Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33352e302f32342d3234203d3e20323635303836.roa
File: 3137302e3233332e33352e302f32342d3234203d3e20323635303836.roa (raw, json)
Hash identifier: LVyoZ4p2ANQF4vzGdEKfwlfxzemBb6Xjm7tJMRf7wZg=
Subject key identifier: BE:3E:00:E2:63:A4:B1:1B:64:52:7D:A6:47:5A:47:93:CA:C9:14:0A
Certificate issuer: /CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
Certificate serial: 409A5D8260B9F21B149587DE1D0D19564DB6E13A
Authority key identifier: 89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33352e302f32342d3234203d3e20323635303836.roa
Signing time: Mon 18 Dec 2023 14:32:45 +0000
ROA not before: Mon 18 Dec 2023 14:27:45 +0000
ROA not after: Mon 16 Dec 2024 14:32:45 +0000
asID: 265086
IP address blocks: 170.233.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9a:5d:82:60:b9:f2:1b:14:95:87:de:1d:0d:19:56:4d:b6:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896366D576AA570C9FBD3BE87B6300CBDF5734A9
Validity
Not Before: Dec 18 14:27:45 2023 GMT
Not After : Dec 16 14:32:45 2024 GMT
Subject: CN=BE3E00E263A4B11B64527DA6475A4793CAC9140A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:cf:be:54:29:f2:c9:06:f1:72:22:ae:f2:
45:ff:be:22:b7:e9:bc:02:f0:a5:9f:bf:46:33:62:
21:69:1d:79:a3:06:a6:e2:f0:ad:d8:96:fa:1f:04:
fa:17:ab:40:73:0b:27:a4:1a:74:bd:12:b4:6c:21:
a0:82:fb:80:34:42:7a:de:2d:eb:59:3f:5a:ee:af:
ff:1d:15:25:26:e5:d9:e8:a0:a3:87:be:48:e3:b9:
57:a8:4c:4d:f7:70:75:4d:b2:66:58:fa:ec:ba:d2:
cc:b9:a1:18:9f:c8:df:fc:85:91:33:06:d6:1c:95:
d7:5f:33:e8:f5:f9:dc:73:43:db:c5:ec:3b:b1:53:
69:32:67:25:be:1a:3e:69:a2:f5:f1:21:7c:b8:c0:
57:f5:35:8c:9e:71:07:c8:99:99:8a:2f:1d:65:01:
30:36:7e:30:09:dd:ea:0d:37:f2:4f:d6:13:c8:2e:
b3:62:0a:8e:da:42:c6:47:7e:15:d1:83:1d:5b:57:
0a:58:ad:8c:c9:5a:f6:40:ac:41:8d:95:52:31:5a:
55:40:66:db:fc:a0:48:fd:12:d4:f7:32:a6:49:32:
fc:49:5d:69:60:4c:f4:d3:5a:cb:c0:56:be:b0:7f:
ea:5f:6a:f4:28:57:5b:fd:6c:58:2d:c4:82:8e:e7:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:00:E2:63:A4:B1:1B:64:52:7D:A6:47:5A:47:93:CA:C9:14:0A
X509v3 Authority Key Identifier:
keyid:89:63:66:D5:76:AA:57:0C:9F:BD:3B:E8:7B:63:00:CB:DF:57:34:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896366D576AA570C9FBD3BE87B6300CBDF5734A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/3137302e3233332e33352e302f32342d3234203d3e20323635303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d7:9d:55:96:05:31:e4:e5:29:67:88:5b:44:3d:01:d3:06:
b0:c7:4c:bb:d3:96:dd:5f:d6:bb:91:f5:c2:26:c6:14:ee:e0:
da:2a:38:69:0e:e6:05:d1:a3:49:16:92:ed:87:3a:2c:70:ff:
df:12:59:0c:a1:c7:29:c6:fc:7f:fa:dd:c7:44:2b:c0:f9:17:
83:6e:0a:34:74:95:0e:69:0c:be:88:39:33:e5:cd:2b:27:db:
c7:31:02:79:13:90:a6:c4:30:f9:b2:7e:e1:2b:49:e8:8a:8c:
ad:38:75:43:f3:e3:47:e0:d9:03:6b:5e:7a:28:8f:56:fa:e1:
56:38:94:53:34:0d:56:56:d0:c9:48:3a:41:c6:6a:06:29:02:
a9:38:c1:12:d9:51:6c:d5:db:fb:b5:a6:a7:a5:b0:51:35:7b:
70:d7:d0:34:9c:b1:57:0d:75:e5:c7:0b:2f:8e:5e:ef:39:8c:
23:c8:25:b4:db:b2:c2:7a:25:db:58:73:4e:24:29:42:96:63:
3f:99:b3:c7:de:50:20:6c:39:09:36:ac:af:c5:0f:4c:75:b2:
13:72:fc:8e:c0:5d:1b:43:ca:a5:78:fb:23:cf:b2:66:e0:71:
03:4c:61:7d:5a:10:54:90:e9:00:f1:6e:97:1a:59:07:b3:7c:
38:4a:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org