Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: 3fZBVnPFWilh6gec8Y4+z7er4vX4lrX2a1V/57TmVws=
Subject key identifier: 3E:64:4D:E1:F9:A0:58:20:F2:4C:F4:B2:DD:CC:20:82:A3:2B:D4:C0
Certificate issuer: /CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Certificate serial: 1E0C4DA2CFB6AAC20B91E7B5A8B8202B13FB916F
Authority key identifier: BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
Signing time: Tue 05 Sep 2023 18:30:14 +0000
ROA not before: Tue 05 Sep 2023 18:25:14 +0000
ROA not after: Tue 03 Sep 2024 18:30:14 +0000
asID: 265080
IP address blocks: 170.233.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0c:4d:a2:cf:b6:aa:c2:0b:91:e7:b5:a8:b8:20:2b:13:fb:91:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA520D0B6F57ADBA4A0578B91221BBAA1585348F
Validity
Not Before: Sep 5 18:25:14 2023 GMT
Not After : Sep 3 18:30:14 2024 GMT
Subject: CN=3E644DE1F9A05820F24CF4B2DDCC2082A32BD4C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:92:70:19:b1:6b:ad:13:7f:9a:a2:72:25:
ef:40:fc:43:2c:1f:a0:61:d5:66:01:63:a2:48:1c:
f2:fc:55:5b:19:50:c7:29:54:6c:23:93:da:2d:2e:
26:bb:60:53:8d:bc:85:33:6b:07:f3:ce:97:6c:0a:
05:e5:db:69:6f:2f:70:d0:c4:1e:38:09:85:56:0c:
ec:cf:d0:e5:36:9e:cc:4a:b2:0c:72:ea:f7:e3:39:
80:6f:69:af:ac:c7:04:cb:56:28:be:5d:33:6c:cd:
d7:fe:9d:d3:cb:3c:0d:a9:59:cf:dd:29:2a:f8:d7:
46:a8:eb:62:cd:70:0d:a2:d1:b4:80:b4:8b:a9:c5:
29:5b:3f:59:1c:50:0e:ef:ab:d8:cf:5d:00:b4:4a:
7a:04:11:2e:f9:e8:42:45:b7:e7:ea:23:31:37:18:
10:54:ab:85:ca:3d:6f:36:18:eb:3a:fc:fe:e1:8b:
97:d3:8f:15:5e:dd:a4:63:22:fa:1c:1a:c3:49:19:
74:9a:db:2c:df:8d:86:ba:e4:37:eb:48:dc:54:47:
f9:8f:79:51:de:cd:b8:96:ef:7b:10:b6:d6:24:39:
8c:26:97:01:83:96:74:16:d8:64:08:f5:cb:71:0b:
8d:dd:5d:de:0c:2d:4f:47:3a:8d:2d:18:f5:45:7f:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:4D:E1:F9:A0:58:20:F2:4C:F4:B2:DD:CC:20:82:A3:2B:D4:C0
X509v3 Authority Key Identifier:
keyid:BA:52:0D:0B:6F:57:AD:BA:4A:05:78:B9:12:21:BB:AA:15:85:34:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA520D0B6F57ADBA4A0578B91221BBAA1585348F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/2/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bb:ba:45:fe:a7:6c:d2:7b:5e:de:b1:de:da:f1:53:21:de:
3a:ce:75:87:db:63:13:b0:f5:61:f2:46:0b:e7:9f:35:c3:bc:
5a:9e:13:0f:12:e0:8f:7b:41:27:ac:a5:a0:e6:fb:a8:5e:9c:
d8:4e:15:30:7e:36:ca:6b:98:44:dd:ee:e7:a4:89:57:7a:9a:
5c:ff:be:93:f2:4a:17:0c:d8:8d:2d:74:48:65:8d:c2:9e:44:
bb:5e:30:31:d6:37:0e:2e:38:fa:2d:a6:dd:17:94:1c:07:4b:
a1:1f:48:d9:80:e6:5f:93:9c:14:12:bd:97:a0:13:bb:36:78:
d2:16:5e:6e:5e:6e:b0:75:b9:5f:11:bb:f4:17:36:2a:ad:4f:
57:a4:16:4e:67:8f:e5:78:c6:19:bf:36:6f:ae:13:c4:f5:cb:
2a:e8:ba:00:53:95:a4:e6:a9:22:d7:9a:c9:d4:ea:75:59:d9:
2b:54:fd:d5:56:8c:34:ed:e9:7e:d1:22:33:56:73:a7:04:93:
6b:46:28:b5:ba:9e:77:da:bd:85:fa:9c:13:a9:b3:51:05:41:
5b:0d:65:67:a2:94:01:66:8a:0d:8f:26:28:c2:a6:0d:09:ce:
74:78:0c:05:33:ab:b5:1f:53:f1:48:9c:4c:c8:fe:73:7c:09:
60:a2:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org