Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa
File: 3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (raw, json)
Hash identifier: OrNrefcZryDaDVOXgrniQx3NnoDx8iruHFKKmNgH7tg=
Subject key identifier: AD:07:D7:03:CC:80:76:60:5C:46:A4:3E:B9:B7:9F:8E:03:B1:7A:0D
Certificate issuer: /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial: 595CB4359A3B630752AF0C2BDB72E7497C437112
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa
Signing time: Thu 16 Nov 2023 17:54:18 +0000
ROA not before: Thu 16 Nov 2023 17:49:18 +0000
ROA not after: Thu 14 Nov 2024 17:54:18 +0000
asID: 271001
IP address blocks: 177.223.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5c:b4:35:9a:3b:63:07:52:af:0c:2b:db:72:e7:49:7c:43:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Validity
Not Before: Nov 16 17:49:18 2023 GMT
Not After : Nov 14 17:54:18 2024 GMT
Subject: CN=AD07D703CC8076605C46A43EB9B79F8E03B17A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:51:e4:e1:f1:51:d4:a6:fa:99:dc:d1:a6:
1b:db:da:ff:d3:c3:71:65:ea:64:27:bf:aa:07:41:
da:5a:d2:24:6a:af:6a:94:b8:3e:d9:de:b3:28:e5:
b1:b9:ba:56:ee:2e:72:58:80:89:65:32:b2:13:47:
60:0b:df:8b:32:d5:40:ba:17:a3:85:3e:14:2f:19:
19:f8:84:48:48:0d:21:d2:db:42:5a:4b:4f:55:61:
7f:fc:8b:9d:94:b2:6e:04:7c:36:b0:fa:d0:6b:02:
a2:04:58:d9:ee:25:01:36:fc:73:85:3b:60:dc:6c:
08:77:81:ea:05:85:65:d8:3c:c8:7b:05:d1:1b:e1:
30:07:6e:2e:65:68:44:78:ba:73:f2:3c:d6:b9:45:
e4:58:66:4c:5a:02:6c:2b:59:d2:be:14:36:c0:3a:
df:2c:32:8d:ed:64:bd:79:47:d9:38:57:d7:ac:af:
b5:a0:e8:d3:e1:11:25:8d:74:2b:aa:b4:dd:7b:f0:
37:f0:4d:4e:56:95:c9:ae:40:a9:fb:56:6c:74:98:
52:31:dc:7e:06:56:58:02:ef:07:70:e7:44:7a:95:
b6:9b:ed:74:4b:45:e8:4d:17:ba:a5:9f:62:aa:20:
66:a2:03:13:24:95:16:7e:83:5b:40:06:50:ba:56:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:D7:03:CC:80:76:60:5C:46:A4:3E:B9:B7:9F:8E:03:B1:7A:0D
X509v3 Authority Key Identifier:
keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.134.0/23
Signature Algorithm: sha256WithRSAEncryption
18:66:50:d8:6d:1a:af:ac:a6:b9:4f:48:32:67:29:6a:56:10:
c8:0e:e3:93:db:f1:2f:77:3e:67:75:a8:44:d3:85:3f:af:fa:
85:ec:3a:54:cc:4f:c5:5a:7b:ca:91:a4:9f:d9:b4:79:32:60:
f4:ba:1e:f1:77:73:38:fe:6d:f0:bb:f8:e6:5a:84:ec:bd:f2:
3a:79:96:6f:71:54:e2:fe:17:ee:53:c0:db:aa:8b:68:05:14:
ff:0c:34:ec:53:eb:1b:e1:40:00:87:5a:fe:0c:cf:b6:a9:3b:
d5:4d:59:57:7a:97:89:99:da:ae:ce:e4:4c:92:9d:ac:32:76:
9e:9a:3c:bf:bf:22:3a:67:a6:d0:31:65:97:fd:7a:f9:4a:5d:
8f:10:a4:60:f2:2e:17:a4:e8:34:d1:01:81:ff:27:be:b1:20:
56:a8:a7:03:70:6b:49:d1:9b:57:1e:e0:88:ce:b2:66:fa:6c:
e5:90:64:9b:54:d3:35:a6:2f:56:d7:da:1a:48:80:9c:f4:27:
ba:91:b3:7f:9f:e8:9e:81:78:0d:ab:34:94:80:6a:2c:46:11:
63:57:ee:6d:59:7f:63:d2:e6:29:fa:c4:e8:c4:1c:13:9a:9e:
de:81:f6:0b:2d:89:de:72:2f:bb:f8:8e:66:c0:36:eb:8d:14:
39:32:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org