Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31312e302f32342d3234203d3e203532393737.roa
File: 3230302e35332e31312e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier: xm7P9IptRVVgm8QcqqKwU1n2+3++B4OaxZc2X54Mpiw=
Subject key identifier: 26:C0:CD:20:9D:1B:88:9C:F7:9E:4B:92:44:14:E1:FA:6D:D5:79:89
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 67606D09C5F068749B007D4A5C8869C73449E106
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31312e302f32342d3234203d3e203532393737.roa
Signing time: Tue 21 Nov 2023 06:00:05 +0000
ROA not before: Tue 21 Nov 2023 05:55:05 +0000
ROA not after: Tue 19 Nov 2024 06:00:05 +0000
asID: 52977
IP address blocks: 200.53.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:60:6d:09:c5:f0:68:74:9b:00:7d:4a:5c:88:69:c7:34:49:e1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Nov 21 05:55:05 2023 GMT
Not After : Nov 19 06:00:05 2024 GMT
Subject: CN=26C0CD209D1B889CF79E4B924414E1FA6DD57989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:ae:b7:0d:64:b5:8a:ac:b2:79:16:9a:5a:
9a:ec:17:c3:6b:a1:44:71:33:25:8b:56:1d:ee:af:
a5:fb:a0:a7:4e:ef:c4:fb:f7:f0:49:d7:53:1c:7a:
d1:f2:89:88:73:03:52:78:fb:4d:36:de:f9:d7:5d:
8e:e5:1d:cf:5c:6e:07:a2:06:31:1e:1a:51:cf:66:
94:b0:00:08:62:9a:2a:92:09:dd:e0:60:d8:f6:c7:
21:cc:47:84:0b:33:1d:9c:08:b7:d5:88:5e:55:e2:
3a:66:8f:75:b0:43:f5:78:24:51:dd:2a:cc:5d:78:
f3:71:b8:dd:0b:5f:f8:dc:00:dc:4b:90:0f:96:70:
61:77:ee:0d:6f:c8:8f:ae:7e:40:1f:f3:1b:69:f6:
6c:da:06:73:d9:cc:98:c5:0b:d0:12:a0:18:9c:11:
ae:91:3c:fd:7f:93:10:be:67:72:e5:7a:5d:2b:e9:
63:f0:74:66:03:60:61:46:4f:b9:a5:92:43:f6:d3:
19:21:3a:8c:1e:c1:90:ff:18:05:12:87:bd:73:46:
1b:16:36:2b:48:bc:1c:8e:fe:d6:e0:a7:74:ae:17:
06:9b:b2:33:35:14:43:ae:e6:46:fd:21:49:ae:d4:
b2:24:22:f2:d6:e6:cc:17:64:c3:86:5e:50:e6:6e:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:CD:20:9D:1B:88:9C:F7:9E:4B:92:44:14:E1:FA:6D:D5:79:89
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31312e302f32342d3234203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.11.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:32:cc:2b:be:92:e0:f2:37:9d:f0:1b:9d:c4:54:88:6a:26:
95:38:89:59:98:95:5d:37:df:f4:6f:22:f0:9c:4a:db:75:3a:
52:40:3f:39:38:c5:80:6c:c3:1b:d7:b7:14:29:97:f6:cb:e3:
5f:2d:30:ee:a5:9b:90:fb:43:12:83:e9:88:1a:ce:36:69:8f:
72:d7:52:f4:c6:9c:8e:e6:9f:2b:90:84:35:da:d1:09:87:54:
05:fd:8c:ef:ee:ad:5a:54:64:f4:1f:ac:55:d0:2b:23:39:83:
26:b2:66:de:eb:fa:6d:e2:7b:c5:a3:33:48:e7:29:07:64:92:
76:b0:81:6e:44:d3:02:b3:51:57:10:12:39:9c:88:5b:84:6a:
7d:28:cf:0f:c3:58:d6:a9:5d:2f:b7:d4:40:cb:73:23:73:32:
53:23:b5:54:ae:7f:1e:96:18:5a:c8:3f:02:e2:e1:d4:66:52:
87:72:aa:f1:58:46:78:1b:5c:6b:c1:ec:10:99:f7:d9:56:ea:
14:57:08:83:c3:18:86:49:b9:06:2b:92:7e:ed:a9:e7:3c:38:
84:ba:99:62:b9:97:a2:37:b3:8b:ca:e8:88:5e:15:bd:cb:f3:
7e:e0:8c:1c:e7:b2:f3:98:7b:59:4e:ca:5f:c1:5c:5c:19:fa:
cf:4f:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org