Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3232203d3e203532383732.roa
File: 3136382e3139372e3133362e302f32322d3232203d3e203532383732.roa (raw, json)
Hash identifier: 3nrZTK0yVcetcZTIOD//Ouf4RbHKpx39vFzYxAf8VAM=
Subject key identifier: BA:6A:7A:6C:BC:8C:BE:8C:C1:1D:A2:26:F2:85:77:62:36:F2:9B:2E
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 55B91F670967F610B8A214C01566E33A931E14E4
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3232203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:56 +0000
ROA not before: Mon 13 Nov 2023 18:45:56 +0000
ROA not after: Mon 11 Nov 2024 18:50:56 +0000
asID: 52872
IP address blocks: 168.197.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b9:1f:67:09:67:f6:10:b8:a2:14:c0:15:66:e3:3a:93:1e:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:56 2023 GMT
Not After : Nov 11 18:50:56 2024 GMT
Subject: CN=BA6A7A6CBC8CBE8CC11DA226F285776236F29B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:27:2c:4b:58:44:11:07:e5:0a:86:63:20:
07:5a:80:fb:96:9f:81:d7:bb:24:0e:98:83:23:08:
35:01:62:50:2f:ff:45:39:3c:74:45:f6:6b:2b:95:
42:93:ef:bc:fd:00:9f:50:08:3d:5e:82:0b:74:31:
fd:18:7d:3d:c4:00:6d:29:23:7c:0b:91:63:f3:a4:
fe:14:30:16:ca:82:29:4c:97:b2:60:2e:32:f5:0f:
37:dc:31:fa:47:00:48:91:0d:66:e1:51:37:12:ab:
37:d1:72:c7:6a:d3:95:ee:98:ba:71:34:03:98:84:
8b:37:0f:97:8a:e6:37:b4:37:55:84:a2:3d:ce:cc:
ef:1b:5e:6c:e0:31:87:a7:18:ac:e6:ac:97:78:40:
1b:98:40:e0:04:e8:5c:fb:0b:7b:d7:61:f8:b9:03:
44:1c:2d:7e:bf:a4:99:c9:33:33:c3:05:f3:cc:e7:
fe:48:09:db:1e:b9:e9:73:36:33:cc:c3:d7:81:fa:
b4:6a:b4:fc:22:f9:d8:72:76:70:a4:8c:b5:dc:f5:
2d:88:30:36:76:7e:f0:89:88:14:da:53:95:6a:d6:
c3:40:14:62:0b:bc:3e:04:ce:c9:52:e8:93:6a:eb:
df:85:b8:80:57:1a:60:37:6b:96:46:ac:18:3e:1d:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:7A:6C:BC:8C:BE:8C:C1:1D:A2:26:F2:85:77:62:36:F2:9B:2E
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3232203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.136.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:1d:d9:cb:fd:b2:d7:db:50:7d:d6:41:ae:b8:0f:43:a1:95:
14:d8:a8:66:bf:6c:fd:01:b6:5a:92:3b:e7:df:41:c2:12:6f:
b3:31:40:76:87:63:b2:c9:49:50:7a:cf:31:a5:ff:33:6e:dc:
71:37:52:48:07:71:4d:0c:21:1e:da:52:9c:e5:69:0a:f1:f7:
80:00:bf:41:89:6d:af:a1:94:54:e1:90:59:5b:6f:50:75:94:
85:60:87:5d:66:8f:af:1f:32:98:72:a4:79:3c:fb:33:20:83:
5c:72:bc:5a:33:ee:78:bd:9b:9d:12:c8:e2:5b:eb:42:13:65:
fa:3e:cb:62:08:91:e8:99:99:a2:92:d1:b2:ad:3a:6a:58:70:
73:50:b9:01:bb:c7:6e:ab:12:11:1c:de:d4:c2:e7:18:c7:be:
96:d2:42:af:a6:4b:70:ce:42:66:bd:76:e9:7f:6f:99:8c:c3:
4a:b9:b6:f4:e1:6a:da:51:5e:87:96:62:2d:02:46:15:64:2b:
e7:69:c4:b0:3e:65:1c:5f:c8:4f:61:62:e0:b6:57:48:27:b3:
5f:45:9d:9a:c9:78:d4:e4:5a:99:ee:e1:ed:dd:f5:62:e2:87:
82:c6:36:fc:39:69:ec:c4:41:7d:68:3f:03:ca:6e:1e:72:dc:
cf:2d:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org