Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa
File: 3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier: HVEuEwPTGAQ02FW7XBeLrvPz/KHAv94IPyRh9aDblCQ=
Subject key identifier: 4B:6E:B0:11:47:2A:A9:BF:4B:54:2A:BD:A7:70:02:87:A6:61:31:51
Certificate issuer: /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial: 519140BA84589EB9EE8C482581BA53C92263532D
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa
Signing time: Mon 04 Sep 2023 19:55:31 +0000
ROA not before: Mon 04 Sep 2023 19:50:31 +0000
ROA not after: Mon 02 Sep 2024 19:55:31 +0000
asID: 52873
IP address blocks: 200.229.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:91:40:ba:84:58:9e:b9:ee:8c:48:25:81:ba:53:c9:22:63:53:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Validity
Not Before: Sep 4 19:50:31 2023 GMT
Not After : Sep 2 19:55:31 2024 GMT
Subject: CN=4B6EB011472AA9BF4B542ABDA7700287A6613151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:e3:5d:d9:3d:37:81:c7:26:93:ee:f5:0b:
44:42:90:05:b7:de:fe:cb:c7:24:51:1b:15:db:9c:
2d:3b:b7:95:6c:3a:5a:7e:76:cc:83:d9:53:58:c5:
f1:44:57:0a:0f:16:60:d3:d6:14:7c:66:bc:45:c9:
78:c0:36:6b:1a:e0:4d:74:3b:31:3c:bb:a3:fa:b9:
8c:cb:8c:62:45:8c:cb:ed:0d:80:c0:dc:3e:68:4a:
76:f0:25:b0:f4:86:25:a2:ed:b7:aa:03:13:2b:a8:
1a:53:50:8d:26:60:d5:24:22:9d:3f:c3:3a:fb:c4:
c0:b2:2b:36:7e:73:1e:86:f1:2c:fa:78:5c:d5:23:
f5:7d:d7:15:61:a5:0c:95:f3:25:81:0e:29:2a:87:
7a:2e:7b:81:fc:f7:a4:02:87:1e:61:0f:ae:a2:5f:
4e:08:09:5f:2d:49:76:5d:5f:44:a5:2b:b2:12:fd:
75:13:99:c8:ec:96:43:eb:21:09:7f:cd:47:73:b1:
b9:0b:48:fe:47:97:03:ff:70:3d:c2:cb:f2:fb:7f:
13:d9:48:72:07:2d:de:7c:fb:b3:39:97:6b:c1:e7:
d4:ff:71:33:0f:31:da:a6:8b:84:4d:83:5f:5a:47:
74:82:62:dc:f9:16:39:ed:4c:8c:02:82:fd:61:2a:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:B0:11:47:2A:A9:BF:4B:54:2A:BD:A7:70:02:87:A6:61:31:51
X509v3 Authority Key Identifier:
keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32332d3233203d3e203532383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.220.0/23
Signature Algorithm: sha256WithRSAEncryption
54:b4:8d:d5:84:48:78:f7:82:2f:43:dd:f9:a1:69:eb:72:7f:
43:ab:a2:0e:29:bd:bd:bb:c4:ac:3b:39:e0:dc:2e:23:f7:e2:
b7:47:a9:9d:45:6f:1c:36:73:09:85:99:c0:c9:9d:ad:dc:5b:
8d:c3:ee:28:a1:b6:3b:54:2f:21:a5:98:af:9c:b8:a2:dc:90:
6d:b8:00:ee:5b:b6:c6:5a:c3:7b:f1:c8:fa:5d:9a:06:1e:d1:
78:0d:9b:7b:67:e7:c8:c9:6a:dc:6d:c0:39:79:d5:50:73:1e:
c7:25:c6:7c:2a:b3:78:8e:5e:83:2d:d7:02:91:ac:ce:2e:f1:
ca:ad:91:c2:be:30:43:81:63:10:fb:2c:25:c5:2e:23:0e:c8:
c5:4e:12:f7:95:30:6b:ec:18:40:a0:c8:ea:7f:15:46:cf:4c:
f8:b1:ca:64:71:0a:a6:9b:05:29:33:52:6a:60:c1:18:d9:2c:
fb:d5:23:d4:ef:eb:1c:d1:2f:87:11:c5:03:af:42:58:44:bd:
e2:10:2f:e4:08:ae:71:cb:cd:3b:e0:1e:fe:1d:57:c9:d4:57:
b7:77:f8:02:d0:c8:36:34:f7:4b:d6:4f:ed:b7:8d:a7:47:88:
c1:8d:70:57:e1:8f:19:a8:b1:51:91:c2:89:60:9a:a8:bd:1b:
6d:9a:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net