Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa
File: 3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa (raw, json)
Hash identifier: KFOojsGCtyALhLFcrUNHaT325SDIpwNwp0crX1u2sNU=
Subject key identifier: FB:F7:9D:EE:05:C2:63:D7:DC:19:59:58:83:75:D6:F6:C1:AB:CE:81
Certificate issuer: /CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
Certificate serial: 3F030A045EC7F08063EA5088123369502AAF86FB
Authority key identifier: 11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa
Signing time: Wed 27 Sep 2023 19:31:29 +0000
ROA not before: Wed 27 Sep 2023 19:26:29 +0000
ROA not after: Wed 25 Sep 2024 19:31:29 +0000
asID: 264889
IP address blocks: 168.227.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:03:0a:04:5e:c7:f0:80:63:ea:50:88:12:33:69:50:2a:af:86:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
Validity
Not Before: Sep 27 19:26:29 2023 GMT
Not After : Sep 25 19:31:29 2024 GMT
Subject: CN=FBF79DEE05C263D7DC1959588375D6F6C1ABCE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d1:85:1a:e8:03:54:2f:03:e2:a9:76:d5:60:
05:53:de:23:81:0e:03:88:e1:17:f0:8e:a6:fe:46:
f0:0f:0b:cd:b1:10:7b:71:48:64:6d:0b:63:c4:15:
fc:d1:a4:2f:35:6c:9d:c9:41:1b:a0:a0:eb:6a:10:
f3:19:1c:2b:be:29:21:60:bc:86:b9:74:56:f5:4c:
88:fd:31:98:22:ac:c1:5c:07:ea:8c:93:ca:f1:2d:
c0:cb:e8:bf:f8:95:65:97:87:9b:8d:6b:de:ca:af:
61:e5:c7:91:4c:5e:67:1a:6b:e9:ee:f9:0d:44:d8:
94:11:57:48:d1:bd:3e:d3:e7:a1:e5:0a:92:86:a6:
a0:2f:8c:3b:e8:8c:21:4d:3c:bd:42:4f:8d:c3:01:
b9:ed:22:03:6e:7f:d6:be:9b:b4:8c:13:44:5a:8b:
2a:24:ba:1d:6f:48:3e:e9:9f:4a:94:cd:4d:fc:c8:
d5:4c:8c:24:65:33:67:a4:c6:e9:86:4a:8d:21:fc:
eb:76:4a:60:5e:19:1b:81:00:15:5d:3a:18:1b:83:
9b:5a:d1:db:0e:66:47:8c:bb:a3:34:23:68:c2:45:
f4:5a:bd:e7:10:a9:a0:40:e4:45:40:53:d1:c5:6d:
b5:fc:5c:f8:1d:32:db:86:56:5a:42:a8:4b:9a:1c:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:9D:EE:05:C2:63:D7:DC:19:59:58:83:75:D6:F6:C1:AB:CE:81
X509v3 Authority Key Identifier:
keyid:11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3234203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
51:25:23:05:89:65:96:ff:28:35:6a:14:2a:26:90:d4:d6:46:
d6:b8:9a:ff:a0:cf:56:b7:81:ac:77:6c:5b:84:c0:b4:6a:a5:
15:5b:02:bc:56:c5:11:71:a1:02:65:8b:eb:ae:ba:10:52:1d:
01:ee:ed:23:c4:b3:71:62:f4:33:09:83:21:6b:78:ec:ba:01:
0d:2a:c1:fa:a7:d8:26:f6:ac:21:a1:c4:c4:a8:0c:72:37:23:
07:cf:bf:c1:d9:fd:6b:44:97:1a:e2:8b:ff:b0:4f:b7:98:ff:
96:fe:42:95:93:59:9a:4e:4c:cc:4a:e8:aa:c1:94:5a:e4:ab:
37:ff:1c:9d:3f:d6:6c:29:e1:c6:77:aa:f9:7c:ed:42:6e:6c:
e2:36:7d:33:47:e6:bf:ad:6c:e2:d5:68:be:a0:ee:f8:62:4f:
c1:b6:71:a0:83:84:d9:59:84:ea:b5:35:fb:f1:bf:87:0c:bf:
3a:01:f3:69:32:01:dd:8c:98:4f:fe:81:2b:3a:62:30:5b:07:
59:8a:b1:41:8a:36:4d:30:2a:c1:09:7b:7e:fa:ce:6a:40:31:
64:e5:0a:f7:cd:84:eb:0a:33:10:b6:fc:88:df:3b:79:5b:2f:
0e:aa:3e:e8:3d:b7:5a:57:ab:b4:18:30:8d:c1:ba:09:5d:e8:
af:d3:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org