Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135382e302f32332d3233203d3e20323635303632.roa
File: 3137302e3233312e3135382e302f32332d3233203d3e20323635303632.roa (raw, json)
Hash identifier: cNHfFtlk/aNNofx39XY2ofCrpuxjBROR36/vfjV6fd8=
Subject key identifier: 9E:1F:D1:C1:2B:0B:35:15:09:42:F5:CC:52:EB:79:77:F2:1E:0B:D2
Certificate issuer: /CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
Certificate serial: 3CF6021964D710B11DE8210677E3EBF8ABC71609
Authority key identifier: 07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135382e302f32332d3233203d3e20323635303632.roa
Signing time: Mon 11 Sep 2023 20:47:30 +0000
ROA not before: Mon 11 Sep 2023 20:42:30 +0000
ROA not after: Mon 09 Sep 2024 20:47:30 +0000
asID: 265062
IP address blocks: 170.231.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f6:02:19:64:d7:10:b1:1d:e8:21:06:77:e3:eb:f8:ab:c7:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
Validity
Not Before: Sep 11 20:42:30 2023 GMT
Not After : Sep 9 20:47:30 2024 GMT
Subject: CN=9E1FD1C12B0B35150942F5CC52EB7977F21E0BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:64:14:50:66:b7:dd:05:c7:5d:8a:f5:ce:
f7:ff:92:de:e3:d2:94:23:99:9a:15:06:00:05:70:
32:ef:01:11:fc:3e:e8:2b:55:f2:93:c0:5a:b1:d5:
cc:d1:7c:7c:58:6f:aa:66:0c:74:9d:27:59:4d:93:
19:a4:9d:bb:06:37:a1:b9:68:9d:e9:c8:ed:e3:e0:
95:cb:0a:bb:f3:7d:84:e1:b7:61:e1:90:fc:04:1b:
83:3e:26:70:ea:b4:58:cd:90:23:6b:31:a2:19:69:
87:48:3d:b8:f0:f2:a4:d8:fa:b6:7a:9d:66:97:75:
fc:2f:79:d0:47:65:4a:c9:d5:6f:a8:e3:6a:f9:17:
ca:c9:1f:36:45:73:d8:ea:d0:76:bc:91:a5:85:ff:
e5:31:52:9c:29:d9:84:28:1b:6c:2a:88:03:aa:50:
ff:2e:e4:7d:76:71:31:59:f6:c7:88:9b:d8:5a:1b:
aa:f5:e8:e2:27:2f:29:6e:72:9a:e0:64:71:7f:fa:
4f:69:10:c2:76:2d:ba:d7:38:65:9f:c7:21:40:5d:
a6:77:b2:de:34:ea:91:a4:c5:46:e4:2c:b6:4b:10:
7c:a5:6e:a5:a5:35:54:f1:73:a4:d1:b6:1e:58:4c:
ad:62:1e:b9:4e:a6:32:5c:7f:d1:64:28:f2:95:e7:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:D1:C1:2B:0B:35:15:09:42:F5:CC:52:EB:79:77:F2:1E:0B:D2
X509v3 Authority Key Identifier:
keyid:07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135382e302f32332d3233203d3e20323635303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a3:2c:aa:df:c8:45:3c:3c:e4:93:b4:d8:25:60:fe:bc:b8:
d3:fd:d5:5c:a6:1f:ad:89:fb:c1:c0:56:65:b9:39:92:bf:b5:
42:07:85:b1:1e:93:37:13:10:1a:43:ac:a0:f3:1a:56:1f:ac:
aa:83:3a:6d:05:35:0b:8c:50:53:a7:1a:dc:5d:a9:ce:5e:1f:
b4:1d:0b:22:30:b7:02:31:92:43:18:bf:d1:8c:03:ff:d9:6b:
72:22:72:37:ef:27:cd:75:41:6b:57:bf:7f:1c:17:89:98:2d:
db:67:98:8f:a2:dd:a5:08:88:da:06:4e:a6:8a:e9:db:8f:8e:
56:a7:58:00:f0:a5:10:e1:c7:06:c5:b4:89:45:52:dc:22:7e:
67:17:c5:93:12:d5:3a:07:ac:c3:14:f8:38:bb:e1:f4:9b:96:
4d:d0:73:cb:9a:cb:50:ff:f6:2f:1b:7d:d0:c1:e0:7d:fa:f6:
86:f5:9b:69:81:e0:f0:ec:27:1a:51:14:36:89:63:17:84:d7:
47:88:f6:a8:58:77:d8:95:93:94:3a:fd:5e:eb:a9:cd:af:61:
81:5c:40:43:fd:46:07:a0:11:0c:68:10:ab:6e:98:3e:8d:3e:
e2:4b:bf:c8:cd:44:59:7a:b7:d6:0d:fc:43:3e:e1:72:58:ab:
93:5b:e6:77
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPPYCGWTXELEd6CEGd+Pr+KvHFgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDczRkZEREI2OEY0MDczRkQxMEMyREZGRjRFREZDN0ZG
OTBGMUJCOTAeFw0yMzA5MTEyMDQyMzBaFw0yNDA5MDkyMDQ3MzBaMDMxMTAvBgNV
BAMTKDlFMUZEMUMxMkIwQjM1MTUwOTQyRjVDQzUyRUI3OTc3RjIxRTBCRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNGQUUGa33QXHXYr1zvf/kt7j
0pQjmZoVBgAFcDLvARH8PugrVfKTwFqx1czRfHxYb6pmDHSdJ1lNkxmknbsGN6G5
aJ3pyO3j4JXLCrvzfYTht2HhkPwEG4M+JnDqtFjNkCNrMaIZaYdIPbjw8qTY+rZ6
nWaXdfwvedBHZUrJ1W+o42r5F8rJHzZFc9jq0Ha8kaWF/+UxUpwp2YQoG2wqiAOq
UP8u5H12cTFZ9seIm9haG6r16OInLylucprgZHF/+k9pEMJ2LbrXOGWfxyFAXaZ3
st406pGkxUbkLLZLEHylbqWlNVTxc6TRth5YTK1iHrlOpjJcf9FkKPKV5xhPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnh/RwSsLNRUJQvXMUut5d/IeC9IwHwYDVR0j
BBgwFoAUBz/922j0Bz/RDC3/9O38f/kPG7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw
WjQvMC8wNzNGRkREQjY4RjQwNzNGRDEwQzJERkZGNEVERkM3RkY5MEYxQkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3M0ZGRERCNjhGNDA3M0ZE
MTBDMkRGRkY0RURGQzdGRjkwRjFCQjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKQWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMwMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarnnjANBgkqhkiG9w0BAQsFAAOCAQEAKqMs
qt/IRTw85JO02CVg/ry40/3VXKYfrYn7wcBWZbk5kr+1QgeFsR6TNxMQGkOsoPMa
Vh+sqoM6bQU1C4xQU6ca3F2pzl4ftB0LIjC3AjGSQxi/0YwD/9lrciJyN+8nzXVB
a1e/fxwXiZgt22eYj6LdpQiI2gZOporp24+OVqdYAPClEOHHBsW0iUVS3CJ+ZxfF
kxLVOgeswxT4OLvh9JuWTdBzy5rLUP/2Lxt90MHgffr2hvWbaYHg8OwnGlEUNolj
F4TXR4j2qFh32JWTlDr9Xuupza9hgVxAQ/1GB6ARDGgQq26YPo0+4ku/yM1EWXq3
1g38Qz7hclirk1vmdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org