Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa
File: 3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa (raw, json)
Hash identifier: co7cJAYJ+JZNp0gBPPe4vKMjUfzRZKFHk2y95Nhz/JI=
Subject key identifier: F6:4A:84:0C:5C:75:81:D2:F9:3E:90:8F:E4:2C:D3:23:B1:BA:03:A3
Certificate issuer: /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial: 622ADC43C51A05C0520E8EFD3AA480DA3B3E04B0
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa
Signing time: Tue 05 Sep 2023 18:30:13 +0000
ROA not before: Tue 05 Sep 2023 18:25:13 +0000
ROA not after: Tue 03 Sep 2024 18:30:13 +0000
asID: 265080
IP address blocks: 170.233.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2a:dc:43:c5:1a:05:c0:52:0e:8e:fd:3a:a4:80:da:3b:3e:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Validity
Not Before: Sep 5 18:25:13 2023 GMT
Not After : Sep 3 18:30:13 2024 GMT
Subject: CN=F64A840C5C7581D2F93E908FE42CD323B1BA03A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:ef:92:68:b4:a1:cd:6d:2d:62:ee:7d:67:
af:f8:10:4f:e7:35:13:ac:ac:55:32:a2:06:c2:38:
25:b3:90:fa:2d:f4:5a:f6:0c:b9:0c:4d:cd:c1:20:
87:25:6a:45:7f:74:e4:fb:25:ee:2b:36:32:66:55:
f0:88:33:2e:36:56:80:82:3e:d5:2e:b4:f1:c6:91:
ea:80:56:f0:33:23:b8:d9:d0:b5:3a:da:1f:e1:2e:
a9:fb:58:ed:21:89:e0:fa:20:bd:d4:18:ed:db:f0:
84:0b:ae:76:d4:14:0b:05:32:72:b4:9b:a9:ac:78:
c5:55:8a:ab:be:ba:bf:b7:7e:0e:d8:fa:d9:e9:f1:
e2:7a:07:f1:67:0a:43:ee:af:72:1d:c1:3f:96:f3:
5d:b4:03:6d:d0:9c:f7:49:11:47:ae:56:46:6c:25:
f2:4c:b8:69:4c:5f:3b:ba:0b:ce:4c:ee:f2:ce:7d:
4e:b4:af:4b:fb:38:63:3f:81:6e:35:54:ea:64:f9:
f3:50:42:0a:8f:d0:20:16:6a:d6:3e:8c:c6:78:da:
95:da:b7:91:e5:c8:cd:5f:f2:e6:56:7f:11:db:18:
ff:de:a2:b0:49:9f:7b:dd:5e:46:9a:58:03:3e:22:
c5:b2:20:dd:c8:ba:03:23:de:f2:75:c5:9f:4e:c3:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4A:84:0C:5C:75:81:D2:F9:3E:90:8F:E4:2C:D3:23:B1:BA:03:A3
X509v3 Authority Key Identifier:
keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.120.0/22
Signature Algorithm: sha256WithRSAEncryption
63:27:9e:82:86:a3:fc:50:53:f8:17:43:c4:02:27:f5:f5:a1:
ae:c5:d1:6a:43:bc:f3:8f:db:6b:bb:a4:39:36:16:1f:62:2c:
21:33:7a:b1:67:4b:7e:45:1b:51:1e:87:6f:e7:ae:29:d5:e5:
bc:fc:2d:a2:b8:65:3c:c4:b5:35:43:70:c8:c7:52:bb:0a:23:
1c:fb:bf:b1:0c:ea:01:51:25:50:d3:cf:af:14:9c:d6:8d:e1:
ac:5e:8c:28:1c:70:18:7d:e1:55:51:32:26:4e:ee:32:d8:8f:
23:75:0b:1e:80:d6:93:55:fe:7e:c0:b0:ad:d3:a6:7b:c7:fa:
40:5e:f7:ad:f4:e3:a3:7b:bf:b2:1a:64:b1:4d:2c:33:0b:3f:
94:fe:5c:04:9f:51:d6:3f:07:89:12:2d:cf:7e:10:42:c3:9d:
9c:20:f7:f7:e6:89:29:88:4a:3b:bb:c8:0f:ff:6e:01:eb:37:
40:7b:c7:ac:92:7c:82:ca:82:2c:85:51:ba:df:62:c1:db:26:
b0:ad:05:0f:af:4e:d1:65:82:28:c3:d4:9d:28:ec:be:37:3c:
8a:13:67:9c:58:c0:a8:96:3b:78:05:3a:28:ea:11:ea:81:e9:
bb:fd:5c:7e:d1:0d:fe:84:b6:f0:c4:f6:4d:03:5d:34:0f:be:
66:3a:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org