Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa
File: 3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa (raw, json)
Hash identifier: qFEO5y1vMoLf7Ns+niMWkE2WkuazyDjTuKv6z6hLdII=
Subject key identifier: B7:90:DF:D0:E5:6A:59:ED:E9:3A:A0:83:E5:FE:C9:1C:C2:45:B8:70
Certificate issuer: /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial: 188FFB29427E32893EFB408396E00DF39AB0522D
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa
Signing time: Mon 04 Sep 2023 19:54:47 +0000
ROA not before: Mon 04 Sep 2023 19:49:47 +0000
ROA not after: Mon 02 Sep 2024 19:54:47 +0000
asID: 52873
IP address blocks: 177.128.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8f:fb:29:42:7e:32:89:3e:fb:40:83:96:e0:0d:f3:9a:b0:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Validity
Not Before: Sep 4 19:49:47 2023 GMT
Not After : Sep 2 19:54:47 2024 GMT
Subject: CN=B790DFD0E56A59EDE93AA083E5FEC91CC245B870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:05:4b:02:6e:3f:66:64:73:07:8d:ba:db:
4b:c9:41:5c:55:4b:e2:64:d7:38:99:a7:61:fb:97:
38:22:de:b0:5c:f4:2d:f2:7f:cc:a3:13:9d:94:48:
43:b7:f8:bb:d5:98:20:ec:6d:eb:e6:65:83:94:ec:
f1:28:26:c7:e6:7f:9b:f6:4b:ce:27:11:71:c0:c7:
8e:e9:39:18:d6:8d:48:a1:f0:fe:c7:b7:57:00:62:
49:f2:8e:05:f7:f8:73:01:3c:36:1a:25:4b:50:e6:
7c:05:73:31:b9:53:3c:7e:b6:06:66:66:d3:cb:ac:
90:4b:27:05:aa:b5:20:07:32:f9:82:94:b0:4a:9b:
54:39:33:ee:5d:1b:c0:4f:7e:a7:cc:64:e9:08:2f:
53:6b:28:fb:52:7c:f1:24:94:d3:0b:9f:a1:66:d3:
2c:01:9e:d2:b2:cf:25:e2:3d:ba:30:26:5a:1d:6d:
40:6f:58:3e:24:c6:39:7c:66:89:90:c9:fc:b2:bb:
c3:6c:4f:e2:dd:6c:b3:64:d7:fe:2b:98:cb:6d:82:
e7:6b:c4:2c:2d:80:8e:7d:f4:c1:3e:90:d4:fe:9e:
ba:05:2a:d8:10:5c:fe:65:c0:62:ea:d4:7d:da:d5:
e8:a0:be:a4:ef:d1:ea:af:04:1b:77:81:57:84:20:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:DF:D0:E5:6A:59:ED:E9:3A:A0:83:E5:FE:C9:1C:C2:45:B8:70
X509v3 Authority Key Identifier:
keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32312d3231203d3e203532383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.208.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:0a:93:41:a4:b0:d0:17:10:ac:bb:95:c7:6e:e0:74:fb:56:
17:e2:d0:d2:f8:44:2a:92:23:0e:3b:e1:a9:fb:7d:cc:38:4d:
86:d9:a0:54:98:87:29:2a:05:8c:89:b5:f5:43:8b:bc:f4:3f:
87:67:da:f3:04:94:d8:36:f9:73:2e:fe:44:b5:a7:45:9a:e9:
44:c9:ef:38:34:98:0b:36:59:57:06:f4:07:9d:e1:e8:0a:6a:
63:67:f1:7a:bf:98:b0:f2:6f:87:63:63:67:88:6b:fe:23:d9:
7b:98:c8:ce:ed:9e:e9:9b:80:81:c6:d2:5e:24:43:d2:0a:00:
2a:c8:28:28:22:3b:db:6c:e6:f5:2b:d0:b5:4d:12:9c:04:3a:
1e:71:80:4e:ac:89:a4:a7:f3:fa:e1:63:5a:f5:1a:a7:57:d2:
46:65:d9:b1:06:c9:b1:be:e5:89:99:85:a0:f3:58:43:44:bf:
f0:0b:57:fa:89:2f:f3:37:12:c9:60:a7:f4:cd:8b:42:1d:2e:
1f:ca:ea:03:cf:81:59:26:5a:8a:d3:5c:9a:6d:f8:f2:cf:a5:
18:53:55:f3:d3:13:a2:e5:35:ef:ae:a2:f6:01:47:5c:84:03:
ad:25:24:1d:76:cc:33:e9:66:5f:f1:34:08:49:35:fa:ea:21:
7e:9e:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net