Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32332d3233203d3e20323634343931.roa
File: 3137302e3234372e3235322e302f32332d3233203d3e20323634343931.roa (raw, json)
Hash identifier: KrPf7qxFAF19EQu/TgF0WbCOjGpvdgM3teRVUxD7nTw=
Subject key identifier: C7:62:AA:1C:F8:E9:10:66:28:5E:9B:09:27:2F:EC:7C:F3:7C:6B:18
Certificate issuer: /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial: 5AABA764EC79C0BEB45A517A14D3F6BC0A5EDEB1
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32332d3233203d3e20323634343931.roa
Signing time: Tue 10 Oct 2023 03:11:25 +0000
ROA not before: Tue 10 Oct 2023 03:06:25 +0000
ROA not after: Tue 08 Oct 2024 03:11:25 +0000
asID: 264491
IP address blocks: 170.247.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ab:a7:64:ec:79:c0:be:b4:5a:51:7a:14:d3:f6:bc:0a:5e:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Validity
Not Before: Oct 10 03:06:25 2023 GMT
Not After : Oct 8 03:11:25 2024 GMT
Subject: CN=C762AA1CF8E91066285E9B09272FEC7CF37C6B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:1f:cb:a5:6b:20:4d:96:fd:28:f8:c3:e1:
19:ae:b9:5b:96:ea:cc:27:e3:58:1c:9f:f2:42:ca:
05:f9:fc:ec:96:08:e5:bd:08:ac:88:2f:50:96:da:
fe:d6:60:2a:4b:2f:2f:75:b6:d4:d5:63:7d:f6:cc:
ba:87:82:05:a3:db:98:23:6f:96:ae:8e:df:e8:f6:
e8:36:6f:5a:13:4a:cd:b9:93:56:04:a8:33:7a:d2:
48:6e:a7:4f:20:ac:2c:05:08:39:d6:0b:72:da:34:
a3:f2:21:16:8b:03:97:db:15:b3:2a:0c:d4:08:de:
67:82:25:21:1f:3c:1a:25:1a:1c:30:60:f9:2c:8f:
b0:d1:ab:a5:1e:cd:8c:62:3c:88:02:46:5c:b1:fd:
b0:f3:66:d6:94:df:7d:ea:ce:b9:26:90:32:0a:13:
4a:f4:dd:d1:ba:3a:eb:79:50:01:9f:84:90:2c:84:
1e:48:8b:72:e8:af:e0:b3:8b:96:71:d4:94:24:8e:
9d:c8:83:42:3f:37:12:7e:8c:fb:c5:e2:68:a5:38:
aa:cf:3a:66:b1:b2:24:42:d7:5c:8f:d6:5f:42:d2:
16:07:24:29:5b:36:c1:56:a6:4b:0c:5c:81:4b:df:
d6:a1:ca:30:d5:d7:74:4a:4d:50:4a:f8:b9:82:ff:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:AA:1C:F8:E9:10:66:28:5E:9B:09:27:2F:EC:7C:F3:7C:6B:18
X509v3 Authority Key Identifier:
keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3137302e3234372e3235322e302f32332d3233203d3e20323634343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.252.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c5:50:25:be:1b:22:d6:34:c8:7b:18:12:56:b6:9e:95:1e:
30:df:75:9b:64:b5:43:e9:37:cc:ca:66:de:35:12:d9:2f:3e:
37:81:e3:c3:b5:5b:78:2d:39:33:02:5e:68:21:c4:4e:4b:d2:
0e:a0:ec:e7:d6:9f:b8:ca:19:63:d6:48:18:2a:1b:db:9c:f2:
72:66:dc:6a:60:10:1b:4c:2d:81:7e:86:a2:92:e7:45:8f:44:
3d:ef:73:8d:28:f8:f7:3d:3b:02:0d:28:e0:1a:8b:6c:7b:bf:
59:a9:ca:ab:9a:c3:5e:2f:fe:36:38:4d:9d:c7:99:ce:58:82:
59:8d:fa:e3:63:c8:5d:e3:ae:eb:d0:bd:fb:41:eb:57:92:c2:
ce:28:8d:4e:ab:c1:2b:0a:14:44:4d:c7:89:47:49:04:16:8d:
a4:a6:b3:50:19:35:f0:17:67:db:53:88:eb:62:35:9f:72:86:
15:de:ab:ad:ff:e0:18:51:a5:7d:83:ed:3e:79:98:d7:ba:41:
79:6b:3f:a5:be:78:fe:2b:73:22:1c:7e:8b:a5:b8:2e:07:76:
20:36:19:36:6d:13:ef:59:90:38:96:00:57:de:62:a0:09:9e:
65:38:40:19:ed:22:47:18:c0:d1:89:4a:6f:4a:ee:1f:e0:1a:
9b:63:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org