Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
File: 3136382e3232382e36382e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier: IY55JyHsmidEflYCE239IPYaXBwNOKPOH09RvzRv4+o=
Subject key identifier: 86:CD:49:BD:70:B7:36:00:25:31:77:93:E0:1C:6D:40:9D:F6:66:91
Certificate issuer: /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial: 77BDB95291CD133A91BDC475192015E65B4870B1
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
Signing time: Fri 03 Mar 2023 12:18:06 +0000
ROA not before: Fri 03 Mar 2023 12:13:06 +0000
ROA not after: Fri 01 Mar 2024 12:18:06 +0000
asID: 53059
IP address blocks: 168.228.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:bd:b9:52:91:cd:13:3a:91:bd:c4:75:19:20:15:e6:5b:48:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Validity
Not Before: Mar 3 12:13:06 2023 GMT
Not After : Mar 1 12:18:06 2024 GMT
Subject: CN=86CD49BD70B7360025317793E01C6D409DF66691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:b5:e6:69:4e:72:72:6f:c3:8c:3c:73:13:
12:fb:ac:2b:ac:78:76:cf:9a:63:be:10:91:a7:28:
c5:36:5f:d2:f0:dd:fc:60:54:bd:cc:7f:04:60:e1:
de:25:14:6d:48:f0:7d:98:9c:4e:6b:9c:35:f3:db:
39:47:e9:30:c6:3c:76:a9:3b:3f:16:d8:3c:4b:0a:
bd:ba:f9:e0:1b:fd:3d:ab:5f:a8:f4:92:b8:c1:60:
e7:df:8a:b8:9a:c4:ad:3e:fa:42:0c:f9:9c:f9:ec:
3e:8e:91:a9:58:81:2b:40:42:8a:d7:15:16:13:b3:
52:b6:f5:c8:f1:56:a4:bf:bd:b5:1b:2f:85:1a:9b:
2e:2d:d8:6e:bc:42:79:ce:3f:a9:fa:2f:07:7e:c7:
73:d6:50:81:0b:1e:4d:c3:12:13:c9:6b:e2:80:91:
f6:12:9a:c2:2f:b9:7f:0d:8e:15:47:cc:7f:90:66:
93:3b:a5:cf:2c:bd:14:fa:16:f1:f1:6b:3f:f6:35:
bf:30:b9:db:f1:16:09:a1:bb:4e:af:7d:0d:75:c7:
49:15:f6:dd:ed:09:86:ce:a5:67:21:63:7f:e5:b4:
95:9b:12:96:5d:8b:3e:b8:e9:46:00:c9:1b:8d:8d:
18:40:95:37:a1:ab:a5:ec:10:8b:f7:5f:c9:f3:30:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:49:BD:70:B7:36:00:25:31:77:93:E0:1C:6D:40:9D:F6:66:91
X509v3 Authority Key Identifier:
keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.68.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:94:c1:99:2a:40:5f:10:51:31:30:bf:73:e8:f3:14:c7:e4:
4b:07:76:29:f3:7e:6f:20:34:98:ac:1b:27:e6:9d:0d:ec:bb:
16:11:41:28:83:29:d8:f9:96:56:1a:91:78:5e:88:fc:4f:ee:
dc:9c:0f:ab:70:fa:8e:75:c9:14:47:01:cd:78:3b:29:73:bf:
47:5a:70:a4:28:95:b1:cb:22:25:d0:ca:7c:aa:0f:a9:54:df:
6d:4b:1b:a5:c7:a5:7a:84:97:81:3e:51:2d:00:2f:ae:99:50:
42:cb:37:90:8d:51:cc:00:00:36:48:76:bf:a0:14:73:9d:1c:
07:82:e7:ce:02:46:61:48:c2:d6:ab:44:ed:68:6f:53:40:13:
a4:71:24:85:3e:f1:d4:7a:7d:fd:69:9e:04:cd:18:7b:89:b6:
35:ef:1b:fd:55:24:c0:35:f1:59:ad:40:fd:47:9d:c7:e0:55:
89:27:b2:18:b3:3b:48:82:7f:48:63:13:00:5d:df:21:f7:9d:
6c:42:27:bf:cc:01:76:b2:d9:35:4a:84:91:9a:87:3d:0f:6b:
47:d1:52:06:fd:85:d5:8f:fd:c3:5b:32:59:95:3b:51:03:71:
0d:bb:48:76:57:03:79:b6:81:89:b1:ef:1e:90:64:42:b9:0b:
be:00:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org