Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: Aa/nESEvEQcDWzgNOJZuqRWw0AL0s3gX4zlw6t/cOfc=
Subject key identifier: 20:60:6D:4E:CE:14:9D:D8:E1:36:ED:C9:20:BA:1F:2B:56:10:BC:F7
Certificate issuer: /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial: 20E1174183F3AEFDBC71854E28414698BA17D3B5
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
Signing time: Thu 14 Dec 2023 12:52:35 +0000
ROA not before: Thu 14 Dec 2023 12:47:35 +0000
ROA not after: Thu 12 Dec 2024 12:52:35 +0000
asID: 265080
IP address blocks: 170.233.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e1:17:41:83:f3:ae:fd:bc:71:85:4e:28:41:46:98:ba:17:d3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Validity
Not Before: Dec 14 12:47:35 2023 GMT
Not After : Dec 12 12:52:35 2024 GMT
Subject: CN=20606D4ECE149DD8E136EDC920BA1F2B5610BCF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:a7:e4:97:56:15:f6:de:a1:eb:62:3d:f4:
c6:21:72:27:82:bf:23:00:61:8b:4c:c0:22:56:be:
fe:3c:b8:01:15:75:a3:b9:13:10:0d:7f:c4:83:dc:
c0:1c:60:1f:46:fd:50:0f:48:92:d8:f5:a2:97:0f:
4d:bb:aa:95:b4:3d:6d:9c:67:98:2f:c8:b5:41:79:
c7:62:ed:21:56:28:1e:3c:ef:54:c3:01:dc:c5:d1:
05:30:e1:e9:da:9e:76:21:c4:90:c2:fe:ed:3f:7c:
a9:02:f5:70:e9:40:60:88:69:1e:e1:31:25:02:a1:
fc:2f:cc:ae:2a:10:1b:7a:b9:27:a6:ac:f1:43:d3:
0f:08:a5:e3:8d:27:cb:0d:aa:f5:c4:65:9d:19:03:
53:30:a4:86:4b:4d:05:65:58:bb:43:47:93:ce:58:
08:0d:d6:69:13:4f:cc:02:de:f6:09:4d:9a:3a:f6:
1d:c7:b5:d3:f2:74:2f:67:8e:28:ef:fb:1e:54:d1:
4b:04:63:d2:43:01:53:14:7e:47:3d:0b:47:d8:d6:
26:d4:9c:f7:7f:11:14:23:e3:3e:07:05:83:13:e2:
63:85:63:5f:40:45:1a:1b:29:5f:dc:30:59:3a:5a:
48:02:9d:68:29:a2:2e:60:64:7c:12:c7:67:c7:f3:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:6D:4E:CE:14:9D:D8:E1:36:ED:C9:20:BA:1F:2B:56:10:BC:F7
X509v3 Authority Key Identifier:
keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:10:fc:b4:51:2a:3b:9b:c4:15:3f:29:82:c2:75:1f:48:a2:
78:d8:9d:5c:78:ce:cd:f8:fb:fc:ac:ee:04:ab:bc:f7:a3:9b:
79:24:a3:3a:e2:ac:95:a3:b6:43:bf:5e:05:bd:d9:2c:88:36:
ef:cd:11:5c:0e:6d:d0:f7:bb:c3:09:24:9b:f7:18:a0:30:ec:
01:54:20:e6:d8:14:84:ae:03:44:7f:d0:de:7c:11:73:50:d9:
d9:fb:5b:8e:90:b2:3f:1a:6b:63:c7:a5:d6:00:79:00:fa:f9:
a7:5f:28:e7:0c:d4:8f:19:a2:02:47:06:ee:79:d4:cb:d3:0f:
68:8d:67:a0:7c:ad:9a:61:83:d4:85:4e:d6:66:f9:6f:93:db:
b1:21:fc:c7:f2:69:d4:d5:04:31:95:1a:d5:89:ea:9c:fc:04:
c0:d5:b1:8b:00:eb:00:a5:eb:fa:8e:7b:81:e0:28:f9:8d:46:
60:6e:62:e3:c4:10:3a:73:81:8f:aa:5d:42:95:17:6b:ce:6b:
0d:1f:d3:b3:1a:f2:fd:67:a7:9b:a7:a5:fd:1f:4a:9b:c1:fb:
10:e1:ec:f0:02:a4:1b:75:82:82:4a:96:66:27:30:b0:65:56:
fc:a7:1e:15:60:e9:bf:ef:3b:bf:71:c0:cd:0d:e8:a8:56:7e:
53:1c:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org