Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32342d3234203d3e203532383732.roa
File: 3136382e3139372e3133362e302f32342d3234203d3e203532383732.roa (raw, json)
Hash identifier: HREX7PaDNhDXp+xmqsvF7fT8F9sxmxk+8P+25525y1o=
Subject key identifier: 46:E7:BE:7C:25:7B:C0:FC:0D:59:8F:EC:C0:4D:F5:1B:9E:F2:68:ED
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 6681EB7B17DDECDB1B42751CA54C9420393614C5
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32342d3234203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:49:52 +0000
ROA not before: Mon 13 Nov 2023 18:44:52 +0000
ROA not after: Mon 11 Nov 2024 18:49:52 +0000
asID: 52872
IP address blocks: 168.197.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:81:eb:7b:17:dd:ec:db:1b:42:75:1c:a5:4c:94:20:39:36:14:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:44:52 2023 GMT
Not After : Nov 11 18:49:52 2024 GMT
Subject: CN=46E7BE7C257BC0FC0D598FECC04DF51B9EF268ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:42:c6:1b:45:c2:b2:7f:f6:b2:54:a7:3f:
b3:d7:39:5b:63:d0:27:5d:fd:52:03:0a:6d:0c:3a:
f6:29:ba:62:62:17:43:ea:4d:82:25:dc:4c:58:7a:
12:ab:f7:55:d3:fa:a1:8d:8d:81:91:83:09:87:bc:
e0:36:4e:11:bb:8e:95:c7:15:d4:d9:66:8d:bb:44:
e7:f1:e9:54:97:39:59:1a:40:fe:07:9d:50:77:b1:
2c:ce:ea:d0:72:4e:3e:4b:45:93:e0:c4:72:c5:19:
c3:46:78:95:58:16:9a:1b:f4:9d:98:8a:7e:3f:b6:
c5:79:ac:d5:1b:b8:7f:93:8a:e2:71:98:e4:ac:69:
60:5f:b6:a9:c4:5f:48:a8:c7:e3:ba:8a:39:49:49:
e2:38:93:d9:58:c5:11:b9:3e:ac:8d:23:ec:cf:5a:
5f:2f:6d:f3:3a:6f:d1:35:89:7c:e7:e9:88:bd:78:
39:ed:88:7f:46:d1:9d:2f:2f:42:72:4d:39:5f:a4:
55:ca:04:58:d0:7e:2a:9a:e1:5c:ac:4c:9f:2d:6c:
92:e1:b2:bb:af:ca:ab:19:4d:65:68:eb:a5:f3:4a:
7b:7e:05:5c:db:6d:e5:cc:14:07:a1:02:56:21:d1:
72:24:ef:d2:2a:cf:a6:75:a0:25:14:12:aa:ed:22:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:BE:7C:25:7B:C0:FC:0D:59:8F:EC:C0:4D:F5:1B:9E:F2:68:ED
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32342d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:15:1b:1e:6f:f2:4d:eb:76:96:6d:5f:dd:f5:de:a5:80:f7:
63:c0:bc:38:5a:54:7d:09:0c:c3:ec:fe:c7:67:71:cf:2b:bb:
70:7d:3f:bc:76:2c:98:e9:4f:e7:2a:a1:8f:df:99:9e:07:e9:
03:d8:1a:cd:67:da:9e:55:1d:b8:7e:e9:df:e0:47:4a:72:44:
24:14:e6:a8:74:db:8a:14:45:5b:19:62:5e:7f:07:a4:d0:5a:
05:f7:df:5e:b8:28:59:7b:85:ee:c7:a1:87:cb:e7:7e:6b:64:
4b:6d:4a:23:9f:6d:1a:32:68:5f:fb:05:33:2f:ee:8a:6f:ef:
71:2e:ee:6b:25:43:08:15:35:e0:a7:ea:da:7a:93:04:f9:59:
11:88:24:21:6a:11:c6:67:d4:07:f8:c5:cb:cf:af:83:54:c8:
56:26:6e:ab:ba:a0:0b:d4:aa:a7:3a:63:14:da:58:a2:5c:42:
c7:5b:4e:cf:e8:18:31:cc:8c:6b:41:5f:d2:f3:6d:aa:d2:29:
4c:e8:ec:54:c3:55:41:c5:f1:3c:3a:9f:01:87:b5:10:0b:76:
aa:e1:38:36:b1:07:72:64:f4:5e:67:4b:07:59:a4:f5:be:e8:
a4:d5:ab:d9:de:38:3a:5f:8d:10:25:f2:52:35:f7:7b:3d:af:
a9:de:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org