Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
File: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (raw, json)
Hash identifier: Sh457KsYEhZlc3bOx04agb1IXWKubPrfMMGJXt/h5wg=
Subject key identifier: F0:F8:89:F2:55:73:80:B7:B9:AF:B5:E8:56:BE:1E:CF:6C:F9:E0:8B
Certificate issuer: /CN=68B54B5C6E66A7A25A9432A41DAB12D98C133C26
Certificate serial: 56C8D00A51C4E83F2FA0D2722543F0D2F2375D19
Authority key identifier: 68:B5:4B:5C:6E:66:A7:A2:5A:94:32:A4:1D:AB:12:D9:8C:13:3C:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
Signing time: Sat 22 Jul 2023 14:48:56 +0000
ROA not before: Sat 22 Jul 2023 14:43:56 +0000
ROA not after: Sat 20 Jul 2024 14:48:56 +0000
asID: 262408
IP address blocks: 168.0.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c8:d0:0a:51:c4:e8:3f:2f:a0:d2:72:25:43:f0:d2:f2:37:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68B54B5C6E66A7A25A9432A41DAB12D98C133C26
Validity
Not Before: Jul 22 14:43:56 2023 GMT
Not After : Jul 20 14:48:56 2024 GMT
Subject: CN=F0F889F2557380B7B9AFB5E856BE1ECF6CF9E08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:b8:f5:06:46:f5:6d:f2:76:d6:84:07:74:
70:28:57:47:5a:88:30:2c:b7:bd:f4:cd:89:f6:3b:
a8:dc:15:12:37:2a:c6:6f:58:00:15:f3:07:c7:eb:
e6:c6:aa:01:5e:6f:c7:ca:03:8a:cb:13:ec:1e:93:
22:c6:57:de:95:60:79:0e:7d:75:cc:88:a7:db:46:
d6:ec:d0:41:02:a5:69:05:de:2e:90:29:e3:2b:35:
31:5a:bf:9c:09:45:c3:60:25:e9:68:a2:03:1d:8b:
42:b0:40:e4:15:42:6e:b6:f1:cc:5d:bb:ca:d7:cf:
3c:b0:e9:51:89:fc:b9:2b:b9:da:fa:0e:03:6b:36:
ab:04:73:2e:83:44:6e:68:47:62:6a:8b:03:76:0a:
b4:4a:9f:d8:a0:3e:68:18:b6:e4:4a:5d:e5:f9:13:
e2:dd:5b:a3:69:49:b6:3f:ee:54:70:c8:bf:0a:7f:
72:54:69:90:da:14:30:54:56:c1:ad:bd:70:6d:ed:
f8:54:9d:1d:cf:ee:e6:01:de:df:8f:85:89:bd:58:
d0:f3:fd:d1:a5:b6:79:1f:13:ab:5c:e5:68:88:86:
1a:4e:2d:1f:fa:ef:30:f7:1f:fb:37:e4:e7:28:c9:
63:60:80:d8:28:12:9e:ed:53:aa:c3:6f:f9:80:03:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:89:F2:55:73:80:B7:B9:AF:B5:E8:56:BE:1E:CF:6C:F9:E0:8B
X509v3 Authority Key Identifier:
keyid:68:B5:4B:5C:6E:66:A7:A2:5A:94:32:A4:1D:AB:12:D9:8C:13:3C:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.240.0/22
Signature Algorithm: sha256WithRSAEncryption
92:14:47:d3:5a:ce:53:42:17:ae:9a:6b:4b:b6:80:46:aa:02:
30:30:6b:30:2d:b6:e7:5b:95:9f:4b:de:04:34:75:b9:4d:dc:
a8:de:e7:80:1f:43:bf:68:0e:c0:a1:4c:0a:be:2f:41:49:60:
