Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3133382e302e32302e302f32322d3332203d3e20323634353238.roa
File: 3133382e302e32302e302f32322d3332203d3e20323634353238.roa (raw, json)
Hash identifier: SoFsOUIk3ygg+CdYRlOOz2JQVJTGG/YBOrURP9Z2awo=
Subject key identifier: ED:30:62:FD:30:46:AD:CB:D7:3F:6B:7D:BB:47:AE:3A:C7:5A:AE:D7
Certificate issuer: /CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Certificate serial: 654560AC6983C892BF2D7FC861CD6577F31B38E2
Authority key identifier: 8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3133382e302e32302e302f32322d3332203d3e20323634353238.roa
Signing time: Mon 12 Feb 2024 18:36:42 +0000
ROA not before: Mon 12 Feb 2024 18:31:42 +0000
ROA not after: Mon 10 Feb 2025 18:36:42 +0000
asID: 264528
IP address blocks: 138.0.20.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:45:60:ac:69:83:c8:92:bf:2d:7f:c8:61:cd:65:77:f3:1b:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Validity
Not Before: Feb 12 18:31:42 2024 GMT
Not After : Feb 10 18:36:42 2025 GMT
Subject: CN=ED3062FD3046ADCBD73F6B7DBB47AE3AC75AAED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:a9:63:8b:5c:bd:40:b8:4f:92:1b:68:e9:
d9:c4:12:de:ab:33:49:55:47:de:2d:e2:05:28:39:
fd:6b:6d:4f:93:8a:a9:02:b6:2a:da:52:e6:f8:b1:
5a:73:9c:fb:c1:48:f1:2d:e4:23:45:9e:19:39:23:
4e:ec:d4:c7:bd:c2:b2:17:09:ec:dc:8c:0c:71:9d:
34:0b:b3:5e:db:73:cc:65:d9:e4:f9:6d:97:3e:02:
6a:26:cd:18:29:6d:df:52:ed:91:52:dc:8c:be:d7:
a2:a0:fc:44:0d:30:fe:e9:40:ed:fe:03:05:ab:4f:
a9:a2:be:16:e1:35:35:eb:9f:b7:a7:32:de:d4:99:
3e:2c:72:f4:dc:d4:0e:e0:58:a0:87:9d:d7:8b:11:
01:29:95:ae:2d:40:76:0b:4a:fc:c5:48:21:ca:f6:
1d:05:4b:a6:a0:d2:09:22:9e:ed:d7:06:d4:b9:ee:
30:e5:58:51:04:d2:ef:c1:59:e9:63:20:b5:57:c0:
36:3f:5c:1d:24:69:8f:aa:66:28:5a:63:80:3e:06:
68:26:91:f5:22:3c:e7:8d:0f:46:a6:d3:37:ea:99:
3e:0c:98:8a:60:84:71:f7:76:d0:b5:97:ce:0f:96:
4c:da:b3:9b:04:47:c8:cd:98:9d:fb:13:0a:78:bd:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:62:FD:30:46:AD:CB:D7:3F:6B:7D:BB:47:AE:3A:C7:5A:AE:D7
X509v3 Authority Key Identifier:
keyid:8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3133382e302e32302e302f32322d3332203d3e20323634353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.20.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b1:c0:82:52:aa:2b:2f:7f:41:08:99:6b:5c:de:4c:1c:18:
64:a8:18:83:82:c5:5e:51:c2:d8:fc:75:4e:d1:2d:f1:e2:3e:
9a:2c:97:da:e9:73:9c:e8:f4:a3:7c:f1:85:fb:c5:e3:c1:c1:
6d:5d:4a:ee:ba:21:7c:ed:ca:1b:9e:1b:a8:7b:56:bd:9b:50:
a8:44:91:2b:94:42:b9:b1:ba:bd:82:5d:25:57:49:f7:09:23:
54:95:bd:bb:49:a6:8b:54:6c:95:93:75:c7:c4:2f:d1:e3:9c:
b9:5e:ec:ce:ca:b7:bf:22:a1:5f:04:fb:64:c0:a0:c0:22:57:
7b:db:e7:02:62:c5:a8:01:41:04:4b:21:8a:37:0e:47:0f:a1:
47:7a:d2:b0:1a:a0:53:ae:46:81:11:86:06:62:60:b1:dd:7c:
0c:b0:31:4d:96:b1:d3:75:84:f2:be:ec:d2:18:f5:59:3e:c2:
ca:c5:12:bc:a5:36:bc:f9:ed:3c:47:14:74:18:42:75:66:82:
9e:ff:a2:14:7c:c9:01:e6:b5:52:53:fa:8e:b3:94:3b:98:70:
99:7f:af:9d:a2:7e:4f:3e:8a:12:e9:97:53:b6:c1:82:f6:9b:
16:c5:df:58:6c:5b:c5:ab:37:7b:a8:b1:9e:6e:ba:e6:20:ec:
47:64:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org