Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32302e302f32322d3234203d3e203631383537.roa
File: 3137302e3233332e32302e302f32322d3234203d3e203631383537.roa (raw, json)
Hash identifier: znJcENEK3fBv2lK9MQoxNCIjIxmY1qyM8Yo9a3v60IE=
Subject key identifier: F1:F2:16:55:9F:BD:B8:4A:B8:05:22:5E:54:FF:BE:73:80:01:95:5D
Certificate issuer: /CN=EDBB71BFB5C814DA471F371C214CD6D1C45122E9
Certificate serial: 2F0F80A951DF0CA7E5C0D9F387A7EB7E5B0FB87A
Authority key identifier: ED:BB:71:BF:B5:C8:14:DA:47:1F:37:1C:21:4C:D6:D1:C4:51:22:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32302e302f32322d3234203d3e203631383537.roa
Signing time: Thu 14 Jul 2022 20:00:00 +0000
ROA not before: Thu 14 Jul 2022 19:55:00 +0000
ROA not after: Thu 13 Jul 2023 20:00:00 +0000
asID: 61857
IP address blocks: 170.233.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0f:80:a9:51:df:0c:a7:e5:c0:d9:f3:87:a7:eb:7e:5b:0f:b8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDBB71BFB5C814DA471F371C214CD6D1C45122E9
Validity
Not Before: Jul 14 19:55:00 2022 GMT
Not After : Jul 13 20:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:3a:d5:bb:3b:f8:61:f7:ac:b3:bd:8e:ee:
1e:84:a9:40:7f:7a:fd:09:7d:77:ef:18:e6:ed:cd:
64:45:6e:fe:55:28:40:70:3d:24:95:c9:e4:fb:1b:
d0:d3:b2:fb:ab:ab:f7:76:15:7b:4b:1c:23:d3:20:
7a:01:5d:10:2a:d7:94:06:f6:b0:2d:13:04:48:41:
ca:c3:a0:a8:6b:e8:04:d7:83:12:ba:d6:c2:dd:4f:
4e:80:ac:1d:7f:a2:2b:39:31:2d:7e:96:55:84:b4:
71:db:b5:b7:85:2d:63:e9:3d:1f:a3:e2:dd:e7:f4:
91:b9:fd:40:b1:99:d3:7d:1b:db:69:b2:84:a2:c3:
1f:3b:33:3f:b8:f6:83:68:02:20:79:f9:36:af:85:
08:4a:c7:d1:be:82:d3:7b:e7:96:d6:61:6e:fb:32:
31:45:91:46:78:0d:87:74:97:a6:e2:37:00:c8:bc:
36:f9:e5:26:c7:73:b5:f9:77:33:8c:5a:56:03:62:
51:df:75:52:de:19:da:6e:cc:92:4e:32:7b:3c:70:
a6:0f:f8:4c:64:a4:83:28:e5:98:23:71:9f:ff:70:
47:b8:a9:48:ba:ca:98:fa:dc:fa:17:1d:b8:a0:42:
c0:7c:50:6b:ca:f3:bf:61:f8:72:d9:44:de:44:7d:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:16:55:9F:BD:B8:4A:B8:05:22:5E:54:FF:BE:73:80:01:95:5D
X509v3 Authority Key Identifier:
keyid:ED:BB:71:BF:B5:C8:14:DA:47:1F:37:1C:21:4C:D6:D1:C4:51:22:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBB71BFB5C814DA471F371C214CD6D1C45122E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32302e302f32322d3234203d3e203631383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.20.0/22
Signature Algorithm: sha256WithRSAEncryption
60:28:3d:01:3b:e7:a2:f1:03:d2:e0:6b:af:2a:9a:16:92:e6:
c4:a9:00:36:f8:09:0f:8c:a0:8e:8a:43:cc:c1:9d:73:79:42:
83:70:09:f5:23:d0:3b:d4:c9:9b:23:d0:6d:58:14:cd:95:3f:
60:cb:d3:5d:fd:ef:ca:3d:ba:8e:38:80:9e:c6:35:27:9c:2a:
f1:9d:7f:35:ca:a5:fa:03:97:24:f2:52:f2:06:7f:06:a8:d5:
12:e2:51:5c:15:71:3c:bb:bb:2e:54:ed:95:9c:fb:f9:99:df:
fa:5c:81:a9:eb:e1:48:be:53:11:e3:42:12:5d:85:f5:e5:df:
31:6d:74:86:a0:31:8f:cb:b4:08:98:df:54:08:2f:90:fa:6e:
