Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa
File: 3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa (raw, json)
Hash identifier: MX7KON5TDC8HID6Hb+n3uQs0kpwy9KOM/SnS7ZG8r08=
Subject key identifier: 23:3D:42:E2:59:C7:E3:8C:E3:86:B6:23:29:C1:44:47:07:9E:8E:59
Certificate issuer: /CN=C21F0113A7A311E6D682C1938972619E614335EC
Certificate serial: 363158FFB54656D6BCFBBD6A58F4891D1E218365
Authority key identifier: C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa
Signing time: Fri 13 May 2022 20:08:21 +0000
ROA not before: Fri 13 May 2022 20:03:21 +0000
ROA not after: Fri 12 May 2023 20:08:21 +0000
asID: 263057
IP address blocks: 170.244.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:31:58:ff:b5:46:56:d6:bc:fb:bd:6a:58:f4:89:1d:1e:21:83:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C21F0113A7A311E6D682C1938972619E614335EC
Validity
Not Before: May 13 20:03:21 2022 GMT
Not After : May 12 20:08:21 2023 GMT
Subject: CN=233D42E259C7E38CE386B62329C14447079E8E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:6a:84:a1:60:e2:4b:63:3b:f9:0f:a8:b3:
ad:1c:bd:82:a7:87:2e:bc:82:5e:f1:65:a8:50:8d:
9a:68:f9:01:04:01:a1:a8:f6:46:9b:da:aa:71:2f:
21:a9:ad:cf:93:85:00:6e:5b:01:9a:78:b6:20:a9:
e1:31:d7:25:f3:10:37:f9:a9:6c:a1:30:7f:dc:e0:
d0:1f:4e:c9:a4:19:65:ba:b2:c4:33:c1:dc:c4:57:
df:d8:42:13:0e:bb:61:a7:e3:64:e1:b9:ea:76:46:
41:04:fd:90:7d:f5:0f:8a:62:a2:4d:9f:2f:2e:f9:
95:b8:3a:dd:4e:f7:f3:45:82:1c:92:a5:ab:63:9f:
76:d3:98:20:41:ea:ff:15:87:c3:5a:f7:44:ef:ab:
74:48:ce:4d:2b:9b:4d:22:ad:d9:6d:5b:f3:93:31:
0f:08:9f:65:90:49:7e:56:a3:f5:de:e0:2c:9f:22:
e9:48:f8:a5:d6:2d:07:bc:5f:25:01:b0:5c:8e:a7:
d0:5c:dd:c3:ca:c7:0a:46:16:6a:1d:8d:39:03:10:
c7:4a:f4:a5:84:a2:3a:95:a9:fe:52:3e:1e:a4:5c:
b0:f3:45:37:36:78:cd:9c:ab:62:be:11:7d:67:5d:
1d:9b:27:ac:0d:8d:4d:41:a4:1f:ae:6f:c5:24:88:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:42:E2:59:C7:E3:8C:E3:86:B6:23:29:C1:44:47:07:9E:8E:59
X509v3 Authority Key Identifier:
keyid:C2:1F:01:13:A7:A3:11:E6:D6:82:C1:93:89:72:61:9E:61:43:35:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/C21F0113A7A311E6D682C1938972619E614335EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C21F0113A7A311E6D682C1938972619E614335EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/3137302e3234342e3233362e302f32322d3232203d3e20323633303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:a6:ac:9f:8f:1e:5d:9b:0a:6c:33:26:64:27:3c:1e:c5:96:
92:78:ac:c8:58:59:e4:69:33:3b:60:ba:b8:02:1f:c7:66:74:
70:e6:79:fb:98:d4:48:79:27:21:f8:ad:c0:c0:f6:c9:bf:0c:
e7:2f:c9:c3:ca:81:da:7c:10:98:93:d3:48:25:01:a3:64:47:
2e:a2:5b:95:a3:c2:93:4c:31:fc:9f:1c:d1:24:35:ee:0c:29:
f4:f6:6d:26:01:da:ce:45:e0:c0:d5:ee:e0:3a:13:fa:75:6a:
b5:2d:97:0a:d8:03:86:77:a9:3c:26:20:53:9e:64:27:06:41:
66:3d:36:19:84:f0:9f:26:06:44:ce:41:69:98:f0:a9:94:79:
90:59:e7:d2:7b:e9:e6:15:5f:66:9b:e1:6b:c1:f3:31:7a:7e:
36:23:eb:03:b1:60:6f:1f:0f:a2:57:d1:8a:6f:68:aa:91:50:
f4:c5:c6:01:31:cf:64:4f:dd:10:9c:2d:a4:e4:d7:23:2f:e0:
4e:33:c2:6e:30:75:23:95:d3:5e:a8:1c:eb:a8:f9:52:7d:5f:
9f:2d:86:04:52:1f:89:90:cb:5f:de:55:1a:5b:62:15:00:00:
d8:24:37:6f:e7:c3:27:f1:5e:30:61:29:91:0d:3b:4b:56:bf:
e2:64:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:50 2025 by rpki-client