Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3233203d3e20323634393637.roa
File: 3137302e302e3130302e302f32322d3233203d3e20323634393637.roa (raw, json)
Hash identifier: 3fD/buJIPXBlK9dSdg0fOPFIcLd7Ggp+VZBYjbsxxiU=
Subject key identifier: 05:D6:DB:E7:3A:E1:8A:CC:B1:5D:DE:80:07:E4:02:63:49:72:3A:0B
Certificate issuer: /CN=BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15
Certificate serial: 47E8867109458FB7EB19034B39887026C10766E4
Authority key identifier: BF:5A:29:64:D0:4B:4D:AC:FF:DD:8B:96:9D:0A:30:D6:B1:B6:FF:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3233203d3e20323634393637.roa
Signing time: Mon 01 Apr 2024 15:40:15 +0000
ROA not before: Mon 01 Apr 2024 15:35:15 +0000
ROA not after: Mon 31 Mar 2025 15:40:15 +0000
asID: 264967
IP address blocks: 170.0.100.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e8:86:71:09:45:8f:b7:eb:19:03:4b:39:88:70:26:c1:07:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15
Validity
Not Before: Apr 1 15:35:15 2024 GMT
Not After : Mar 31 15:40:15 2025 GMT
Subject: CN=05D6DBE73AE18ACCB15DDE8007E4026349723A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:c4:55:59:2f:11:46:26:cb:1e:5d:e8:6c:
54:68:dc:7e:1c:0e:bd:5b:40:fe:11:88:76:a4:66:
ea:f5:c4:42:92:41:0d:ef:d1:01:28:0d:7d:1c:6f:
6c:3b:51:58:63:63:37:f4:05:07:6f:6d:3d:8e:25:
ee:2e:07:cf:7a:5f:14:db:a5:77:c1:fa:6e:cc:f8:
fc:9b:be:55:e3:31:52:17:a2:59:47:5c:62:df:c7:
b0:7a:f6:69:67:4e:5d:83:5f:66:07:23:4f:f9:03:
d7:4c:94:90:56:9e:2e:f5:ef:fe:53:58:61:f8:9c:
63:66:7e:66:5e:8c:ca:13:96:ef:b1:d3:fe:86:b0:
6c:db:7a:f2:01:2c:80:1d:96:ce:44:e2:56:49:18:
88:db:0e:e4:65:49:e9:c3:c8:0e:21:8d:5e:2d:0a:
fb:7e:bf:54:a9:db:f5:b7:f0:a3:4a:66:ab:bc:94:
cc:35:13:b6:64:bf:92:5c:4b:5c:62:f4:57:dc:13:
93:ea:a0:6a:c9:14:56:e1:d5:2e:2e:1d:3f:41:23:
00:f0:7e:6c:eb:29:59:53:8d:bf:1a:4c:37:af:cf:
30:ba:69:15:3c:aa:d1:88:78:1e:69:90:f3:38:d8:
2d:2e:c7:08:c0:1f:d4:79:e2:0c:42:52:83:a4:b3:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:DB:E7:3A:E1:8A:CC:B1:5D:DE:80:07:E4:02:63:49:72:3A:0B
X509v3 Authority Key Identifier:
keyid:BF:5A:29:64:D0:4B:4D:AC:FF:DD:8B:96:9D:0A:30:D6:B1:B6:FF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5A2964D04B4DACFFDD8B969D0A30D6B1B6FF15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3233203d3e20323634393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:b3:fe:a5:f5:72:cf:11:6c:bc:2a:6b:86:a7:89:95:39:99:
89:7c:57:e9:91:bc:d5:d9:f5:6f:64:be:20:91:dc:e9:3e:82:
99:5c:5b:3d:33:16:62:f4:72:a3:a2:dd:e6:47:be:44:98:1b:
44:35:5a:19:0c:7c:5e:5d:37:0b:c7:5c:ca:9b:ed:32:0f:a4:
01:41:ec:5b:bb:20:0b:47:f2:59:bf:a0:35:b2:de:83:40:33:
62:c8:a3:2b:73:50:f8:2e:d9:13:ce:b4:29:f3:fb:6d:04:70:
47:76:fe:82:aa:6e:e1:cb:fe:74:56:49:63:40:16:fa:79:70:
9d:4e:02:d6:a0:bf:81:8f:e7:3f:4f:52:40:4c:7e:21:8f:bf:
d4:63:90:fa:8b:0c:65:08:43:7a:6c:eb:24:06:f1:c4:4d:9d:
8c:f9:72:79:73:db:6a:d5:d5:f5:ef:94:06:85:38:4f:0c:50:
4b:e2:6f:6c:64:67:23:82:bc:0d:9f:f4:57:80:14:ed:57:a7:
26:c0:68:22:9f:1e:c1:ad:fe:13:41:9a:ba:2a:15:52:0f:d7:
99:5e:3f:a6:74:fe:c7:cc:d5:54:1d:b0:6f:86:57:a5:5a:11:
8a:7c:e6:e7:53:1c:e6:8f:de:c7:34:ab:9c:ea:c0:ab:bf:eb:
87:8b:37:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org