Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3136382e3232382e36382e302f32322d3232203d3e203238323230.roa
File: 3136382e3232382e36382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: GwdIX9zIQnwXBSpjhJ/zbHHa7o0z7zKuIk77bpf7Vk8=
Subject key identifier: BC:E6:5C:88:6B:9B:B7:85:66:62:CD:64:9C:63:9D:81:C1:3C:9B:83
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 2BBA2E13906B78F32967F5F1902719CDA64C28
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3136382e3232382e36382e302f32322d3232203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:23 +0000
ROA not before: Mon 08 Apr 2024 20:00:23 +0000
ROA not after: Mon 07 Apr 2025 20:05:23 +0000
asID: 28220
IP address blocks: 168.228.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ba:2e:13:90:6b:78:f3:29:67:f5:f1:90:27:19:cd:a6:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:23 2024 GMT
Not After : Apr 7 20:05:23 2025 GMT
Subject: CN=BCE65C886B9BB7856662CD649C639D81C13C9B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:a6:58:9f:3d:93:83:ee:5f:70:26:8f:b8:
ea:d3:d5:29:02:e7:7c:9c:83:49:3c:7e:42:ff:08:
af:d1:ca:c3:c7:f4:da:6c:80:4e:a2:35:0f:c9:6d:
c8:a7:fd:db:0f:42:cd:56:99:71:ab:b6:5b:8c:47:
47:dc:aa:42:8a:cb:45:61:cd:34:82:76:b3:05:6f:
06:93:b1:f5:cf:7e:fe:69:b3:fd:27:7f:db:8f:df:
3d:bb:87:67:4e:bc:9f:42:04:73:c5:43:cf:d5:fd:
8e:12:5a:3d:90:5c:31:03:bd:20:24:d7:e5:87:1c:
e5:ca:95:bd:c2:fe:17:c3:9b:24:de:bc:a3:5b:23:
4b:46:54:62:60:1d:dd:4c:e8:1c:ca:ad:64:b5:72:
40:dc:16:f2:ea:5b:98:c4:0c:b8:4c:07:1c:af:0d:
4d:c8:ea:ff:83:fe:fc:dd:36:cc:12:d0:15:3d:72:
d8:b6:a7:d4:92:35:60:06:c5:d8:97:77:9a:9e:b6:
05:66:b0:ea:bd:7d:d8:64:8b:1c:63:44:58:72:06:
8d:46:56:c7:b1:8e:7f:94:bd:f4:53:85:02:70:f2:
45:3a:cd:82:de:d0:16:58:61:91:a4:cf:46:ff:81:
28:46:d4:c7:03:3d:42:8a:f2:9c:55:c8:68:31:c4:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:5C:88:6B:9B:B7:85:66:62:CD:64:9C:63:9D:81:C1:3C:9B:83
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3136382e3232382e36382e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:68:cf:d3:ee:dc:22:16:1b:48:ad:f0:6a:84:44:74:ef:be:
c9:c5:8f:51:c9:f2:ff:15:75:c8:0c:d4:f0:d8:77:f8:e9:d2:
4d:69:23:2e:38:9a:39:e8:8c:78:30:75:29:74:84:ee:db:7c:
bc:08:27:6f:10:15:50:31:6f:ba:38:ed:7c:4b:67:58:68:aa:
14:54:62:fb:5d:8c:69:25:d4:4b:da:31:68:3b:b7:82:0d:fa:
76:31:f2:04:f7:2d:79:d2:69:f5:c8:72:13:b1:25:94:5c:55:
d5:b8:89:73:8a:df:d5:1f:8b:e7:dc:c3:c1:16:30:97:05:d4:
be:d8:6c:20:88:37:21:3b:a6:dd:0f:95:ee:3e:93:c1:18:a4:
c4:c6:64:01:26:fd:8d:a8:45:46:f5:ba:5c:97:9e:43:8a:28:
a7:c3:f3:d7:a9:78:94:10:bb:a9:40:37:a7:4e:b8:c8:ad:1f:
a5:61:4c:1d:39:3c:79:d4:04:86:9d:8c:42:44:ff:dd:f5:61:
4b:70:28:71:d5:bc:a1:4b:e0:69:3e:65:6c:6c:a5:b3:f8:3c:
46:60:74:99:23:81:91:1e:34:44:45:86:f2:6a:32:f1:fc:6a:
eb:d3:fb:a5:29:ce:5a:e4:65:8e:52:46:1f:6a:8e:5d:8c:58:
3f:76:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org