bf:4d:a6:de:e1:5e:75:1b:94:20:85:af:1f:df:4d:09:ed:6e:
a9:4d:85:b1:6d:f4:7d:96:00:e8:14:4a:69:15:41:f2:4b:6c:
3a:33:1e:4a:04:f5:33:88:c9:74:ed:8c:81:2d:8c:3c:54:4c:
aa:11:2d:53:04:49:53:09:df:ae:30:2f:f9:4d:98:be:38:73:
74:11:2a:aa:25:15:7e:b4:99:ff:c9:46:33:7b:fd:20:e2:7f:
95:14:d4:14:39:a8:04:b5:af:8f:e4:cc:19:95:48:80:a4:ca:
fb:0a:53:75:02:b2:0f:5c:8f:20:dc:6a:58:a9:da:11:77:c4:
74:3b:be:db:58:02:26:aa:25:de:44:73:ee:cc:c4:fb:eb:28:
9c:48:63:96:55:ec:37:3f:fa:69:64:58:b9:51:28:f6:fd:44:
e2:d2:98:dd:f1:3b:4d:7c:4b:bb:b2:55:e4:5c:68:ce:69:23:
6e:82:59:5b:56:68:d8:ca:47:3b:5a:11:13:f1:f2:a8:ee:0d:
b7:12:92:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVsjQClHE6D8voNJyJUPw0vI3XRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhCNTRCNUM2RTY2QTdBMjVBOTQzMkE0MURBQjEyRDk4
QzEzM0MyNjAeFw0yMzA3MjIxNDQzNTZaFw0yNDA3MjAxNDQ4NTZaMDMxMTAvBgNV
BAMTKEYwRjg4OUYyNTU3MzgwQjdCOUFGQjVFODU2QkUxRUNGNkNGOUUwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjLj1Bkb1bfJ21oQHdHAoV0da
iDAst730zYn2O6jcFRI3KsZvWAAV8wfH6+bGqgFeb8fKA4rLE+wekyLGV96VYHkO
fXXMiKfbRtbs0EECpWkF3i6QKeMrNTFav5wJRcNgJeloogMdi0KwQOQVQm628cxd
u8rXzzyw6VGJ/Lkrudr6DgNrNqsEcy6DRG5oR2JqiwN2CrRKn9igPmgYtuRKXeX5
E+LdW6NpSbY/7lRwyL8Kf3JUaZDaFDBUVsGtvXBt7fhUnR3P7uYB3t+PhYm9WNDz
/dGltnkfE6tc5WiIhhpOLR/67zD3H/s35OcoyWNggNgoEp7tU6rDb/mAAwinAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8PiJ8lVzgLe5r7XoVr4ez2z54IswHwYDVR0j
BBgwFoAUaLVLXG5mp6JalDKkHasS2YwTPCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx
c0MvMC82OEI1NEI1QzZFNjZBN0EyNUE5NDMyQTQxREFCMTJEOThDMTMzQzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY4QjU0QjVDNkU2NkE3QTI1
QTk0MzJBNDFEQUIxMkQ5OEMxMzNDMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JkM1NaeXF4ZXNqTE1ENUE3eUd3WGZQNFhwYjQ4dEJqUXBGcGtjYkVkMXNDLzAv
MzEzNjM4MmUzMDJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqADwMA0GCSqGSIb3DQEBCwUAA4IBAQCSFEfTWs5T
QheummtLtoBGqgIwMGswLbbnW5WfS94ENHW5Tdyo3ueAH0O/aA7AoUwKvi9BSWC/
Tabe4V51G5Qgha8f300J7W6pTYWxbfR9lgDoFEppFUHyS2w6Mx5KBPUziMl07YyB
LYw8VEyqES1TBElTCd+uMC/5TZi+OHN0ESqqJRV+tJn/yUYze/0g4n+VFNQUOagE
ta+P5MwZlUiApMr7ClN1ArIPXI8g3GpYqdoRd8R0O77bWAImqiXeRHPuzMT76yic
SGOWVew3P/ppZFi5USj2/UTi0pjd8TtNfEu7slXkXGjOaSNugllbVmjYykc7WhET
8fKo7g23EpKq
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:45 2025 by rpki-client