Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa
File: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (raw, json)
Hash identifier: e4FBm5Df3P7UrW3lLa2tA2QAg7nODB+8WOewR+aOhaM=
Subject key identifier: 92:85:B2:21:27:60:F8:F1:02:97:AC:9C:6E:A8:AC:C1:51:2B:26:90
Certificate issuer: /CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Certificate serial: 57FF49711D097005078C1564E04D44C059AFF45F
Authority key identifier: 8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa
Signing time: Mon 11 Mar 2024 20:41:51 +0000
ROA not before: Mon 11 Mar 2024 20:36:51 +0000
ROA not after: Mon 10 Mar 2025 20:41:51 +0000
asID: 263924
IP address blocks: 168.232.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ff:49:71:1d:09:70:05:07:8c:15:64:e0:4d:44:c0:59:af:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Validity
Not Before: Mar 11 20:36:51 2024 GMT
Not After : Mar 10 20:41:51 2025 GMT
Subject: CN=9285B2212760F8F10297AC9C6EA8ACC1512B2690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:37:80:df:5e:c7:f4:a6:cd:97:de:97:a6:
23:f8:c8:9a:26:76:98:4f:1f:b1:ae:d8:c7:e7:44:
f9:20:62:13:ba:45:64:d2:68:9f:b7:eb:2f:73:7e:
1b:c8:68:29:f4:78:3b:e8:08:15:81:a6:28:72:a6:
a4:cc:de:05:3f:8f:35:b3:fb:1e:00:c5:33:99:b0:
53:ba:e2:69:6d:02:54:9b:57:62:b6:ac:f1:8b:7b:
a0:ff:50:a8:b3:e0:19:d9:1c:97:ae:d5:95:f4:58:
e2:ff:88:90:7f:5a:e9:4e:59:7a:7a:c9:f6:e7:d5:
fe:e6:42:68:d3:15:ec:39:e0:11:ec:21:1d:a9:9e:
d8:44:b6:fc:9c:46:11:c1:82:1a:8b:95:7c:9a:df:
bd:7e:23:2d:79:c4:5d:2a:da:e4:76:9c:a8:22:17:
b4:12:a7:a0:06:de:97:db:3b:4e:8f:48:aa:b8:70:
3c:5a:71:58:97:c2:b2:fe:da:83:22:21:38:c1:d2:
50:2a:30:cd:d8:0f:ca:9e:cc:39:aa:c1:e1:99:f1:
a4:37:30:0e:53:62:aa:ac:ea:79:3e:79:4a:e7:c8:
d4:12:15:89:19:25:0e:84:80:45:06:ad:91:d4:05:
c7:c0:ba:ed:ad:0f:35:99:40:53:a4:ca:30:83:ff:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:B2:21:27:60:F8:F1:02:97:AC:9C:6E:A8:AC:C1:51:2B:26:90
X509v3 Authority Key Identifier:
keyid:8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.172.0/22
Signature Algorithm: sha256WithRSAEncryption
66:23:d2:c2:95:e6:a7:3d:15:37:57:22:a5:39:22:db:d7:39:
fb:f7:64:fe:87:4a:95:3c:70:17:9b:ed:ce:95:05:15:51:d4:
6d:ef:68:3a:7c:ee:be:70:ce:dd:3c:9c:29:89:2f:69:75:3f:
a6:df:14:50:cc:76:b1:be:4e:36:10:47:47:eb:db:53:d0:08:
2f:4a:b9:73:92:3f:51:43:f3:de:af:6b:14:4f:8d:8b:ca:c9:
ff:c6:2f:8e:a8:5c:a6:46:47:1c:14:7e:d0:db:aa:5e:17:e5:
84:e5:37:13:23:35:5c:8e:cb:20:0f:ca:6e:ca:44:02:ab:b5:
dc:24:d0:93:40:9d:56:84:9d:92:95:fb:1a:0a:9c:fd:1f:13:
51:da:d2:d8:8d:17:25:80:8d:13:cf:4d:df:b5:b4:54:61:33:
de:b0:ef:45:9d:3e:d4:fa:98:6a:2a:ca:22:e7:16:89:f6:f5:
29:ae:cd:02:a5:3f:9a:80:e2:2e:98:6d:85:d4:1e:f3:59:75:
5f:84:d6:93:21:2e:e1:56:be:da:23:4c:c5:28:d3:78:0f:40:
9d:7a:8f:55:c5:d3:45:5f:f1:84:72:13:f4:35:29:76:0c:15:
5a:bc:68:8e:58:33:0f:63:29:52:23:83:00:1d:16:67:f4:a8:
8c:9b:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org