Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: m2gRncOiku0Nn/04sE7GEdTNSyJelofne3fjGnOeiW0=
Subject key identifier: 07:08:74:CE:D8:11:15:47:E3:33:D7:2E:39:EC:85:82:7C:DA:D1:06
Certificate issuer: /CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Certificate serial: 44DF282B702C113A2C4BE17DFD617265189A7CF5
Authority key identifier: 20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
Signing time: Thu 14 Dec 2023 12:52:35 +0000
ROA not before: Thu 14 Dec 2023 12:47:35 +0000
ROA not after: Thu 12 Dec 2024 12:52:35 +0000
asID: 265080
IP address blocks: 170.233.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:df:28:2b:70:2c:11:3a:2c:4b:e1:7d:fd:61:72:65:18:9a:7c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209EFCD0E737A4897116B0C61EAC64613B3DD25C
Validity
Not Before: Dec 14 12:47:35 2023 GMT
Not After : Dec 12 12:52:35 2024 GMT
Subject: CN=070874CED8111547E333D72E39EC85827CDAD106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:f6:c1:a6:8d:19:45:9f:c8:04:95:c6:b0:
39:fe:95:4e:0d:94:12:39:42:22:11:ef:81:d9:b0:
dc:88:34:50:b3:01:ed:96:c5:fe:e9:8a:ea:c9:6e:
7b:e2:ac:61:2e:fa:1e:88:4c:9a:b4:4d:84:02:2f:
0f:29:35:6d:74:e7:43:12:c3:d8:02:6f:1c:52:93:
95:7e:b3:d4:2f:ea:42:30:93:18:ab:68:2d:10:59:
f3:4c:7d:fe:2b:09:c1:cb:f4:c6:c9:a9:5a:95:e9:
c9:7f:e7:f0:f5:1d:0c:e7:2a:a9:5a:c6:22:8c:87:
b6:f0:77:49:23:88:24:a7:29:75:8b:08:98:3b:f6:
5d:97:1f:4e:bc:17:eb:0d:13:84:f3:da:f1:e5:fd:
f4:b7:79:0b:ce:1e:d7:81:47:12:15:21:c7:f7:77:
04:e9:21:6a:58:9d:8c:62:74:fd:50:b8:86:85:e8:
17:bb:8e:89:6c:bc:8a:f2:55:47:67:25:e6:32:62:
fd:50:ac:6b:aa:74:e2:43:c0:2b:57:e1:9e:12:f3:
a4:27:53:9f:7a:86:8e:da:a7:27:bc:60:88:5c:e4:
ef:ef:5d:a4:14:91:b6:b8:d2:bb:f5:5f:64:1f:13:
d5:08:be:82:30:2d:e9:4b:ed:f6:f1:55:83:8c:46:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:74:CE:D8:11:15:47:E3:33:D7:2E:39:EC:85:82:7C:DA:D1:06
X509v3 Authority Key Identifier:
keyid:20:9E:FC:D0:E7:37:A4:89:71:16:B0:C6:1E:AC:64:61:3B:3D:D2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/209EFCD0E737A4897116B0C61EAC64613B3DD25C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9a:d6:8d:9c:62:c4:bb:f5:36:89:f4:4a:2a:d7:46:a9:be:
b4:b3:41:3a:76:b7:8a:47:ba:b1:2e:a3:e2:cd:fb:4c:2e:8a:
98:e2:00:4e:91:0f:db:16:4e:5e:7c:d0:e2:1c:e6:81:f9:d0:
a4:0a:b0:72:e6:07:b3:82:54:1a:ff:1d:b1:09:e6:9b:64:bc:
c7:7a:2d:1b:34:8a:9d:83:64:d7:63:07:cf:c3:e1:3b:de:f1:
30:3b:3f:83:f8:dd:0a:61:fc:39:ea:dd:5d:b4:b4:46:65:7d:
80:73:d9:f8:44:f9:c9:c7:9d:9c:d5:05:fd:f6:5e:1b:58:f4:
40:27:e2:38:9b:6d:b3:6e:7b:7a:39:e0:4d:05:79:f6:60:0c:
68:0c:2d:3e:83:0d:a7:54:a0:eb:95:e5:18:6e:34:85:25:dc:
e1:36:e3:23:18:d8:36:11:93:c3:49:e2:b7:46:56:2b:65:1c:
d5:65:20:88:0a:5f:01:8c:5a:67:76:8c:11:16:73:4b:64:07:
2b:d9:6c:07:d6:3b:13:f0:b1:dd:0a:5a:84:89:31:84:a3:3e:
84:fd:6c:2d:b7:7a:1b:e5:c1:1f:c9:88:66:65:df:15:bd:18:
6e:64:ab:4c:23:8a:50:cc:4f:d6:c3:86:cc:ce:c8:24:15:9e:
8b:e2:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org