Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
File: 3230302e35332e31302e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier: k9P+35/ASRf1qAs3g832NtjiJQAwdmGxtNMB6WmGnH4=
Subject key identifier: AA:82:75:72:AA:E8:20:BF:DA:7F:EC:45:D7:F4:58:E8:84:99:41:69
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 50B213858C902925E52A2AF24B1605EE297D3F55
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
Signing time: Tue 21 Nov 2023 06:00:02 +0000
ROA not before: Tue 21 Nov 2023 05:55:02 +0000
ROA not after: Tue 19 Nov 2024 06:00:02 +0000
asID: 52977
IP address blocks: 200.53.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b2:13:85:8c:90:29:25:e5:2a:2a:f2:4b:16:05:ee:29:7d:3f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Nov 21 05:55:02 2023 GMT
Not After : Nov 19 06:00:02 2024 GMT
Subject: CN=AA827572AAE820BFDA7FEC45D7F458E884994169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:f0:55:78:48:55:26:2f:25:11:b1:43:b0:
57:99:85:7b:32:9b:ca:61:51:d0:27:0a:94:a8:30:
d2:b0:75:3a:2a:c8:7a:ad:b2:bd:2f:d2:af:44:47:
93:17:54:1c:63:2f:07:a6:c7:b5:bf:bd:24:1f:6e:
3e:55:97:c6:9a:42:aa:5a:23:97:e6:87:e3:0b:33:
da:d3:95:c0:98:d1:6f:c4:d7:0f:c5:87:98:a0:dc:
3c:88:55:41:87:62:2f:4b:f9:a5:40:0d:37:8d:4a:
33:f8:e5:8c:20:25:30:50:ce:01:c2:e0:8d:94:fb:
87:c4:80:77:38:43:88:d5:b6:46:b4:0b:ab:d6:49:
2f:0b:ec:a7:bf:1e:b3:05:0b:64:bd:b6:7c:8b:58:
d1:c1:2f:fc:db:24:5a:1d:4c:6f:a8:af:5e:c3:e0:
69:73:58:02:33:64:09:3e:21:57:c2:3b:62:d0:ae:
e5:c0:a1:9b:62:29:3b:6e:58:17:f2:b0:fd:19:ce:
5b:91:69:de:a8:d0:35:65:f4:e3:cd:2c:77:c4:31:
64:a4:2d:dd:7a:6d:a1:9d:6c:05:e5:be:ab:12:02:
ce:3f:cb:cf:4d:f0:13:76:79:ed:2c:93:c9:13:94:
89:29:d4:c0:c0:1f:cb:ec:fd:0a:da:f6:31:14:2a:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:75:72:AA:E8:20:BF:DA:7F:EC:45:D7:F4:58:E8:84:99:41:69
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.10.0/23
Signature Algorithm: sha256WithRSAEncryption
79:cb:b0:4a:50:15:c8:0d:25:cd:5b:70:6b:c7:8e:92:73:8b:
f0:b5:08:eb:11:ca:84:0e:00:9e:1f:f1:a6:dd:4d:bc:cb:f0:
66:89:ed:0c:c8:c3:fa:f3:b3:95:e6:77:6f:e7:e7:62:14:fb:
a9:b9:34:fa:ab:b8:35:6a:42:51:b0:17:7c:ee:5f:87:d2:5e:
1f:8e:14:e4:c5:a6:32:d4:47:91:83:b3:99:59:be:22:de:71:
5a:7b:82:42:32:4d:e5:28:78:53:bb:32:53:f6:aa:7a:f2:b3:
6c:29:ca:3c:09:73:3e:c8:ec:23:df:59:17:9c:38:2d:ae:0c:
f1:f7:1c:6b:18:16:41:49:9c:9f:b1:14:a7:c4:21:85:c2:aa:
31:4e:9f:77:92:7f:b0:47:5d:eb:34:44:38:be:83:88:6d:95:
d3:25:8e:ba:4d:be:35:da:79:c4:23:4b:18:58:81:c2:27:05:
ba:b0:11:e9:13:b8:38:2c:f4:6f:4a:1d:19:04:ab:b6:54:84:
31:d9:c0:c1:3e:ef:61:e3:7e:de:a1:d4:fa:6e:f4:70:79:8a:
4f:f6:db:aa:dc:81:e7:09:48:42:8d:8a:82:6e:f0:7b:d7:a0:
ad:63:c0:7a:0e:29:be:ff:7a:65:e5:c6:97:3f:64:d3:75:a1:
bf:af:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:35 2025 by rpki-client