Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233382e302f32342d3234203d3e203532383732.roa
File: 3136382e302e3233382e302f32342d3234203d3e203532383732.roa (raw, json)
Hash identifier: yPEJNgXrQqmWX5LROQbcsn8fEJoT9wck+ZuqiyWQCyY=
Subject key identifier: 07:F8:6A:17:DD:27:3B:CE:34:FB:89:2C:D3:3A:FE:19:97:93:B1:54
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 685729847653EBA2B0916676A485909755E322D3
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233382e302f32342d3234203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:30 +0000
ROA not before: Mon 13 Nov 2023 18:45:30 +0000
ROA not after: Mon 11 Nov 2024 18:50:30 +0000
asID: 52872
IP address blocks: 168.0.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:57:29:84:76:53:eb:a2:b0:91:66:76:a4:85:90:97:55:e3:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:30 2023 GMT
Not After : Nov 11 18:50:30 2024 GMT
Subject: CN=07F86A17DD273BCE34FB892CD33AFE199793B154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:61:18:3f:f9:7c:16:2c:67:dc:ff:43:dc:
74:5b:29:04:74:e9:50:5c:f2:12:5f:14:7f:1e:cd:
eb:e8:25:b7:a3:5f:45:f1:97:6a:36:a5:94:bb:9e:
be:6f:80:c8:3c:e1:2d:b2:eb:1e:c1:0f:bc:2a:fb:
11:3c:4b:e7:85:68:03:cf:2b:d1:a4:0f:1b:39:07:
e1:b3:ab:06:4e:5d:ca:58:54:bb:af:61:ed:25:f4:
52:1e:6c:da:20:4b:de:6c:19:38:63:7d:bb:8d:b6:
87:b7:ba:05:aa:5c:f9:41:1b:aa:41:c7:25:7b:f4:
4a:8a:a9:96:d6:c5:c1:de:1f:ad:b8:72:97:d0:77:
11:19:1e:15:9e:14:2e:ac:6a:c3:e7:88:69:06:e0:
ff:12:ae:75:98:db:40:4a:5a:fe:a7:d3:32:97:96:
18:2e:69:db:9d:26:85:e3:8d:81:b3:21:2c:a8:34:
e5:b1:c1:2c:bc:7b:18:1c:7a:57:52:f2:c6:50:e1:
55:98:cb:44:35:a4:33:e2:e3:d5:60:14:70:37:c0:
9f:fc:e8:83:4f:94:85:23:ef:9e:83:b3:48:99:8e:
e9:10:80:77:71:14:66:0b:44:33:f6:bf:bd:56:b3:
ad:29:cb:22:25:b5:ec:d1:fd:50:01:41:ea:a6:be:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:6A:17:DD:27:3B:CE:34:FB:89:2C:D3:3A:FE:19:97:93:B1:54
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233382e302f32342d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.238.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1d:f6:bc:ef:c6:8f:e1:28:6a:98:a5:0e:43:ea:6a:40:80:
9d:3b:66:25:11:59:c3:36:a3:ae:c6:d4:0a:21:a4:07:4e:19:
67:80:a5:2d:d7:63:29:23:69:ad:07:ad:7d:8d:04:55:4f:f7:
bd:16:34:ef:91:2f:6b:1b:1b:18:d0:78:87:43:31:47:a3:b3:
75:08:54:94:27:74:ba:03:54:20:84:6a:22:9d:64:18:d1:86:
1d:06:74:40:5f:02:75:9c:95:5f:12:c8:91:e1:16:4b:f3:09:
1c:a8:41:08:b7:44:03:75:a8:6d:45:1e:ed:77:cc:c9:8a:b9:
3f:24:e7:29:16:1c:14:47:e0:02:14:c2:22:46:51:2a:7d:d4:
9e:9b:37:0e:06:0b:e8:c1:9c:86:f8:f0:35:85:36:c2:78:32:
1c:bd:b8:ea:21:d5:e1:3f:7e:3f:9d:10:3f:5f:fd:ff:56:60:
60:7e:f1:86:e0:44:5b:26:c9:0d:bf:a3:80:57:17:5e:ee:ff:
29:fe:f2:09:c5:66:c4:ab:b1:cf:fa:87:2d:ec:29:6b:44:37:
af:5d:00:ab:a3:20:1a:86:b2:b6:65:98:de:f4:4d:f1:9a:60:
e6:a2:fe:85:54:e5:5c:76:8d:a1:d5:45:b6:a7:93:44:c9:93:
38:8b:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org