Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
File: 3136382e302e3233362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier: +6b9AKKeiDQCM5tQefv7kmJF175COWmUW4hdmzYkCcI=
Subject key identifier: 60:B8:5D:14:FB:CB:C2:6B:86:18:94:83:6A:65:6D:D9:A8:DE:B8:D7
Certificate issuer: /CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
Certificate serial: 63BECA7058B314DE6BF71597D4D22721348F9822
Authority key identifier: 13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
Signing time: Tue 12 Mar 2024 20:36:07 +0000
ROA not before: Tue 12 Mar 2024 20:31:07 +0000
ROA not after: Tue 11 Mar 2025 20:36:07 +0000
asID: 52872
IP address blocks: 168.0.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:be:ca:70:58:b3:14:de:6b:f7:15:97:d4:d2:27:21:34:8f:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
Validity
Not Before: Mar 12 20:31:07 2024 GMT
Not After : Mar 11 20:36:07 2025 GMT
Subject: CN=60B85D14FBCBC26B861894836A656DD9A8DEB8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:af:97:c7:b4:bc:cd:21:25:01:d4:60:c5:
64:7d:09:57:4c:5d:b1:09:18:bd:bd:89:cc:6a:ac:
d1:0e:1d:76:d5:d1:e1:cc:f1:16:c3:db:27:75:24:
1e:18:69:20:7e:38:b7:6d:51:4e:17:7f:1c:cb:3a:
43:e8:ef:c4:39:67:02:5e:5c:2e:31:d1:55:28:1b:
3f:f4:c1:c2:9f:f9:b3:30:45:cb:bb:65:e8:b9:0b:
f9:9a:81:95:e8:d6:bf:1f:88:3e:37:d9:cb:b8:fe:
8f:7f:cd:3a:71:d4:ef:de:51:2c:ad:f8:b7:f8:25:
07:b7:eb:c6:ca:de:ed:b5:be:8b:f4:ed:bb:1e:b6:
bf:50:51:cd:8f:75:3c:62:42:20:a1:e5:2f:00:89:
67:14:f0:fd:3c:0f:ae:eb:11:fd:cc:24:35:bb:a6:
4c:67:f9:3d:a7:a9:31:ff:d5:b8:ad:0e:c2:3a:12:
25:64:59:23:73:bf:a6:e8:f0:06:b8:e9:c1:ad:5a:
5b:a1:c1:81:2b:ad:c6:e0:ae:8c:82:5d:a1:d7:f0:
5b:68:c2:15:00:45:bb:95:63:e8:6e:d1:bb:f7:0d:
73:99:f9:b6:87:9c:7b:6c:d9:ef:26:f8:3a:9b:b1:
83:17:f0:95:22:27:fb:fb:32:4a:5f:74:70:79:1a:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:5D:14:FB:CB:C2:6B:86:18:94:83:6A:65:6D:D9:A8:DE:B8:D7
X509v3 Authority Key Identifier:
keyid:13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.236.0/22
Signature Algorithm: sha256WithRSAEncryption
51:9e:62:a4:5c:1d:ec:b5:99:f6:2d:b4:27:03:c7:a0:70:70:
d2:09:2e:5e:73:7f:17:21:b7:35:83:22:42:ad:2d:30:de:2a:
1a:b6:14:1f:04:53:1d:9f:77:12:cd:34:89:31:57:7e:23:eb:
15:9e:b5:a1:a4:e6:88:44:b1:d6:b2:35:fe:58:f5:03:e9:ca:
2f:05:1c:4b:c3:74:75:d3:e8:66:30:9a:db:8b:18:3e:78:e1:
88:5f:27:f7:43:dd:c1:e8:df:52:79:08:dd:06:49:8b:58:99:
52:66:ad:fc:12:ef:95:b3:46:dc:8e:55:9d:75:26:fc:71:8a:
d1:7b:1e:0e:34:89:83:be:b5:9a:eb:d7:36:df:8d:64:89:1c:
f7:b9:f4:77:34:4b:69:a6:8c:8a:a8:de:89:10:2b:cd:8b:e5:
08:b4:8e:d3:4d:51:6f:98:29:ab:a9:c3:c7:bb:47:01:7c:50:
49:bf:79:3b:4b:c3:ad:36:30:22:0b:fc:2a:d5:2c:0a:e4:2a:
8e:bb:9c:9e:97:4a:bd:35:f0:f6:6f:07:b5:54:b6:b8:ba:a7:
8e:a9:ac:03:f5:db:98:eb:43:79:b4:43:2e:e7:62:a4:17:48:
c9:43:54:25:10:ed:65:bc:a9:11:d3:be:e7:f6:6f:ac:d9:f5:
32:38:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org