24:94:f3:d1:1e:7d:8c:8d:1e:c3:70:24:12:3d:98:cb:84:cf:
36:c2:97:d1:95:7d:98:b5:66:37:5f:57:b1:6d:92:3f:62:a5:
a7:8f:8d:9d:a6:e6:25:71:c8:72:be:8d:d5:b8:41:0c:92:0f:
c5:9b:29:11:47:b7:3d:80:04:27:94:4a:2d:b1:6f:ab:b0:00:
95:a2:e8:9f:ff:88:d1:5f:9e:c2:b1:f0:53:d8:cf:fd:d2:f8:
83:cb:0d:37:f2:a5:19:29:73:6a:dc:e3:5b:88:b3:a1:e5:15:
8c:5c:32:95
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULw+AqVHfDKflwNnzh6frflsPuHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCQjcxQkZCNUM4MTREQTQ3MUYzNzFDMjE0Q0Q2RDFD
NDUxMjJFOTAeFw0yMjA3MTQxOTU1MDBaFw0yMzA3MTMyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDlBMTNBRDVCQjNCRjg2MUY3
QUNCM0JEOEVFRTFFODRBOTQwN0Y3QUZEMDk3RDc3RUYxOEU2RURDRDY0NDU2RUZF
NTUyODQwNzAzRDI0OTVDOUU0RkIxQkQwRDNCMkZCQUJBQkY3NzYxNTdCNEIxQzIz
RDMyMDdBMDE1RDEwMkFENzk0MDZGNkIwMkQxMzA0NDg0MUNBQzNBMEE4NkJFODA0
RDc4MzEyQkFENkMyREQ0RjRFODBBQzFEN0ZBMjJCMzkzMTJEN0U5NjU1ODRCNDcx
REJCNUI3ODUyRDYzRTkzRDFGQTNFMkRERTdGNDkxQjlGRDQwQjE5OUQzN0QxQkRC
NjlCMjg0QTJDMzFGM0IzMzNGQjhGNjgzNjgwMjIwNzlGOTM2QUY4NTA4NEFDN0Qx
QkU4MkQzN0JFNzk2RDY2MTZFRkIzMjMxNDU5MTQ2NzgwRDg3NzQ5N0E2RTIzNzAw
QzhCQzM2RjlFNTI2Qzc3M0I1Rjk3NzMzOEM1QTU2MDM2MjUxREY3NTUyREUxOURB
NkVDQzkyNEUzMjdCM0M3MEE2MEZGODRDNjRBNDgzMjhFNTk4MjM3MTlGRkY3MDQ3
QjhBOTQ4QkFDQTk4RkFEQ0ZBMTcxREI4QTA0MkMwN0M1MDZCQ0FGM0JGNjFGODcy
RDk0NERFNDQ3RDlFNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2aE61bs7+GH3rLO9ju4ehKlAf3r9CX137xjm7c1kRW7+VShAcD0k
lcnk+xvQ07L7q6v3dhV7Sxwj0yB6AV0QKteUBvawLRMESEHKw6Coa+gE14MSutbC
3U9OgKwdf6IrOTEtfpZVhLRx27W3hS1j6T0fo+Ld5/SRuf1AsZnTfRvbabKEosMf
OzM/uPaDaAIgefk2r4UISsfRvoLTe+eW1mFu+zIxRZFGeA2HdJem4jcAyLw2+eUm
x3O1+XczjFpWA2JR33VS3hnabsySTjJ7PHCmD/hMZKSDKOWYI3Gf/3BHuKlIusqY
+tz6Fx24oELAfFBryvO/Yfhy2UTeRH2eRwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPHyFlWfvbhKuAUiXlT/vnOAAZVdMB8GA1UdIwQYMBaAFO27cb+1yBTaRx83HCFM
1tHEUSLpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NiRk1hQkREd0JjQ1hX
U3RQa2dDUUxDRWtpN2R6eGdyQkV2Q0EyRlpmSmlNLzAvRURCQjcxQkZCNUM4MTRE
QTQ3MUYzNzFDMjE0Q0Q2RDFDNDUxMjJFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FREJCNzFCRkI1QzgxNERBNDcxRjM3MUMyMTRDRDZEMUM0NTEy
MkU5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DYkZNYUJERHdCY0NYV1N0UGtn
Q1FMQ0VraTdkenhnckJFdkNBMkZaZkppTS8wLzMxMzczMDJlMzIzMzMzMmUzMjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM4MzUzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrp
FDANBgkqhkiG9w0BAQsFAAOCAQEAYCg9ATvnovED0uBrryqaFpLmxKkANvgJD4yg
jopDzMGdc3lCg3AJ9SPQO9TJmyPQbVgUzZU/YMvTXf3vyj26jjiAnsY1J5wq8Z1/
Ncql+gOXJPJS8gZ/BqjVEuJRXBVxPLu7LlTtlZz7+Znf+lyBqevhSL5TEeNCEl2F
9eXfMW10hqAxj8u0CJjfVAgvkPpuJJTz0R59jI0ew3AkEj2Yy4TPNsKX0ZV9mLVm
N19XsW2SP2Klp4+NnabmJXHIcr6N1bhBDJIPxZspEUe3PYAEJ5RKLbFvq7AAlaLo
n/+I0V+ewrHwU9jP/dL4g8sNN/KlGSlzatzjW4izoeUVjFwylQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org