Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3232203d3e203532383732.roa
File: 3136382e302e3233362e302f32322d3232203d3e203532383732.roa (raw, json)
Hash identifier: f3ile6BZmIqWp+u54hXwsW2Ey4Uib+VUDOYYs0/zOXw=
Subject key identifier: 5B:76:18:25:A1:22:55:1F:CE:90:BF:5E:5E:52:7A:36:31:2B:A4:A9
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 422E14C396FB04F31903C339322E8682F8EBBD65
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3232203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:41 +0000
ROA not before: Mon 13 Nov 2023 18:45:41 +0000
ROA not after: Mon 11 Nov 2024 18:50:41 +0000
asID: 52872
IP address blocks: 168.0.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2e:14:c3:96:fb:04:f3:19:03:c3:39:32:2e:86:82:f8:eb:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:41 2023 GMT
Not After : Nov 11 18:50:41 2024 GMT
Subject: CN=5B761825A122551FCE90BF5E5E527A36312BA4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:a7:28:01:be:4a:47:89:60:fb:00:2a:fc:
70:af:ee:4b:98:d0:77:d9:8a:30:22:84:02:f8:60:
e8:fd:bd:60:be:a6:9e:95:e6:3b:19:f6:79:4c:75:
cc:8d:e4:0d:d6:48:8e:5f:b7:1b:b1:0a:11:8c:60:
0b:f3:90:75:fc:0b:2c:b1:35:72:0c:bc:bf:aa:c6:
25:b8:ac:e5:e1:38:9f:3f:af:ce:a7:02:9f:05:6e:
ef:07:51:33:5b:0a:fc:bc:2c:0e:d2:85:f9:6d:14:
2a:72:b8:d0:1b:cf:e0:a4:0c:1f:d5:7b:d9:91:ba:
24:7a:9a:7a:2c:3d:c9:b1:fb:35:c0:e0:ab:f2:21:
9a:f6:3c:58:3b:54:38:4d:59:56:e6:df:d2:3a:2c:
1a:c6:ef:22:4f:8e:cc:b4:40:2f:4e:22:f0:8e:92:
c6:69:9c:a3:cb:4f:0a:af:75:c7:41:ee:7c:6f:6e:
45:ab:1a:a1:57:33:69:c5:1f:01:e5:ff:0d:f7:03:
bb:ed:09:c1:a3:5b:02:f9:f1:a4:f8:ba:bc:4a:c2:
e3:0e:db:a2:e7:eb:aa:b2:13:57:ea:53:79:7e:78:
72:3f:da:34:95:15:5a:1c:70:47:d8:44:de:98:34:
8e:60:65:96:7b:8d:17:34:bc:69:58:8d:ee:ce:8d:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:18:25:A1:22:55:1F:CE:90:BF:5E:5E:52:7A:36:31:2B:A4:A9
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32322d3232203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.236.0/22
Signature Algorithm: sha256WithRSAEncryption
57:65:fc:20:01:69:36:be:c3:30:39:0d:29:5f:7a:e8:63:ab:
8e:f4:5b:55:1b:11:ba:44:1e:d7:8c:2e:49:18:0d:21:19:67:
d5:6a:5a:28:c9:e1:a2:ab:71:7f:78:e1:b9:ff:f4:ab:54:4f:
df:80:ab:54:e3:40:c6:19:01:8c:e7:3c:a4:03:28:f1:78:ba:
6d:30:2b:2b:ec:9c:1b:fb:42:75:05:07:44:74:9c:5f:14:24:
b4:84:f3:07:6b:eb:36:1c:e1:a1:52:1a:96:3b:f5:f3:b6:8e:
c9:c5:0a:3a:93:4e:2f:7c:17:fd:3a:b7:33:c5:bd:b4:0e:5c:
4b:b6:f5:26:13:2d:2a:19:25:c7:a5:85:de:f2:94:60:c1:94:
fb:1b:bf:7a:f5:a6:24:09:93:04:f9:13:2b:fb:11:c6:77:71:
79:d5:77:ba:bd:8f:7d:15:3f:4c:c4:ab:5c:aa:ce:07:cf:47:
df:8e:6c:2c:ef:21:5f:d8:bb:cc:77:17:8b:20:a7:ce:b6:f5:
aa:dc:a4:3d:f6:7c:a7:85:53:75:6a:61:e3:8d:94:18:b1:8e:
d7:65:ae:9e:e3:61:c8:31:ee:fd:37:ed:ac:22:e2:ad:5d:9b:
20:03:92:48:17:8d:6b:88:6f:05:79:ed:c7:c0:af:25:b0:0e:
96:33:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org