Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133382e302f32342d3234203d3e203532383732.roa
File: 3136382e3139372e3133382e302f32342d3234203d3e203532383732.roa (raw, json)
Hash identifier: QkDqCXNn0y5LLYteNAzIRdRGm9u+foMA62rlgS9fzck=
Subject key identifier: 27:88:5F:DE:8B:F6:5E:76:B2:B3:9C:54:57:1E:4A:0C:63:17:89:AC
Certificate issuer: /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial: 07C22264DC4A2043DC2A551B371DDD2CD85EBC4C
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133382e302f32342d3234203d3e203532383732.roa
Signing time: Mon 13 Nov 2023 18:49:47 +0000
ROA not before: Mon 13 Nov 2023 18:44:47 +0000
ROA not after: Mon 11 Nov 2024 18:49:47 +0000
asID: 52872
IP address blocks: 168.197.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c2:22:64:dc:4a:20:43:dc:2a:55:1b:37:1d:dd:2c:d8:5e:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Validity
Not Before: Nov 13 18:44:47 2023 GMT
Not After : Nov 11 18:49:47 2024 GMT
Subject: CN=27885FDE8BF65E76B2B39C54571E4A0C631789AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:05:a9:9b:fa:01:4e:7f:0a:94:24:5a:97:
3c:ca:76:f0:fd:96:9a:cf:c7:bc:3e:3b:98:3d:4c:
58:44:50:60:4e:d7:a7:09:47:ec:35:c5:34:47:b7:
89:96:05:b4:80:34:eb:35:a2:4e:45:25:58:a8:73:
2c:ea:fb:84:d0:06:44:71:b0:0c:2c:6e:e9:a1:fc:
21:bc:34:dc:50:88:aa:68:c9:48:04:a7:11:f3:06:
90:ad:65:c0:9c:f3:09:b3:d1:11:53:c8:03:20:62:
a9:36:8d:54:9e:5a:af:5c:c1:13:a5:e2:41:55:cb:
5c:a4:e1:de:bd:0a:a0:a9:15:e1:c1:18:b6:ba:33:
1a:8f:3b:b0:d7:85:e3:02:d0:ed:08:d2:4d:1b:fd:
6c:22:86:d1:47:13:20:81:5c:d5:36:5f:72:63:e9:
69:03:af:24:45:51:7e:a4:fb:f9:9b:bd:a2:6e:31:
0c:a9:30:2b:33:04:55:a7:65:95:df:04:f6:39:a0:
76:49:88:8b:d0:9c:58:88:65:43:c3:16:0f:1f:5c:
10:be:b8:8d:74:b1:f4:6e:68:c3:db:7a:28:a7:ca:
df:f0:60:09:28:61:1a:a1:34:c3:4a:c3:00:63:77:
57:f3:13:69:44:d5:48:8a:ad:1f:b8:36:e3:44:9b:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:5F:DE:8B:F6:5E:76:B2:B3:9C:54:57:1E:4A:0C:63:17:89:AC
X509v3 Authority Key Identifier:
keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133382e302f32342d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:18:4d:4a:e1:f5:7e:ce:9b:2e:1f:8e:e7:19:15:25:67:fd:
c4:a7:72:a1:ea:a0:38:11:15:eb:3a:45:46:c1:12:e3:0d:17:
77:9e:69:e7:11:a7:45:fd:3e:f7:ca:a6:fb:06:9b:88:53:18:
1f:df:68:34:d0:3f:50:a4:fd:63:01:39:28:ba:01:b5:1c:d5:
b2:d8:68:5b:fb:c2:d5:b2:6f:61:a2:be:40:ed:a2:44:53:a9:
48:0b:fa:1e:2f:40:fa:40:bd:51:67:d9:e8:00:84:b5:6b:fb:
e1:15:8f:ee:c1:7f:bc:33:34:cd:a4:c5:9e:2b:b6:26:d4:3a:
26:50:07:cc:42:50:8d:73:7d:ba:31:30:2e:d5:8d:5d:10:95:
10:7e:70:9a:14:a7:97:2f:69:b5:17:24:4b:aa:47:7b:7f:f0:
01:b1:6e:58:d3:77:3e:8f:f7:fd:27:21:4f:82:fd:b6:4c:89:
a2:5c:82:0b:8f:08:48:1f:56:f9:01:d0:d6:9c:fe:01:77:96:
4e:13:ad:ae:8b:f1:ba:96:11:0c:62:f0:d1:12:d3:d5:e7:98:
eb:d9:56:9f:44:72:c1:63:be:61:59:5f:93:d9:4a:5d:4c:63:
df:10:a6:37:10:e6:65:01:27:5a:13:f1:b1:0c:3e:75:61:96:
3d:d0:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:41 2025 by rpki-client