Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
File: 3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa (raw, json)
Hash identifier: et6AJsRW+hvPQz8dVedMqS1lCdI10X9p1TWtEt/RWbU=
Subject key identifier: 72:43:16:E5:D4:76:FF:FB:AC:DD:78:0F:3C:77:E0:AA:72:AD:BE:B6
Certificate issuer: /CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Certificate serial: 7E19D8EDEEEAD718491F50FBB345D2CAF26D89D8
Authority key identifier: 8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
Signing time: Mon 12 Feb 2024 18:38:00 +0000
ROA not before: Mon 12 Feb 2024 18:33:00 +0000
ROA not after: Mon 10 Feb 2025 18:38:00 +0000
asID: 264528
IP address blocks: 168.194.104.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:19:d8:ed:ee:ea:d7:18:49:1f:50:fb:b3:45:d2:ca:f2:6d:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Validity
Not Before: Feb 12 18:33:00 2024 GMT
Not After : Feb 10 18:38:00 2025 GMT
Subject: CN=724316E5D476FFFBACDD780F3C77E0AA72ADBEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:93:93:7e:3f:b6:a1:1b:d2:ba:22:af:42:
00:82:d0:d2:9a:57:2b:55:1d:37:35:b1:b0:5b:78:
41:f5:67:8a:f9:39:52:91:f3:28:de:eb:30:07:85:
af:8b:8e:6f:7f:de:5b:5f:9a:f9:61:0e:05:77:21:
ff:f8:45:71:f3:d6:5f:bc:d9:58:c6:e4:75:ff:3a:
ed:4f:c1:65:37:a1:ed:10:fc:67:bc:73:79:41:a8:
c0:dd:a2:d0:fe:2c:75:86:76:f8:e6:8b:0a:90:b9:
9b:95:73:c5:dd:3e:88:ce:3e:99:1a:da:bf:16:13:
33:31:fc:b5:57:45:35:15:e9:30:da:e2:8c:b3:13:
39:3b:43:68:40:8d:f5:50:85:35:21:3d:43:30:50:
20:6b:41:0d:8e:4b:da:31:83:b3:19:b1:aa:d6:8e:
40:b4:09:48:ee:d7:a6:91:72:90:74:24:9c:a5:0b:
c1:3b:ad:20:18:af:49:50:f6:c6:29:c9:f6:63:ff:
95:69:ef:24:12:2a:9c:7b:9c:ef:4a:c4:48:05:c6:
46:e7:24:5a:6e:59:0f:cb:25:b6:62:d6:59:8c:e3:
26:39:36:78:fa:7e:86:29:d5:45:ea:30:80:97:28:
39:05:cf:31:c7:c1:79:36:95:94:76:91:da:6d:ec:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:16:E5:D4:76:FF:FB:AC:DD:78:0F:3C:77:E0:AA:72:AD:BE:B6
X509v3 Authority Key Identifier:
keyid:8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.104.0/22
Signature Algorithm: sha256WithRSAEncryption
14:a3:d7:91:37:63:14:ec:57:94:4a:bd:49:43:db:3e:ef:fb:
b3:bf:09:8b:7d:86:a6:3b:fc:c5:58:ea:32:6f:88:1f:e6:a3:
39:af:5c:af:09:4a:a1:6e:ae:89:fd:c5:94:87:4a:3f:40:2b:
b8:d5:72:d6:e0:94:6b:97:64:2e:45:c7:b0:23:cb:a8:15:57:
72:0c:93:4e:b3:9a:03:ef:29:9b:78:b6:c5:6d:7d:33:66:95:
22:ef:c1:fb:8d:f0:4f:d8:40:1c:19:7d:6f:93:7c:2a:4b:1c:
2e:5e:f4:39:44:51:26:6e:36:74:95:d4:67:8d:5b:51:af:70:
49:a2:50:4f:6a:f1:dd:7f:8f:67:c4:45:8b:dc:86:38:fe:d3:
37:76:af:e0:ab:5f:cc:ec:2a:7e:7d:c8:69:dc:8e:fb:eb:42:
28:82:d8:8a:6b:66:42:78:a6:c4:af:e6:7e:d0:9b:d7:e3:b2:
8c:b6:1a:74:e4:9f:48:37:45:f1:56:cd:10:74:97:c8:31:1e:
2f:a3:bb:8e:de:1b:1f:d8:b6:9c:f7:38:0a:72:46:56:37:c7:
65:aa:a4:14:75:80:e4:ba:d8:b3:37:22:6c:7f:71:9c:82:68:
29:8b:6b:a2:72:e5:0c:37:78:6a:50:10:cd:e9:a1:cc:2f:42:
eb:be:01:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfhnY7e7q1xhJH1D7s0XSyvJtidgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZGODdFREI5NDY4QTk5RjlEMTAxMDkzREI1QTExMTRD
MDI4RjMyQzAeFw0yNDAyMTIxODMzMDBaFw0yNTAyMTAxODM4MDBaMDMxMTAvBgNV
BAMTKDcyNDMxNkU1RDQ3NkZGRkJBQ0RENzgwRjNDNzdFMEFBNzJBREJFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV75OTfj+2oRvSuiKvQgCC0NKa
VytVHTc1sbBbeEH1Z4r5OVKR8yje6zAHha+Ljm9/3ltfmvlhDgV3If/4RXHz1l+8
2VjG5HX/Ou1PwWU3oe0Q/Ge8c3lBqMDdotD+LHWGdvjmiwqQuZuVc8XdPojOPpka
2r8WEzMx/LVXRTUV6TDa4oyzEzk7Q2hAjfVQhTUhPUMwUCBrQQ2OS9oxg7MZsarW
jkC0CUju16aRcpB0JJylC8E7rSAYr0lQ9sYpyfZj/5Vp7yQSKpx7nO9KxEgFxkbn
JFpuWQ/LJbZi1lmM4yY5Nnj6foYp1UXqMICXKDkFzzHHwXk2lZR2kdpt7HJ9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUckMW5dR2//us3XgPPHfgqnKtvrYwHwYDVR0j
BBgwFoAUj/h+25RoqZ+dEBCT21oRFMAo8ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkdTZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpK
bzgvMC84RkY4N0VEQjk0NjhBOTlGOUQxMDEwOTNEQjVBMTExNEMwMjhGMzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGRjg3RURCOTQ2OEE5OUY5
RDEwMTA5M0RCNUExMTE0QzAyOEYzMkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHU2VQcm5NWGp2cE1pUEFHcmZlc0htem80TDE4MTMzVkRLZUFQUVVKSm84LzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDM1MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCaDANBgkqhkiG9w0BAQsFAAOCAQEAFKPX
kTdjFOxXlEq9SUPbPu/7s78Ji32Gpjv8xVjqMm+IH+ajOa9crwlKoW6uif3FlIdK
P0AruNVy1uCUa5dkLkXHsCPLqBVXcgyTTrOaA+8pm3i2xW19M2aVIu/B+43wT9hA
HBl9b5N8KkscLl70OURRJm42dJXUZ41bUa9wSaJQT2rx3X+PZ8RFi9yGOP7TN3av
4KtfzOwqfn3IadyO++tCKILYimtmQnimxK/mftCb1+OyjLYadOSfSDdF8VbNEHSX
yDEeL6O7jt4bH9i2nPc4CnJGVjfHZaqkFHWA5LrYszcibH9xnIJoKYtronLlDDd4
alAQzemhzC9C674BOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org