Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133382e302f32332d3233203d3e203532383732.roa
File: 3136382e3139372e3133382e302f32332d3233203d3e203532383732.roa (raw, json)
Hash identifier: WUn4d03PO3SL7DcIFAg8jkgzuHLj1QikJwvbfhu7gq0=
Subject key identifier: 5D:AC:99:F0:7D:A4:07:86:43:8C:1E:77:4F:52:78:A6:25:03:EE:9A
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 901093BAC3C209E1DF41ACA7259E879A6D46DC
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133382e302f32332d3233203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:50:24 +0000
ROA not before: Mon 13 Nov 2023 18:45:24 +0000
ROA not after: Mon 11 Nov 2024 18:50:24 +0000
asID: 52872
IP address blocks: 168.197.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
90:10:93:ba:c3:c2:09:e1:df:41:ac:a7:25:9e:87:9a:6d:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:45:24 2023 GMT
Not After : Nov 11 18:50:24 2024 GMT
Subject: CN=5DAC99F07DA40786438C1E774F5278A62503EE9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:97:df:ec:82:44:0d:02:c8:0b:17:80:8d:
24:12:c9:22:02:9b:c2:bc:ba:20:92:29:fd:26:c8:
29:62:0c:13:52:87:54:c8:39:70:69:2b:46:a2:88:
e3:32:64:91:c8:28:05:08:43:2c:8b:dc:cd:7f:3a:
ec:14:a7:65:d2:42:12:cb:9c:10:d4:8f:b4:d8:bd:
31:b0:d6:82:b9:f3:08:55:6d:e3:4b:07:a3:c1:18:
17:f3:f0:80:0e:cb:b2:66:6b:80:75:b5:25:58:af:
df:42:4f:64:80:de:eb:dc:26:5c:f4:73:cd:fd:53:
65:1a:dc:90:9e:2d:5d:12:e4:bb:ef:19:ac:1a:82:
ff:70:6b:cf:34:0b:46:b7:48:cb:14:f0:09:59:89:
12:20:f3:30:44:94:8e:93:d0:3c:84:72:70:89:93:
50:9e:b1:7f:e9:69:18:d2:06:c2:c4:12:4d:10:d3:
fb:e0:b5:97:56:92:88:e3:d7:94:d9:12:40:0b:39:
eb:c9:bc:3a:74:e0:e8:03:b5:f6:48:25:d6:9b:e1:
c0:41:b8:5d:45:59:96:77:ce:69:c7:d9:b4:be:1b:
ce:7d:70:d4:66:19:5f:4a:bf:ae:22:9e:d6:51:d3:
66:9f:53:89:bf:2a:ff:7d:6c:78:4e:aa:d1:92:5d:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AC:99:F0:7D:A4:07:86:43:8C:1E:77:4F:52:78:A6:25:03:EE:9A
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133382e302f32332d3233203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.138.0/23
Signature Algorithm: sha256WithRSAEncryption
56:2c:b8:65:59:e3:ec:30:79:8c:a7:62:e5:62:1c:24:dd:f0:
db:a8:d8:d6:0d:1b:af:92:56:65:e2:2f:3a:28:64:9d:e3:1d:
0b:8d:91:41:6f:8f:23:02:b5:37:b3:5b:3d:fb:31:5c:7e:b2:
53:da:54:66:c1:bc:47:22:45:10:10:27:0c:ad:c2:7f:f7:28:
03:d5:8b:5c:25:16:9e:1a:f4:3a:3e:99:5d:8e:d2:26:2d:f4:
da:b5:d6:fc:20:1c:70:2f:fb:9b:f3:d1:6f:c5:03:87:6f:97:
84:60:33:3b:be:d9:b4:59:88:eb:d5:e7:ef:5a:d7:1e:c3:ad:
3d:de:23:d9:c6:86:6e:b1:f9:11:3b:cd:c6:cf:3c:17:5d:0a:
38:98:f9:70:bc:92:ac:32:32:02:f3:38:72:07:c8:e9:80:d1:
8e:2e:6b:67:4b:f4:21:ad:19:1b:c7:3f:2e:91:0f:3b:21:32:
79:67:7d:fa:12:73:f5:86:07:20:4d:b4:26:82:b5:f6:81:0c:
3c:2b:f1:ac:2e:58:6b:f1:85:ca:5d:ec:80:41:81:62:c4:92:
94:94:d0:e3:22:40:5b:34:78:80:3a:d9:58:a0:30:d7:43:04:
13:d6:9a:5a:0d:7b:61:e9:6c:4c:b2:31:09:11:75:27:3f:e4:
75:4b:79:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAJAQk7rDwgnh30GspyWeh5ptRtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZENjBGODFCMTUzREJGMjRBMTk5NjRERDI5OTZBMUY3
NERFNTdGNzAeFw0yMzExMTMxODQ1MjRaFw0yNDExMTExODUwMjRaMDMxMTAvBgNV
BAMTKDVEQUM5OUYwN0RBNDA3ODY0MzhDMUU3NzRGNTI3OEE2MjUwM0VFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzJff7IJEDQLICxeAjSQSySIC
m8K8uiCSKf0myCliDBNSh1TIOXBpK0aiiOMyZJHIKAUIQyyL3M1/OuwUp2XSQhLL
nBDUj7TYvTGw1oK58whVbeNLB6PBGBfz8IAOy7Jma4B1tSVYr99CT2SA3uvcJlz0
c839U2Ua3JCeLV0S5LvvGawagv9wa880C0a3SMsU8AlZiRIg8zBElI6T0DyEcnCJ
k1CesX/paRjSBsLEEk0Q0/vgtZdWkojj15TZEkALOevJvDp04OgDtfZIJdab4cBB
uF1FWZZ3zmnH2bS+G859cNRmGV9Kv64intZR02afU4m/Kv99bHhOqtGSXTtrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXayZ8H2kB4ZDjB53T1J4piUD7powHwYDVR0j
BBgwFoAUv9YPgbFT2/JKGZZN0plqH3TeV/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhjTFdYQzdoZFFUa0pyY2FicFRxUDV3QTFoUnBIWnZmUUdVblhLZEFH
M1cvMC9CRkQ2MEY4MUIxNTNEQkYyNEExOTk2NEREMjk5NkExRjc0REU1N0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGRDYwRjgxQjE1M0RCRjI0
QTE5OTY0REQyOTk2QTFGNzRERTU3RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4Y0xXWEM3aGRRVGtKcmNhYnBUcVA1d0ExaFJwSFp2ZlFHVW5YS2RBRzNXLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzODM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoxYowDQYJKoZIhvcNAQELBQADggEBAFYsuGVZ
4+wweYynYuViHCTd8Nuo2NYNG6+SVmXiLzooZJ3jHQuNkUFvjyMCtTezWz37MVx+
slPaVGbBvEciRRAQJwytwn/3KAPVi1wlFp4a9Do+mV2O0iYt9Nq11vwgHHAv+5vz
0W/FA4dvl4RgMzu+2bRZiOvV5+9a1x7DrT3eI9nGhm6x+RE7zcbPPBddCjiY+XC8
kqwyMgLzOHIHyOmA0Y4ua2dL9CGtGRvHPy6RDzshMnlnffoSc/WGByBNtCaCtfaB
DDwr8awuWGvxhcpd7IBBgWLEkpSU0OMiQFs0eIA62VigMNdDBBPWmloNe2HpbEyy
MQkRdSc/5HVLeaE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org