Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32332d3233203d3e203532383732.roa
File: 3136382e3139372e3133362e302f32332d3233203d3e203532383732.roa (raw, json)
Hash identifier: uGA6SOcP4QOTroKjOFhjFKYUYzR6Z8IH3b31BqPCdfI=
Subject key identifier: 62:3D:FE:06:23:94:30:4E:A0:41:9F:7B:98:A9:F3:C1:EE:61:9E:90
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 4063EEAA7FD5CEDC2989238D2DB86786772FB03A
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32332d3233203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:26 +0000
ROA not before: Mon 13 Nov 2023 18:45:26 +0000
ROA not after: Mon 11 Nov 2024 18:50:26 +0000
asID: 52872
IP address blocks: 168.197.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:63:ee:aa:7f:d5:ce:dc:29:89:23:8d:2d:b8:67:86:77:2f:b0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:26 2023 GMT
Not After : Nov 11 18:50:26 2024 GMT
Subject: CN=623DFE062394304EA0419F7B98A9F3C1EE619E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:f4:c0:3d:94:1c:a9:79:e7:c2:a7:15:49:
de:13:8d:78:52:46:ce:40:00:70:fe:38:25:02:7c:
20:d8:cb:ee:87:7a:dd:92:98:64:fa:fd:fe:55:3a:
1a:e7:20:8d:9e:16:6f:af:9f:a8:af:e8:d0:83:62:
75:1e:92:01:7d:45:05:b6:93:a8:c7:bd:a3:9c:3c:
51:cb:47:27:d3:4e:da:9e:9e:c0:ba:64:8f:3a:d1:
c9:3a:75:cc:36:b7:1b:ea:3a:fa:0a:77:3e:f3:ff:
0c:05:0d:7c:c8:4d:92:93:d4:bf:24:4f:45:9f:00:
da:26:d6:ce:13:b8:7e:38:3b:f4:e4:73:06:6b:55:
00:60:64:4c:21:72:0b:5a:8f:47:58:f4:77:10:3d:
8c:b1:4e:d0:8c:ff:bf:99:ad:c0:49:cb:de:17:58:
c5:39:c3:78:0d:b3:05:09:29:f2:a8:ce:f9:55:ad:
7a:95:79:53:46:de:0f:4d:d6:41:ab:70:0d:21:a4:
dc:ae:f5:c7:38:1c:24:6d:94:af:9d:8c:3a:4b:af:
2b:14:21:79:f9:6f:60:1e:f4:8c:d7:7a:86:7b:14:
f8:ff:6d:10:3b:b5:dd:df:09:d5:48:e2:8d:32:64:
89:32:0e:cf:18:6b:17:a4:2d:d9:03:f7:22:fa:b1:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:FE:06:23:94:30:4E:A0:41:9F:7B:98:A9:F3:C1:EE:61:9E:90
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32332d3233203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.136.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ad:6d:de:47:eb:87:94:4c:c2:bf:15:9e:be:99:ec:31:53:
26:82:c0:93:8f:36:32:d9:16:2f:74:0b:c9:6a:d1:a4:33:93:
f9:a5:84:bf:3e:21:8e:05:c9:a3:10:09:44:3f:4a:8d:b1:ab:
d6:26:6a:fd:60:e2:f4:36:1f:14:2a:1a:9e:de:19:e1:b7:4b:
44:b5:87:36:50:ae:48:a0:77:47:d4:04:0f:39:6b:73:be:7c:
24:db:31:ff:a9:3a:f5:b3:a7:1e:11:ef:b2:82:e9:a2:30:eb:
eb:59:3f:92:2e:a6:91:5b:56:4c:fc:dd:1d:f3:9f:27:77:b6:
fa:57:67:6f:c5:4d:e1:36:0f:8a:69:cc:19:ba:47:8f:e8:bb:
72:ea:93:c4:c8:a6:d4:7a:db:d3:c5:8c:7f:03:03:03:88:dd:
4a:1c:de:91:06:d0:37:9f:dd:a5:c3:dd:db:97:f3:a5:6b:5e:
e7:33:b9:9e:c9:6d:a0:a3:4c:a2:72:84:5c:70:4e:c2:dd:f0:
74:4c:ec:2c:b7:bb:b7:7e:d6:d5:5c:75:c2:2c:46:3a:ef:98:
3b:47:73:58:cc:0c:7d:28:04:4e:c8:18:0a:ca:79:62:87:37:
09:41:dc:24:ab:64:c9:0e:e7:01:8e:34:29:af:7f:0b:f7:14:
9a:f8:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:17 2025 by rpki-client