Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: +uLKEviI9Kp9SUB6JFK5sjeDn1G1IFxQ5jaxU+vk6OE=
Subject key identifier: C4:53:46:11:65:69:B7:88:1E:15:C0:F6:B3:9D:6D:EE:6E:E6:5E:64
Certificate issuer: /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial: 5C115D2F1B3A14670766F4CE39B20E28F2EEF40D
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
Signing time: Tue 05 Sep 2023 18:30:13 +0000
ROA not before: Tue 05 Sep 2023 18:25:13 +0000
ROA not after: Tue 03 Sep 2024 18:30:13 +0000
asID: 265080
IP address blocks: 170.233.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:11:5d:2f:1b:3a:14:67:07:66:f4:ce:39:b2:0e:28:f2:ee:f4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Validity
Not Before: Sep 5 18:25:13 2023 GMT
Not After : Sep 3 18:30:13 2024 GMT
Subject: CN=C45346116569B7881E15C0F6B39D6DEE6EE65E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:5b:dd:d5:c0:11:ff:14:cb:28:f0:19:7a:
08:53:62:b5:55:50:e5:62:43:67:1b:19:cb:f1:71:
f2:66:e5:3e:f5:d6:4c:e1:e5:5d:51:e4:40:0d:c8:
f0:aa:e0:76:93:6e:aa:cd:5e:f4:5d:de:77:f2:fd:
7d:db:b0:6b:32:8f:82:8a:16:0a:0b:a0:55:67:c4:
33:86:f6:a1:76:df:1e:ee:3d:22:4e:cf:87:96:4d:
4d:7f:f0:82:84:b0:41:5f:a2:70:09:34:b1:3b:51:
8d:b9:d0:c3:63:0c:0c:21:fa:9f:2e:d3:06:6a:f9:
72:10:1d:1a:2f:e9:31:fd:83:ce:51:36:e3:98:28:
06:79:55:ea:5e:6b:1a:9c:68:dc:8d:77:1b:c2:4c:
ed:c4:9a:2e:87:f7:7f:27:a6:a1:fb:09:b1:3c:85:
06:2c:2d:d2:85:16:6b:26:32:ea:81:ac:34:6a:54:
66:dd:e2:71:7b:0f:ce:c9:b9:48:77:02:6b:22:be:
1f:a6:36:d3:64:37:de:c3:d7:b5:f8:1b:1e:01:c7:
75:48:80:67:e1:6d:27:54:ec:88:01:d3:46:38:a0:
30:69:3d:5c:40:07:03:ed:7f:54:87:32:1f:65:da:
fe:63:2b:2e:04:65:f9:9f:24:b6:81:c7:95:7d:20:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:53:46:11:65:69:B7:88:1E:15:C0:F6:B3:9D:6D:EE:6E:E6:5E:64
X509v3 Authority Key Identifier:
keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8d:fe:35:95:89:14:71:34:53:7a:1e:dd:84:42:41:3a:50:
e3:39:ad:ee:df:0f:78:a9:c6:bf:02:35:44:f5:db:c9:5a:01:
67:ad:ab:e2:fb:2e:46:c4:9a:70:bb:db:98:40:7b:5a:aa:a5:
e8:86:f4:22:47:80:38:37:fc:72:14:e2:9c:f6:8a:ab:b5:f5:
2d:f6:fd:24:cc:60:ef:36:04:bd:b2:76:60:fd:ec:19:8c:e8:
7f:30:a3:d0:bd:dc:58:12:24:6c:53:35:b4:58:be:26:38:3b:
67:41:bb:6b:86:c6:90:07:c0:11:c6:b0:03:ab:6f:85:f5:96:
4b:8c:7c:16:a4:c6:cd:8c:89:fc:c9:81:46:8c:cc:dc:32:52:
94:7d:5c:be:b9:a3:3f:1f:27:ee:6e:f5:d1:2e:d7:43:bd:97:
3a:6e:63:99:fb:27:e6:01:ff:08:a5:06:e9:29:dc:f5:99:a5:
45:bd:58:80:ff:fc:4c:d6:4e:e5:83:4e:76:d8:79:0b:1a:ef:
ba:04:0d:b1:19:ff:04:3d:38:3a:57:e0:af:1f:36:18:7d:00:
60:94:0e:c5:cd:83:f7:30:93:e9:5f:f6:c9:80:d8:bd:04:b1:
0a:d7:75:40:53:d9:88:ac:24:a3:9d:ed:35:66:0e:d0:f4:a3:
0b:ed:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org