Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
File: 3230302e35332e31302e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier: 5JaTk0h+HR5gNW5xpgAf7qjKFN4SRU4EE01pVtc+e9k=
Subject key identifier: 01:99:B9:69:3A:15:99:73:18:60:46:B7:E5:E2:29:D4:62:8D:FE:4E
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 0D5CE1BE97802983B6D79625AE85F102B6D65A20
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
Signing time: Mon 15 Jan 2024 06:42:02 +0000
ROA not before: Mon 15 Jan 2024 06:37:02 +0000
ROA not after: Mon 13 Jan 2025 06:42:02 +0000
asID: 52977
IP address blocks: 200.53.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5c:e1:be:97:80:29:83:b6:d7:96:25:ae:85:f1:02:b6:d6:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Jan 15 06:37:02 2024 GMT
Not After : Jan 13 06:42:02 2025 GMT
Subject: CN=0199B9693A159973186046B7E5E229D4628DFE4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:f2:43:1d:89:65:2a:9b:59:01:af:d8:74:
03:5f:88:52:4b:74:94:e9:9a:34:22:51:18:b7:39:
60:2e:76:de:14:18:33:d9:47:25:d5:82:63:c4:0e:
c2:eb:5a:bd:51:3d:a8:b4:cd:19:9f:b6:59:90:94:
4a:58:96:90:3c:cc:77:a5:bd:fc:74:f4:fe:1f:fe:
bf:b7:81:07:eb:b3:b9:6b:11:07:cc:8a:3a:53:0a:
1d:88:43:2f:40:58:ff:45:b4:c7:b4:33:5a:e7:59:
e3:e4:38:6d:55:7e:41:f4:0f:16:d3:80:c1:26:20:
ea:46:e4:02:22:7a:f8:b1:ce:cd:48:32:29:c8:fd:
1d:e5:14:48:e4:4a:03:34:b2:df:d5:48:19:e5:c2:
82:37:8d:fa:61:c5:e3:2f:38:07:d7:f4:c0:f8:40:
8b:5d:21:4c:55:f3:f0:0e:b7:f5:1b:62:32:57:b4:
4b:b3:11:98:47:c3:0f:c4:24:71:32:d1:82:b9:bf:
2d:8c:07:ab:40:47:ec:a2:05:e3:5a:2e:88:79:b6:
18:b5:e8:87:9e:38:d7:4a:09:d5:27:9a:81:9b:2d:
ac:79:74:b0:62:2c:96:7b:99:a3:88:95:bb:69:d7:
ed:cd:71:df:91:e0:1a:b8:b5:85:d9:24:73:19:0f:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:B9:69:3A:15:99:73:18:60:46:B7:E5:E2:29:D4:62:8D:FE:4E
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31302e302f32342d3234203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f2:b3:d3:b6:c0:47:c6:77:04:09:3b:c6:ff:24:eb:97:07:
d3:6d:f2:a7:56:a4:c8:91:4a:90:63:31:7d:5c:85:e9:ff:3f:
0a:be:21:bd:b4:f0:bb:a3:dc:69:54:ce:8c:bb:11:99:e5:af:
4c:ed:e6:17:36:ee:7e:30:5b:05:ae:93:8e:ce:b8:2e:dc:8f:
8f:72:b4:5c:12:57:21:21:88:94:a0:9c:d2:0e:75:7a:c6:9a:
5c:a5:ac:25:10:16:16:f1:03:ea:29:51:66:6a:16:02:10:35:
df:7a:b6:21:4c:0f:95:f5:63:11:8c:55:d2:07:4d:68:75:9f:
dd:6c:25:2c:f5:42:3f:5f:61:37:d0:21:60:4a:83:58:d0:6f:
ec:20:be:e1:a1:9e:0c:11:00:e1:64:86:11:a9:6a:0a:24:1c:
07:cc:91:d7:51:b4:7c:5e:d1:03:bb:76:d8:c1:05:0c:35:12:
b5:8b:5e:96:a7:8e:d5:3f:6b:91:8a:05:2c:77:e2:18:04:95:
50:8c:df:af:66:0e:b5:28:c1:9a:61:16:22:6a:e3:3b:4b:0e:
90:7e:1c:bb:0d:8e:b3:08:5a:f0:c2:fd:34:16:73:10:ae:d3:
bd:08:e4:15:77:66:91:70:2d:aa:61:df:c9:a7:cf:da:8a:a1:
65:ff:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org