Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa
File: 3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier: AC6LQVUH3AW5gbKMlD1aXswthD2prwf5TkkE2rjeyqE=
Subject key identifier: 49:CC:C9:02:8D:1A:94:D5:BF:04:F5:FC:09:D5:47:ED:1B:A3:B0:DC
Certificate issuer: /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial: 79493A0ECC078C000FF83AAB058D303A8E9127C1
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa
Signing time: Mon 04 Sep 2023 19:54:59 +0000
ROA not before: Mon 04 Sep 2023 19:49:59 +0000
ROA not after: Mon 02 Sep 2024 19:54:59 +0000
asID: 52873
IP address blocks: 177.128.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:49:3a:0e:cc:07:8c:00:0f:f8:3a:ab:05:8d:30:3a:8e:91:27:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Validity
Not Before: Sep 4 19:49:59 2023 GMT
Not After : Sep 2 19:54:59 2024 GMT
Subject: CN=49CCC9028D1A94D5BF04F5FC09D547ED1BA3B0DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:4c:1c:dc:a3:71:d5:90:d0:d9:f6:32:04:
71:17:ab:de:d8:5b:58:fc:84:dc:a8:b8:22:dd:b6:
9c:fe:c6:bb:9d:a2:a4:f2:d1:4b:a0:4b:02:6c:b7:
1c:34:54:2b:d5:c9:f6:c5:f8:cc:2b:9b:8b:a2:a6:
aa:29:82:20:18:9f:dd:6d:bb:16:ab:da:98:44:5e:
55:56:27:bb:ae:de:16:6e:25:1a:58:9a:aa:30:f1:
86:a9:35:f9:0b:f6:00:17:df:96:0e:f5:be:fb:c5:
05:d5:2b:11:c5:40:27:4f:26:de:5e:e9:de:a7:70:
87:6e:7d:41:3b:46:f8:bc:ce:71:2a:f3:e8:90:bd:
52:8d:cf:1e:c1:07:5a:05:3e:01:fd:a4:ea:16:ec:
b3:1d:71:21:11:44:ce:ac:bf:fb:3c:8d:12:57:ba:
7d:12:11:80:c9:9c:c6:30:33:af:f8:bd:cc:fe:c7:
59:f8:5d:1f:b9:71:28:34:fa:9f:01:31:33:b3:d1:
57:90:6b:e8:f5:e7:1a:3b:ca:28:f8:5b:3a:38:5e:
dd:01:a1:6b:ba:94:ef:4d:ab:f8:23:73:49:b5:70:
28:07:67:c8:ae:fe:8a:29:e6:15:82:68:f2:0e:7a:
97:e5:9b:61:c4:db:48:47:9c:08:55:14:64:c1:26:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:C9:02:8D:1A:94:D5:BF:04:F5:FC:09:D5:47:ED:1B:A3:B0:DC
X509v3 Authority Key Identifier:
keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3230382e302f32332d3233203d3e203532383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.208.0/23
Signature Algorithm: sha256WithRSAEncryption
89:a4:14:47:b0:d3:2c:e6:f1:81:eb:37:26:8f:87:e4:fa:80:
9b:f5:b3:9d:ee:84:a7:83:44:42:92:89:ad:2e:fd:ad:79:34:
af:f4:6f:7f:e3:49:81:f9:90:a5:89:da:f4:26:23:d9:37:88:
bd:6c:0c:39:17:04:aa:40:86:74:ea:07:58:d8:b8:35:6f:c1:
f5:df:99:33:cd:6b:7c:e3:bb:3d:c8:d7:31:88:80:ef:54:8f:
d9:ee:20:90:ab:81:d3:06:8c:5d:bd:09:ed:8c:96:58:f5:aa:
0f:29:67:53:fe:29:50:18:2a:e5:ac:f2:3f:d7:ce:45:1c:06:
89:2b:80:0e:91:36:2f:10:02:2f:a6:84:64:4f:b9:1b:19:5f:
93:6c:9d:46:9f:d5:7e:9a:99:18:b1:22:01:61:4f:42:af:fc:
de:b3:5f:1b:6f:b1:7f:6b:41:cd:51:3e:1a:c0:95:0b:57:df:
80:f5:a8:e4:8e:45:c0:2a:f6:6d:4c:49:76:cc:9f:70:dd:4a:
93:59:a4:c0:de:ec:69:f1:f4:59:78:99:de:56:8d:f7:ba:4c:
36:4b:2a:3a:5f:36:c4:2a:e2:ce:83:c6:ca:7f:0b:53:1b:c2:
50:00:2c:c9:69:2b:a7:0d:fc:6f:8c:f9:eb:ec:34:5d:eb:90:
5a:2d:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net