Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233382e302f32332d3233203d3e203532383732.roa
File: 3136382e302e3233382e302f32332d3233203d3e203532383732.roa (raw, json)
Hash identifier: CPEEUDbR82ExqxXCTSZ2/PNDYUDDQu7pxVLGWyRWsLE=
Subject key identifier: 14:5F:47:6C:F7:CB:2C:4C:FB:CE:DD:C8:E4:70:BE:BC:51:FA:A4:A4
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 17FEB6AB81AD3BBB748203F5D10FBFF40B28622C
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233382e302f32332d3233203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:33 +0000
ROA not before: Mon 13 Nov 2023 18:45:33 +0000
ROA not after: Mon 11 Nov 2024 18:50:33 +0000
asID: 52872
IP address blocks: 168.0.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fe:b6:ab:81:ad:3b:bb:74:82:03:f5:d1:0f:bf:f4:0b:28:62:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:33 2023 GMT
Not After : Nov 11 18:50:33 2024 GMT
Subject: CN=145F476CF7CB2C4CFBCEDDC8E470BEBC51FAA4A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:57:e8:da:79:fb:dd:4c:bf:82:a1:29:c9:
37:03:f5:63:f0:d9:10:68:2e:1b:78:f1:37:53:b5:
b5:c0:17:1d:7e:17:c8:23:34:9d:e3:6b:b0:8c:27:
06:4c:40:a9:b8:99:fd:81:c7:2b:ad:0c:8a:b2:7f:
3c:c5:ff:2d:6d:99:e4:50:f1:7f:30:8b:e1:71:97:
86:c5:e3:4e:6f:1c:8c:18:1a:44:a3:67:80:16:4d:
cc:1c:1f:4f:4a:02:3c:4f:a6:61:9b:0b:c5:9c:6f:
77:e5:b5:1c:ac:42:ae:b5:9d:4b:24:8c:76:7c:c7:
f9:52:ad:de:26:a3:24:09:4a:ad:26:21:e4:e4:b7:
e7:43:8d:9b:e6:f5:b7:c5:ba:9d:d5:67:ba:58:50:
9a:3b:16:dc:90:26:b4:45:6b:16:bf:25:fd:60:1b:
cc:22:27:bd:dc:30:d6:21:ca:a9:22:5f:c0:39:dc:
fc:d4:1e:44:2d:ec:d6:3f:4d:d8:cc:01:76:7b:c3:
45:12:33:7d:04:b7:ea:6e:bb:17:05:81:62:b0:29:
be:90:20:36:e1:08:a5:a6:21:c4:bc:0b:5a:c2:2c:
cd:10:c3:3b:ac:8b:bb:78:01:8c:92:82:0d:15:f5:
f3:56:f1:e4:11:66:b6:9e:d3:9c:7d:c9:46:62:7b:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:47:6C:F7:CB:2C:4C:FB:CE:DD:C8:E4:70:BE:BC:51:FA:A4:A4
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233382e302f32332d3233203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.238.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:99:c3:81:79:c7:c7:ae:91:08:0f:10:5c:ad:ac:b5:62:ed:
0e:fe:d5:56:b1:c9:18:88:97:05:5e:38:07:2d:08:e5:a4:3f:
16:82:5c:b1:58:e7:61:45:2c:67:a3:0b:bc:08:70:ce:8f:87:
b2:5a:8d:09:cb:0d:13:e3:93:7d:24:59:70:a4:e6:30:cd:a7:
97:e3:d7:d6:6b:e4:90:6e:67:35:27:f9:3d:71:32:42:24:e6:
cb:37:25:b5:48:9b:52:0a:d8:af:e7:e8:07:cc:91:98:1c:e0:
34:44:58:f4:91:a4:ef:75:53:55:68:6d:a6:9b:57:f7:f6:a9:
42:25:15:84:41:15:1f:5c:a6:e5:64:de:3c:8c:c6:a6:45:33:
21:d9:c9:70:52:fd:c9:5c:a5:b6:65:38:ef:37:c6:1d:88:2d:
09:bb:d0:40:c9:83:d2:ba:c7:3e:b9:19:0a:fe:0d:36:ab:14:
98:83:b5:2e:7e:d3:02:55:2f:c9:19:39:87:8c:bb:6b:d0:f9:
8f:5b:f7:9c:1b:6d:83:a1:2e:e9:ff:3b:e3:82:75:4d:c7:9e:
8e:39:65:49:36:c4:22:f8:69:90:d9:0e:66:de:ee:f9:c4:23:
4f:bb:d4:9c:46:05:74:9b:de:79:cc:48:37:d6:4a:72:e1:38:
d2:22:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org