Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32342d3234203d3e203532383732.roa
File: 3136382e302e3233362e302f32342d3234203d3e203532383732.roa (raw, json)
Hash identifier: pcFy9gzCAu9jpFqKEBqDb+uR8cLi3sCGc/Togzq9w1c=
Subject key identifier: E2:89:1F:C8:F8:D9:95:0E:C4:6F:BF:3F:13:1F:FA:7B:7A:0D:93:DA
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 4B0406564BCEF6D06003EAE27A3011F78915965F
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32342d3234203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:51 +0000
ROA not before: Mon 13 Nov 2023 18:45:51 +0000
ROA not after: Mon 11 Nov 2024 18:50:51 +0000
asID: 52872
IP address blocks: 168.0.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:04:06:56:4b:ce:f6:d0:60:03:ea:e2:7a:30:11:f7:89:15:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:51 2023 GMT
Not After : Nov 11 18:50:51 2024 GMT
Subject: CN=E2891FC8F8D9950EC46FBF3F131FFA7B7A0D93DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:e5:7e:6a:6c:cd:43:9e:a3:44:39:78:da:
ef:2c:39:7e:d3:61:29:a1:3a:0b:cf:3a:ec:58:cf:
38:46:c2:0c:e3:ab:9b:88:22:96:b4:2b:b7:e1:91:
88:1d:5d:96:56:4a:0a:3d:13:d5:c8:a9:d1:3c:bb:
a1:35:46:50:d2:03:73:3e:e7:f7:48:5f:3d:80:d1:
19:84:12:f0:19:fd:2b:f5:0c:4d:5e:0a:15:59:6a:
a9:4a:f6:81:23:ac:f5:02:6f:55:1f:67:81:98:30:
21:b0:10:2c:2a:85:4b:6c:fb:c0:67:34:cf:56:cc:
85:52:70:65:e1:7f:8c:37:56:46:6d:46:48:c0:cd:
ff:db:49:61:64:92:01:d7:4b:bb:25:0b:a7:9c:1f:
db:df:c0:af:71:3c:1b:e5:c5:2e:4e:27:af:58:ae:
a7:eb:1e:3f:7f:e6:13:67:63:e1:da:23:a0:05:44:
5a:d7:c9:9f:e4:06:8a:6e:75:dd:f2:22:fb:ea:c0:
43:24:fe:7a:e9:d9:f6:6e:80:d2:66:fd:c2:34:11:
7d:f9:91:3d:40:f2:a8:3f:95:ae:e6:12:8d:59:32:
8b:fb:fa:24:16:bd:7a:e6:a7:78:58:61:5d:0b:26:
49:fa:aa:db:35:3d:0f:f4:5e:51:87:70:fd:09:08:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:89:1F:C8:F8:D9:95:0E:C4:6F:BF:3F:13:1F:FA:7B:7A:0D:93:DA
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233362e302f32342d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6b:6e:ec:ca:23:0e:9c:9f:d7:4b:d3:29:70:65:a8:c1:78:
d8:0a:94:47:f0:3b:74:23:61:7f:98:51:6a:17:60:9e:fb:d9:
42:0c:dc:64:c2:c5:da:fb:f3:83:69:42:e8:f3:79:26:d2:7f:
68:79:aa:a5:8a:5a:53:6c:cf:b3:1d:d1:04:00:71:3d:75:12:
f5:d5:73:46:e9:55:66:22:c6:f8:54:f2:b5:dd:f5:74:c4:5d:
69:89:f3:77:46:12:5b:dd:ca:c4:9a:40:ca:ae:c4:76:36:2f:
e8:fc:62:0b:28:bf:dd:70:f0:9a:39:00:50:df:8a:ac:3e:49:
bb:91:5f:fa:fe:15:57:05:9b:0c:1d:44:a3:08:11:c5:9a:fe:
d1:45:4d:7e:c1:c9:26:47:63:d2:4c:33:e6:d8:a9:fb:88:26:
db:be:af:3d:29:6e:5c:bf:5a:33:05:7a:5d:31:97:9e:15:96:
ae:0e:1f:b7:82:2b:9f:2a:ba:26:32:0f:88:04:74:59:da:b0:
d6:5f:43:34:06:05:f1:38:c9:9b:46:e5:cf:73:c6:f3:62:ff:
25:b3:df:1e:52:a9:34:37:9f:66:cd:a7:8b:63:00:6a:fb:22:
22:8d:1c:85:b7:9b:b2:69:b5:3e:80:00:e5:9b:12:33:4c:e6:
af:26:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org