Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32322d3232203d3e20323633393234.roa
File: 3136382e3233322e3137322e302f32322d3232203d3e20323633393234.roa (raw, json)
Hash identifier: q1fn2CPpkxZlO4C7vqdf2F1eoCizFa4+Y/k+3Ua6Eic=
Subject key identifier: 85:85:57:70:17:4F:8A:1F:FB:24:8F:A7:F1:49:98:17:56:C3:70:41
Certificate issuer: /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial: 73BD380F33B1D2971F88DF33BB7C32598B3CBD2D
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32322d3232203d3e20323633393234.roa
Signing time: Tue 10 Oct 2023 03:11:23 +0000
ROA not before: Tue 10 Oct 2023 03:06:23 +0000
ROA not after: Tue 08 Oct 2024 03:11:23 +0000
asID: 263924
IP address blocks: 168.232.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bd:38:0f:33:b1:d2:97:1f:88:df:33:bb:7c:32:59:8b:3c:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Validity
Not Before: Oct 10 03:06:23 2023 GMT
Not After : Oct 8 03:11:23 2024 GMT
Subject: CN=85855770174F8A1FFB248FA7F149981756C37041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:cd:b3:ea:9d:d5:14:62:68:3a:11:40:58:
ea:3d:c5:de:b8:5e:86:a6:4e:b3:14:b1:6a:05:13:
a7:d6:69:05:da:db:22:69:ee:b6:a8:3e:c0:cd:c4:
6a:8b:f9:aa:12:40:d9:4c:b1:2a:d1:f0:fd:24:e0:
3e:9b:86:66:16:9d:66:33:5c:77:60:55:c5:34:5a:
b8:98:7b:14:8f:94:df:b6:45:ce:c9:d0:e7:05:4b:
cc:17:2e:93:a1:37:3a:50:0b:a7:86:fb:83:3b:86:
5f:54:1b:12:b5:a7:ad:10:86:59:e3:70:56:b2:78:
62:4a:05:75:59:c2:6c:0f:b6:84:b3:d3:91:95:d0:
a2:0b:da:c6:ad:a3:16:34:c9:65:43:68:87:5c:da:
e4:f6:cd:ea:3f:4e:bb:3f:ba:07:87:f2:4c:60:10:
e0:02:7d:b6:73:a5:2e:36:eb:23:67:8b:a9:5a:8b:
6f:00:ba:52:e4:f2:e7:3a:3c:a3:f2:71:25:ef:c3:
19:c2:03:dd:69:76:b6:bb:d0:31:2c:5f:67:7e:ed:
f6:41:37:ac:00:ef:15:7a:ff:2c:df:c0:02:3a:0c:
6d:4f:c9:db:e1:2b:73:2d:5c:4f:0d:94:f3:88:db:
05:55:49:2f:4c:01:fb:65:ee:0f:72:3f:1b:22:81:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:57:70:17:4F:8A:1F:FB:24:8F:A7:F1:49:98:17:56:C3:70:41
X509v3 Authority Key Identifier:
keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137322e302f32322d3232203d3e20323633393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.172.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:82:87:ae:84:12:5a:86:4d:06:ca:b4:a0:85:a3:49:90:f2:
4f:f1:85:19:40:69:62:c7:0f:94:ac:8a:65:6d:57:ac:55:ea:
3b:d2:1c:1d:00:a0:d7:90:f7:9a:7d:d8:2a:f3:d6:e2:82:c9:
8d:10:dc:26:23:2b:e4:21:2e:a0:be:7f:88:65:f3:5f:bd:4b:
2f:30:20:43:9d:3d:25:2b:6c:39:aa:ff:03:13:01:ad:55:69:
50:38:b3:7e:63:d7:76:ab:fc:87:cb:09:3a:be:82:5b:fa:87:
af:51:3e:01:86:ba:c0:30:cc:5d:1c:7e:c0:73:bf:59:19:0b:
a0:4c:f4:cb:0c:36:e8:cc:70:6b:84:dd:b5:81:45:2a:1c:09:
91:f6:8d:cf:6d:14:1a:23:60:98:f7:69:30:a7:60:f9:cc:4f:
e3:79:1c:b2:96:5d:ac:02:43:33:5b:9c:85:ba:91:f9:51:e9:
44:58:7c:04:fb:1f:ff:86:76:e3:25:65:56:be:25:37:aa:7f:
17:b2:91:48:7d:76:b8:fd:af:de:bd:d9:65:5f:75:ee:68:d4:
8d:0f:f4:e2:64:be:cd:5e:62:b6:d7:70:d6:42:a8:13:bf:37:
58:2b:fc:a5:b4:6e:d1:19:74:49:e9:c7:85:7a:f0:d7:da:11:
f2:54:74:0f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc704DzOx0pcfiN8zu3wyWYs8vS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDRTNGQzYwMDZGRDhGNDcyRTgwOTEyRjhDNUE5MTNB
NUJCQTdCMTAeFw0yMzEwMTAwMzA2MjNaFw0yNDEwMDgwMzExMjNaMDMxMTAvBgNV
BAMTKDg1ODU1NzcwMTc0RjhBMUZGQjI0OEZBN0YxNDk5ODE3NTZDMzcwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvic2z6p3VFGJoOhFAWOo9xd64
XoamTrMUsWoFE6fWaQXa2yJp7raoPsDNxGqL+aoSQNlMsSrR8P0k4D6bhmYWnWYz
XHdgVcU0WriYexSPlN+2Rc7J0OcFS8wXLpOhNzpQC6eG+4M7hl9UGxK1p60Qhlnj
cFayeGJKBXVZwmwPtoSz05GV0KIL2satoxY0yWVDaIdc2uT2zeo/Trs/ugeH8kxg
EOACfbZzpS426yNni6lai28AulLk8uc6PKPycSXvwxnCA91pdra70DEsX2d+7fZB
N6wA7xV6/yzfwAI6DG1PydvhK3MtXE8NlPOI2wVVSS9MAftl7g9yPxsigbmRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhYVXcBdPih/7JI+n8UmYF1bDcEEwHwYDVR0j
BBgwFoAUQM4/xgBv2PRy6AkS+MWpE6W7p7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC80MENFM0ZDNjAwNkZEOEY0NzJFODA5MTJGOEM1QTkxM0E1QkJBN0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwQ0UzRkM2MDA2RkQ4RjQ3
MkU4MDkxMkY4QzVBOTEzQTVCQkE3QjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjorDANBgkqhkiG9w0BAQsFAAOCAQEAqoKH
roQSWoZNBsq0oIWjSZDyT/GFGUBpYscPlKyKZW1XrFXqO9IcHQCg15D3mn3YKvPW
4oLJjRDcJiMr5CEuoL5/iGXzX71LLzAgQ509JStsOar/AxMBrVVpUDizfmPXdqv8
h8sJOr6CW/qHr1E+AYa6wDDMXRx+wHO/WRkLoEz0yww26Mxwa4TdtYFFKhwJkfaN
z20UGiNgmPdpMKdg+cxP43kcspZdrAJDM1uchbqR+VHpRFh8BPsf/4Z24yVlVr4l
N6p/F7KRSH12uP2v3r3ZZV917mjUjQ/04mS+zV5ittdw1kKoE783WCv8pbRu0Rl0
SenHhXrw19oR8lR0Dw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org