Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
File: 3230302e3135322e38382e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier: ZArJrQQ7rLCA2ut1H6i3xL+bKLzOpalSX/ApjjsxxAM=
Subject key identifier: 0A:91:28:FE:B6:B4:ED:2F:5E:B9:5B:F1:09:F3:1E:52:B4:4C:00:B1
Certificate issuer: /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial: 2B135B84CCF296DA6DAFE96B43D72499BA1C2B5F
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
Signing time: Mon 09 Jan 2023 12:59:13 +0000
ROA not before: Mon 09 Jan 2023 12:54:13 +0000
ROA not after: Mon 08 Jan 2024 12:59:13 +0000
asID: 22706
IP address blocks: 200.152.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:13:5b:84:cc:f2:96:da:6d:af:e9:6b:43:d7:24:99:ba:1c:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Validity
Not Before: Jan 9 12:54:13 2023 GMT
Not After : Jan 8 12:59:13 2024 GMT
Subject: CN=0A9128FEB6B4ED2F5EB95BF109F31E52B44C00B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:10:2e:31:fe:75:13:11:36:9f:7f:c7:57:
2d:fa:ab:46:40:88:f8:a6:da:96:b5:38:81:49:7f:
dd:3f:8e:63:d8:d6:55:34:8d:b4:62:f7:db:3e:89:
18:5a:a6:1a:62:a8:02:bf:e0:8d:f7:e6:6d:6e:0d:
4c:71:e1:79:e1:30:76:c5:bf:20:8c:52:1b:b6:7e:
d8:b5:f5:60:e0:78:45:44:24:ac:38:04:b2:f2:9e:
6d:33:0d:33:b9:c5:4e:14:68:f6:d7:b7:f6:48:a5:
d2:a1:ca:74:da:ec:59:a2:23:68:b3:f2:76:2c:61:
8d:4b:bb:7c:0b:f3:1c:dc:6f:47:c9:0c:93:dc:2c:
32:94:d7:78:7a:73:b4:26:6d:04:bb:19:97:90:e3:
81:40:a5:c2:8b:b8:e8:6a:c7:23:3a:ad:b9:30:ed:
17:32:4a:82:5d:b0:3e:10:f0:98:b9:07:66:db:b6:
89:31:cb:3c:1f:a8:fb:4d:28:14:4e:27:c6:78:e2:
25:11:50:cf:72:e5:a0:f8:57:93:c1:b9:7a:aa:53:
31:c3:8e:32:ca:02:65:ca:09:b7:24:b3:b9:20:f3:
7f:72:42:e3:b5:d0:9e:8d:36:51:1d:41:ac:46:c3:
aa:b6:b0:bc:a9:e3:48:54:02:99:cf:ca:8f:44:f5:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:28:FE:B6:B4:ED:2F:5E:B9:5B:F1:09:F3:1E:52:B4:4C:00:B1
X509v3 Authority Key Identifier:
keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.88.0/21
Signature Algorithm: sha256WithRSAEncryption
25:22:1a:a3:fa:24:ff:11:c9:c8:73:1f:3f:32:c6:cc:4d:8f:
7e:9d:a9:a4:79:d5:1c:e8:f6:45:dd:47:b5:dc:4a:f8:25:d2:
72:56:df:36:6d:ff:6b:17:24:9d:87:d4:16:06:19:72:7c:54:
89:1b:3f:9a:61:47:10:90:7e:3d:09:10:68:16:0e:36:a5:12:
a7:95:bf:aa:8b:8f:db:f0:6c:0b:3f:ac:6d:28:b8:17:86:30:
52:9b:c5:c8:12:97:86:f6:7d:f9:cf:0a:69:dd:f2:ca:2a:b9:
b3:7c:8e:37:83:71:fe:bc:30:57:a3:7d:2e:5b:41:79:b7:cd:
24:9d:c7:ac:54:c2:e2:e9:e8:7c:af:8c:a4:11:60:93:6d:db:
b1:71:d0:8d:b3:22:db:7f:ae:29:4a:83:85:59:8a:d6:45:28:
b6:fd:8d:1d:06:1e:19:45:bf:11:89:a1:5e:9f:fe:70:b4:51:
53:25:21:cd:ce:87:d1:d7:79:cb:95:76:95:45:a5:d7:88:66:
8d:88:ff:ee:73:27:82:28:da:5d:1f:e3:bb:02:07:31:bd:58:
68:12:5f:81:cf:08:db:f8:33:0c:af:07:f2:65:6c:71:3a:a0:
3e:e0:e6:20:cd:b4:10:7d:89:20:cb:dd:d1:50:35:ca:fc:02:
0d:e3:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org