Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32322d3232203d3e20323636333630.roa
File: 3137302e3233392e3235322e302f32322d3232203d3e20323636333630.roa (raw, json)
Hash identifier: 9cfXe7IllrEY8YT0qntt9gy9P/4NmjAEE1G9MUt/u9Q=
Subject key identifier: 18:3F:10:9B:E2:CE:59:58:DD:52:58:84:FC:6D:51:B9:C7:CD:E3:09
Certificate issuer: /CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
Certificate serial: 5A4D4DE7EACFC3687588AA7E1D30D7BBD24D0F9D
Authority key identifier: B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32322d3232203d3e20323636333630.roa
Signing time: Thu 05 May 2022 16:58:18 +0000
ROA not before: Thu 05 May 2022 16:53:18 +0000
ROA not after: Thu 04 May 2023 16:58:18 +0000
asID: 266360
IP address blocks: 170.239.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4d:4d:e7:ea:cf:c3:68:75:88:aa:7e:1d:30:d7:bb:d2:4d:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA
Validity
Not Before: May 5 16:53:18 2022 GMT
Not After : May 4 16:58:18 2023 GMT
Subject: CN=183F109BE2CE5958DD525884FC6D51B9C7CDE309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:f5:bc:74:61:6c:da:45:ad:8a:4b:85:ea:
8e:7b:7c:66:6a:c3:a3:4b:83:83:06:58:82:56:c5:
14:8a:0e:51:cc:7c:d8:46:c2:f7:8e:91:9c:7e:66:
ae:3b:42:41:3e:30:67:d5:49:42:eb:42:6d:09:39:
aa:c8:f2:0e:05:63:07:a5:c5:0f:de:24:4c:6f:ae:
18:03:a5:33:79:00:2e:2b:fa:8f:5d:26:e2:de:fd:
fa:a8:29:7e:42:58:05:44:2b:9c:63:f6:b6:3f:93:
f9:3c:3b:c3:aa:91:83:4c:e6:78:fb:83:c4:bb:46:
88:82:47:c9:28:b6:23:06:c2:12:c9:e1:bf:87:d0:
3c:92:aa:32:60:60:6a:25:c9:7c:6f:65:87:1b:3f:
23:00:7a:52:75:cf:53:d5:35:2a:8b:b9:c2:90:8c:
68:02:a8:25:39:4a:42:7c:29:99:e5:06:9c:ca:21:
5f:ca:6b:8d:1a:c7:3c:8b:03:6e:2c:bf:f7:ef:06:
89:24:69:71:d5:0e:f8:29:8a:a6:c3:4c:7d:0a:87:
8b:b4:b0:1a:b0:77:af:a1:0d:7e:18:7a:47:fc:9b:
08:ab:9e:99:e6:92:d8:62:83:5f:8d:cb:4d:e1:30:
64:07:5d:a5:96:27:5e:3b:9f:e7:d8:86:4d:ff:32:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:10:9B:E2:CE:59:58:DD:52:58:84:FC:6D:51:B9:C7:CD:E3:09
X509v3 Authority Key Identifier:
keyid:B6:6F:95:59:0F:BF:24:05:A4:D5:B9:ED:87:88:EC:EA:D8:74:B9:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B66F95590FBF2405A4D5B9ED8788ECEAD874B9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235322e302f32322d3232203d3e20323636333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.252.0/22
Signature Algorithm: sha256WithRSAEncryption
89:02:df:1d:55:a3:ee:f6:8f:3a:de:31:95:f0:28:28:f7:3a:
e4:67:f4:80:a6:27:32:ab:3a:8c:d3:81:11:0e:44:fa:86:32:
71:d8:a1:09:65:0b:b0:88:5d:ea:62:d0:59:ed:42:75:d5:0c:
fd:ee:ed:26:d6:62:1b:2e:00:b0:24:b7:9f:d3:bc:77:df:07:
86:16:3e:7b:b5:26:d6:b7:52:b5:8c:ca:db:e6:11:93:90:f3:
ce:e1:69:3a:fa:4e:6e:a6:19:78:26:79:e3:b1:e2:f5:10:23:
a5:e0:9f:10:84:35:eb:65:73:8f:9b:fd:28:41:6e:dd:10:97:
7e:bc:37:34:0b:91:87:b9:b6:78:a4:2a:4a:da:01:c5:62:bc:
84:c2:16:65:de:46:b8:19:b1:cb:15:d8:e0:51:3f:c8:4c:42:
1d:86:00:82:30:60:71:e9:f9:f6:0e:44:4e:be:2c:d6:6f:e0:
73:8a:62:df:91:1b:69:aa:06:e8:2b:4c:d8:f9:3d:f6:ad:fb:
dd:6b:df:8c:68:ac:d0:0a:47:33:fb:d9:5a:f9:cd:e5:cc:00:
04:f2:39:1a:57:d4:2b:99:18:96:06:8b:90:50:cd:22:d5:c6:
d7:00:02:42:bc:50:78:73:a3:a4:bd:3f:dd:3b:e5:d7:d1:00:
cb:86:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net