ZxAAteeYiXY=
Subject key identifier: F1:51:B0:82:DE:93:61:EE:42:C1:14:95:F8:C5:13:B5:D3:E9:36:55
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 2C066522EB21A1C51472D54AB5F327441AA3DA4F
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
Signing time: Tue 21 Nov 2023 06:00:02 +0000
ROA not before: Tue 21 Nov 2023 05:55:02 +0000
ROA not after: Tue 19 Nov 2024 06:00:02 +0000
asID: 52977
IP address blocks: 177.39.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:06:65:22:eb:21:a1:c5:14:72:d5:4a:b5:f3:27:44:1a:a3:da:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Nov 21 05:55:02 2023 GMT
Not After : Nov 19 06:00:02 2024 GMT
Subject: CN=F151B082DE9361EE42C11495F8C513B5D3E93655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:1c:8d:cf:41:31:c4:d0:82:6d:cd:bc:10:
11:cd:56:3d:19:06:9c:5e:8a:2f:45:a7:4e:94:fc:
b5:f8:c6:9f:06:f7:d1:e0:a6:f8:20:5e:96:72:00:
ae:5e:fe:60:6f:f1:f0:b8:58:cd:99:04:92:b5:63:
74:40:89:8d:a0:6a:14:bf:58:31:9a:ba:d9:45:49:
a4:d0:e9:b5:f8:ab:0f:ef:9d:48:aa:dd:9f:8a:94:
32:75:4f:58:04:97:ae:8f:17:60:be:aa:e6:2b:4d:
e2:60:14:51:b7:d1:92:b4:35:d2:35:0d:61:15:08:
f7:2b:e2:ea:b1:b9:55:e2:66:9b:9a:22:6b:42:17:
74:e2:dd:3c:d8:45:25:f0:36:69:cc:7a:1c:66:80:
24:b6:1f:c2:38:ad:ec:26:81:58:0b:8f:c5:1d:c1:
6d:48:c3:4b:ca:29:dd:2e:aa:26:03:67:65:e5:fc:
43:f0:ea:7a:23:93:90:fb:29:a1:2f:bb:b0:0f:fb:
91:ed:78:e2:0c:0e:7a:48:19:68:97:5e:fd:02:46:
99:44:a3:b7:7c:66:d4:2d:31:23:cd:3f:a3:22:6b:
bc:5d:ba:fd:2f:5f:0e:c0:5a:38:85:a1:24:f8:7c:
5d:00:c2:7e:f9:78:5c:d5:74:d5:0f:99:fc:25:28:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:B0:82:DE:93:61:EE:42:C1:14:95:F8:C5:13:B5:D3:E9:36:55
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.39.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:44:f3:0d:fc:a8:67:b7:1e:2e:29:f5:3d:13:cd:57:4d:da:
f4:ba:59:1a:30:47:a2:5e:99:80:c4:ab:60:e8:91:b7:d7:b7:
88:2f:11:52:3e:0b:47:d1:d7:e9:7f:ce:1d:22:95:dd:96:7e:
f6:34:bb:fa:40:be:bc:76:24:ad:9e:db:68:67:0b:1d:c4:b4:
3a:1e:4a:99:df:0a:22:fc:bb:0d:17:f4:af:8c:53:f9:4f:a2:
e5:aa:a9:73:b0:c3:a4:70:72:ad:1e:f8:77:4a:2c:ab:bf:e0:
ec:5f:20:27:99:c2:8b:01:71:a7:71:d2:45:27:5d:12:c7:28:
a9:74:02:72:99:35:60:a9:9e:a4:51:a7:38:47:a3:a4:15:68:
f0:b5:f1:51:e0:45:4f:8e:24:37:49:ae:a5:8e:5f:b6:a0:6d:
99:d5:3f:50:f8:0a:3b:5a:2b:72:fc:47:9b:d7:bb:fc:90:cc:
b6:6f:dd:ea:b5:07:10:0f:62:d5:7a:b1:97:6f:9c:a0:00:e0:
fa:d3:91:c3:fe:af:fd:09:c4:1e:1a:bf:08:45:78:73:16:f1:
4c:2f:e9:77:f6:99:79:84:40:e5:50:d5:05:f1:6a:cb:5b:30:
29:1a:f4:c5:81:5c:3c:02:b3:69:0c:3d:97:bf:d4:40:2c:c8:
a2:f7:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org