Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
File: 3230302e35332e31322e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier: FEvSKrTq/doSwV4E5iB1Kiwa99zyXP+Agu/N3yMz/ak=
Subject key identifier: 60:A1:4F:5F:19:8B:15:9D:85:14:12:2B:51:B0:3A:CC:E7:20:BE:E8
Certificate issuer: /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial: 4A49973B4682E0DA9E07D6202EF6F97C214AED43
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
Signing time: Tue 21 Nov 2023 06:00:02 +0000
ROA not before: Tue 21 Nov 2023 05:55:02 +0000
ROA not after: Tue 19 Nov 2024 06:00:02 +0000
asID: 52977
IP address blocks: 200.53.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:49:97:3b:46:82:e0:da:9e:07:d6:20:2e:f6:f9:7c:21:4a:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Validity
Not Before: Nov 21 05:55:02 2023 GMT
Not After : Nov 19 06:00:02 2024 GMT
Subject: CN=60A14F5F198B159D8514122B51B03ACCE720BEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:52:01:83:43:00:7a:db:f6:fa:c2:af:e2:
e4:03:99:48:5c:dc:79:5a:d1:ab:f5:c3:96:49:92:
2f:8c:a7:c2:1d:c0:ee:50:33:87:87:1a:6d:a3:78:
c3:ba:36:60:57:79:58:2d:c8:de:82:c8:86:ec:e4:
71:ec:d9:04:d8:55:20:95:5e:ab:f4:d8:4c:c8:31:
e3:0c:0c:53:58:a5:48:d1:09:f2:6b:05:7f:ff:4d:
aa:38:b9:03:54:29:99:c7:4f:f8:6c:05:dd:b2:dd:
ac:bd:48:3f:e0:0e:f3:af:3b:ad:12:69:aa:3f:e1:
bf:a9:e5:4b:a8:52:2d:d4:63:24:91:99:89:74:b5:
a2:fd:e0:1e:f8:0a:83:ef:0c:ac:cc:e8:21:6e:aa:
8c:ae:d9:7e:f6:b6:20:e6:65:8d:3e:7d:ae:af:ae:
f8:78:0a:f7:1d:74:78:55:27:a4:85:ce:b5:7e:67:
6d:98:e8:bf:88:91:9d:73:44:1b:b5:fb:47:8b:5e:
90:9d:ee:25:4c:1c:d6:98:c8:10:d5:44:42:00:ef:
b5:70:cc:ab:e5:34:14:bf:9e:a8:20:c9:ee:f6:91:
c2:73:8f:75:f7:6f:54:4e:40:54:44:9f:19:dc:3b:
01:dc:e3:67:9a:11:9b:fb:d1:f7:85:c0:2a:20:ed:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A1:4F:5F:19:8B:15:9D:85:14:12:2B:51:B0:3A:CC:E7:20:BE:E8
X509v3 Authority Key Identifier:
keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.53.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5e:42:51:7b:e8:f3:69:a8:d0:a5:45:36:73:85:75:55:71:
d6:09:ed:90:44:d0:8c:9b:93:fa:06:95:7e:ac:e8:8d:94:d7:
63:c0:6b:84:de:fb:90:eb:ba:83:92:98:68:e0:c1:11:a2:df:
95:d6:da:44:c5:e3:dd:73:50:91:fd:24:ca:4d:78:78:5e:3a:
48:66:5a:84:03:a2:f5:c7:b0:4b:8e:f5:d3:71:f5:aa:70:6c:
9e:cc:2a:82:f1:ee:a0:6c:8a:cd:a2:87:2f:42:f8:3b:21:58:
3f:fe:95:01:10:5e:f7:bd:34:bc:78:69:d8:e5:63:53:15:d9:
fd:b7:66:98:ed:10:4b:7a:ac:28:81:90:aa:6d:0b:f2:cc:5b:
07:1b:a6:33:35:42:59:45:f9:c3:aa:bf:e8:48:e1:69:55:4e:
3d:45:bf:14:66:97:16:42:4e:1f:8e:73:e1:8a:94:a3:1e:19:
bb:f5:17:c1:9f:98:af:9a:04:14:c0:72:05:3b:74:da:d9:6d:
b5:9e:40:5c:88:53:9c:82:a7:c0:cf:51:ba:9b:84:c5:04:14:
61:23:ca:8a:01:4c:c9:4c:25:5d:3d:53:83:8a:6c:48:12:b2:
e8:e5:79:fd:2e:a9:c9:f3:2c:86:26:08:17:a2:4a:58:fd:f1:
be:7d:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org