Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
File: 3230312e35352e3230302e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier: +ycB2JKUENC8qKUKFi8eX9hbtRzhAyfzCcAK217Avs8=
Subject key identifier: AF:5F:23:3D:05:9A:1C:2F:15:D9:D6:84:D9:17:81:6E:ED:5A:D4:7B
Certificate issuer: /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial: 401C5D8A213BE9C89B7BC71359A28671076A2E37
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
Signing time: Wed 20 Dec 2023 18:06:09 +0000
ROA not before: Wed 20 Dec 2023 18:01:09 +0000
ROA not after: Wed 18 Dec 2024 18:06:09 +0000
asID: 61784
IP address blocks: 201.55.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1c:5d:8a:21:3b:e9:c8:9b:7b:c7:13:59:a2:86:71:07:6a:2e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Validity
Not Before: Dec 20 18:01:09 2023 GMT
Not After : Dec 18 18:06:09 2024 GMT
Subject: CN=AF5F233D059A1C2F15D9D684D917816EED5AD47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:cc:97:06:03:bc:6c:2d:43:4c:27:7b:b8:
00:c0:f0:0d:0e:3d:cf:f0:13:e5:bc:14:69:7f:db:
07:49:43:c6:19:80:22:84:57:f8:9b:3d:a1:b5:a7:
3d:78:f9:53:fe:7c:9b:d1:c8:95:ac:c0:56:f2:90:
59:a0:e2:15:6a:39:9d:b7:d1:0d:e4:c6:a7:8b:aa:
ac:ab:14:1c:1e:11:17:8a:11:a6:4b:08:25:45:8c:
84:16:f6:23:83:1d:55:8f:63:12:92:19:23:b3:44:
93:83:e9:03:3b:8e:dd:29:e3:ce:b7:a6:58:c1:92:
30:0b:38:29:f7:9a:ea:08:10:fa:1b:8e:24:d2:78:
f6:c0:74:07:71:dc:77:55:75:4d:6b:b4:39:14:d2:
b8:a7:4d:c3:52:12:1e:bb:fb:84:85:a4:ec:1d:c5:
26:da:64:3d:ce:08:4c:cb:66:5a:04:28:69:6b:f4:
a3:ed:cf:79:9e:9f:46:2c:33:15:d1:c0:f9:23:e6:
fd:e1:0b:66:16:bf:c2:d1:e7:b4:9f:a2:de:54:46:
23:73:60:88:a8:54:b8:4f:d6:e8:f1:31:66:9a:01:
ce:1b:2d:ea:6b:e6:cb:c5:68:55:97:66:0a:18:0d:
60:fc:b6:96:c2:3e:cf:e9:55:d4:27:37:69:a6:36:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5F:23:3D:05:9A:1C:2F:15:D9:D6:84:D9:17:81:6E:ED:5A:D4:7B
X509v3 Authority Key Identifier:
keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32342d3234203d3e203631373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.55.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:18:61:ae:96:0e:f3:0d:9f:7a:25:64:bd:2f:f7:59:42:e4:
fe:b8:25:a1:c0:38:fc:ab:76:66:a2:26:e7:8d:98:12:13:62:
0e:98:70:d7:fa:db:0c:1a:ab:75:44:ed:a4:2e:3c:15:ab:9c:
b8:57:58:15:5e:a5:e0:26:0a:d9:69:60:18:1e:48:83:df:4a:
44:c1:dd:37:86:7a:2b:cc:a1:d0:87:25:b1:ea:a9:d6:bc:12:
0c:75:d4:33:dd:8b:d2:a0:bf:f3:29:65:f0:ec:59:a3:3c:a4:
ca:e4:ef:d0:99:d3:1a:48:2d:eb:ed:2a:d8:58:5c:da:53:a4:
45:7d:ae:7a:19:1e:11:df:69:47:87:17:d1:40:b4:a8:ce:54:
ca:ca:99:76:69:07:0d:2a:f9:28:cb:ac:29:a9:ee:fe:f1:79:
04:2f:91:90:84:d2:0c:40:0d:1c:0f:07:0a:55:37:5e:98:8d:
f2:63:5b:ce:65:6a:80:9d:76:a3:49:fb:58:d8:75:01:44:ea:
76:21:3d:58:66:69:18:3d:29:07:4d:49:b7:1b:d7:21:3a:92:
14:24:da:eb:25:3f:18:96:5e:2c:ad:76:ce:83:8a:c5:f1:d4:
52:f3:48:b4:c0:f3:e8:a1:2f:78:54:c4:1b:3b:e0:13:cc:7d:
1a:fe:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org