Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32302e302f32342d3234203d3e203631383537.roa
File: 3137302e3233332e32302e302f32342d3234203d3e203631383537.roa (raw, json)
Hash identifier: WtGIJTa+et+r7g9LnOH15vqg5U2DQ1Aq+taY5RN1FVo=
Subject key identifier: 5E:23:3C:4B:9A:59:72:47:07:DF:7B:E4:68:75:D6:6A:88:DC:7C:17
Certificate issuer: /CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
Certificate serial: 355298C6F1CF7E6D1D5869B2DF235646DB32082F
Authority key identifier: 38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32302e302f32342d3234203d3e203631383537.roa
Signing time: Wed 17 May 2023 12:39:58 +0000
ROA not before: Wed 17 May 2023 12:34:58 +0000
ROA not after: Wed 15 May 2024 12:39:58 +0000
asID: 61857
IP address blocks: 170.233.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:52:98:c6:f1:cf:7e:6d:1d:58:69:b2:df:23:56:46:db:32:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
Validity
Not Before: May 17 12:34:58 2023 GMT
Not After : May 15 12:39:58 2024 GMT
Subject: CN=5E233C4B9A59724707DF7BE46875D66A88DC7C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:07:c9:d9:56:6c:88:84:9e:7d:80:9a:6d:
b6:61:7f:e3:15:82:f3:05:82:f6:ef:1b:56:f4:51:
31:53:82:9f:95:88:b6:78:af:dc:66:91:7d:db:55:
bb:0e:a5:ca:47:8c:32:64:8a:a5:3c:3d:9d:c7:5d:
e9:02:60:6e:af:bf:25:28:6c:ea:05:9a:e5:ff:2a:
a9:33:cc:47:9b:39:36:8c:03:15:54:71:ca:90:93:
40:7d:ad:8a:7d:f1:ab:b6:67:d4:7b:b2:ca:8c:0d:
e6:3d:7f:9b:a1:51:76:e4:a6:75:3f:ce:9f:ae:a9:
e4:a6:8d:1c:ef:84:cf:1a:01:e9:6b:11:2a:ca:24:
5f:d1:43:01:62:e1:0b:3f:5a:9a:09:91:95:17:3c:
d8:c1:e3:81:a9:74:08:e9:44:47:0d:77:4c:d2:d5:
ab:34:2b:be:ac:04:93:5e:32:04:6c:be:42:3b:5f:
78:02:25:1e:c6:bf:67:c8:34:70:40:ea:7a:e4:10:
81:6f:5d:d0:a5:59:21:cb:f9:a6:14:18:27:57:61:
53:1e:9b:fd:ad:97:5a:b5:52:37:db:22:12:ab:61:
07:b8:2f:06:dd:68:32:9b:6c:d9:30:74:ff:ae:88:
a1:55:20:34:d7:8a:99:10:a8:bc:39:a0:54:89:6e:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:23:3C:4B:9A:59:72:47:07:DF:7B:E4:68:75:D6:6A:88:DC:7C:17
X509v3 Authority Key Identifier:
keyid:38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3137302e3233332e32302e302f32342d3234203d3e203631383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.20.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:38:3c:04:e5:34:30:d2:85:80:ee:73:1e:30:b1:d6:97:
cb:34:55:3a:54:e2:d1:14:d0:fe:d1:4b:77:0f:d2:ee:22:86:
f3:c8:2b:2a:88:37:38:29:32:9d:54:8d:0e:7c:cd:f6:56:00:
1a:57:cf:ff:25:50:73:41:1e:c7:43:1e:1d:91:01:a7:fb:fd:
76:54:77:eb:7d:75:9b:fc:73:2e:ed:5a:16:f9:fb:53:b7:fd:
69:3b:6b:94:af:93:32:f9:04:e9:07:8c:45:7a:d7:c4:a4:8f:
34:20:c9:45:60:67:41:68:4c:cc:a0:a4:a8:25:4d:01:49:20:
69:53:ab:72:c5:25:a6:d8:cf:7e:f0:68:cf:13:a6:fc:47:c8:
0f:38:1d:72:00:5b:82:7e:47:ef:5d:90:7a:0d:cc:81:a9:fc:
43:11:cd:79:62:dc:69:2d:2c:85:34:94:6e:ba:3d:e9:b8:ff:
9a:cf:41:d8:9e:90:b0:54:d7:37:47:e3:88:f0:ff:1d:8e:cd:
7c:3e:85:ae:73:18:2a:71:17:a4:14:d8:48:46:4d:22:cf:77:
8b:f9:a3:57:4a:cf:75:80:f9:62:99:4c:04:e2:17:5b:c8:20:
b4:cd:a6:d3:a0:64:c0:7f:0e:bf:57:0b:fb:fb:c0:a7:26:22:
4d:41:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org