Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233392e302f32342d3234203d3e203532383732.roa
File: 3136382e302e3233392e302f32342d3234203d3e203532383732.roa (raw, json)
Hash identifier: 0POEL7qUix+llV82RZ3StKmQwACRHQOILc9Qd15gFSs=
Subject key identifier: 2B:DB:65:63:62:92:8D:AA:F3:A9:AC:4A:85:9E:12:2A:E2:08:C1:CC
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 7454797BB24980F4D0557E6A760031410B956618
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233392e302f32342d3234203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:28 +0000
ROA not before: Mon 13 Nov 2023 18:45:28 +0000
ROA not after: Mon 11 Nov 2024 18:50:28 +0000
asID: 52872
IP address blocks: 168.0.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:54:79:7b:b2:49:80:f4:d0:55:7e:6a:76:00:31:41:0b:95:66:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:28 2023 GMT
Not After : Nov 11 18:50:28 2024 GMT
Subject: CN=2BDB656362928DAAF3A9AC4A859E122AE208C1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:dc:82:1b:fe:3f:02:51:82:60:66:b4:db:
a0:4b:d4:85:d1:9a:cf:3e:a0:a1:65:de:db:ad:b0:
20:d5:db:ee:00:d2:d8:dd:87:c9:83:13:92:f2:76:
91:cb:89:ec:42:c3:2c:00:a9:87:ec:fd:a5:95:15:
a2:a0:cd:53:c0:41:a1:b8:b3:e1:2e:67:1c:f0:d7:
e6:5f:72:1c:03:0c:82:62:e8:6b:11:61:3b:22:26:
c3:0b:e1:d2:19:62:aa:0f:ca:08:96:8f:bb:99:93:
92:39:eb:8b:ae:1d:23:f6:c5:a7:ec:ec:58:0d:5b:
26:f8:f4:a5:9d:b8:6b:1f:22:73:f4:25:85:e5:ad:
e1:60:e6:e3:f3:43:15:4c:7a:9f:f1:0f:f6:0d:dc:
1d:9e:0c:79:3c:71:89:d1:54:48:4a:2b:c2:88:61:
48:15:44:fc:bc:c6:cb:5d:d6:1d:3c:6a:12:d8:72:
c3:12:f5:94:bc:9a:64:8d:f2:95:ff:3e:fd:51:63:
4b:f0:b4:9d:1c:19:48:ad:4b:17:b7:55:cf:57:f1:
98:02:22:5c:61:8e:b5:23:51:52:89:66:e8:d8:58:
eb:5b:52:0b:29:9a:33:10:61:4d:c1:a5:cb:36:14:
44:fd:06:70:c6:0a:c7:a7:65:66:14:ce:68:ef:25:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:65:63:62:92:8D:AA:F3:A9:AC:4A:85:9E:12:2A:E2:08:C1:CC
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e302e3233392e302f32342d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.239.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c1:d0:8d:2b:cd:cb:60:ea:69:ee:d4:3f:92:9a:82:cd:6e:
31:ac:86:8c:95:fe:7a:6a:0d:16:32:6f:3c:3b:2d:5f:18:40:
15:46:0e:e8:79:d0:a2:ee:ff:9e:e5:73:8f:d8:3f:92:a4:22:
33:ff:a7:d3:ff:8e:1b:50:17:ba:85:66:95:2a:81:2c:42:f5:
48:b9:dc:e9:83:a1:12:a6:bf:26:cb:40:39:48:9c:cb:68:35:
6b:fe:ba:b0:15:80:fa:22:75:43:2c:a2:89:1a:6c:59:c5:ba:
e4:42:01:cd:0b:13:a9:fc:33:26:8f:f5:0f:b9:a0:e5:d3:c7:
5c:dd:b5:65:1a:15:4e:5a:20:80:f3:33:f0:43:62:67:99:4f:
d6:f2:d4:08:0e:16:9d:15:38:d9:6b:62:b0:7a:87:45:80:9c:
ed:b3:34:19:81:ec:a0:ef:c8:33:f6:59:b0:d4:1d:d8:57:b0:
2d:2c:f5:14:e3:88:bf:7c:b0:a9:f6:f4:37:ae:1c:39:db:2e:
8e:fd:2a:47:3b:29:1a:b6:70:c1:44:6b:9e:93:53:8b:64:25:
4c:6e:22:89:c7:a5:43:9f:c5:53:91:b6:8b:b2:72:22:0a:45:
ad:4b:36:75:01:26:59:45:48:74:04:65:d8:11:fa:18:90:4d:
64:d7:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org