Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa
File: 3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa (raw, json)
Hash identifier: IbJvwoGuwEgpL+IZUzUHNOVPtOfhYiGJW7cDa9m8Agc=
Subject key identifier: F8:71:44:4C:E0:46:79:61:C1:43:08:7F:A9:9E:35:36:4C:9F:FB:A8
Certificate issuer: /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial: 5D7C7FE0061C0C20001BB61D0563E148F6E689A5
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa
Signing time: Tue 10 Oct 2023 03:11:24 +0000
ROA not before: Tue 10 Oct 2023 03:06:24 +0000
ROA not after: Tue 08 Oct 2024 03:11:24 +0000
asID: 263924
IP address blocks: 168.232.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7c:7f:e0:06:1c:0c:20:00:1b:b6:1d:05:63:e1:48:f6:e6:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Validity
Not Before: Oct 10 03:06:24 2023 GMT
Not After : Oct 8 03:11:24 2024 GMT
Subject: CN=F871444CE0467961C143087FA99E35364C9FFBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:bd:ad:63:46:96:9b:90:cb:62:c9:3a:b5:
6e:9c:3d:b9:fd:10:b6:8e:16:0d:f1:b0:d8:a2:ae:
30:14:30:6b:cc:ad:88:94:2b:01:dc:ca:c5:ce:64:
c2:dc:d4:1f:3c:fb:ab:54:48:ed:e2:69:d4:a2:08:
d5:98:b0:65:f8:f0:85:9f:fb:f2:c7:5f:af:c0:03:
05:8e:9d:91:48:30:9c:e2:33:b0:01:9b:87:b7:b3:
0d:2a:b8:45:16:52:93:bd:85:42:69:57:5c:ef:8e:
cc:f1:3e:52:c5:eb:fa:de:3a:fb:7d:b7:20:c8:bb:
e7:f8:e6:13:e7:f7:a0:7b:e2:4a:12:44:60:ff:97:
0a:ac:51:a8:48:26:9d:a5:30:67:25:d8:a4:33:3f:
cc:28:fe:e0:5c:5d:a9:29:4e:f6:a7:9b:47:b9:c5:
ea:c2:c0:f7:4d:13:fb:63:98:e7:0b:70:80:6b:79:
2f:bf:dc:9f:ff:7b:af:9f:b0:a9:c4:8f:f1:f4:f0:
3c:56:ad:81:53:ae:3f:cd:0c:40:63:9b:8d:85:5b:
38:fb:b9:17:41:44:40:bd:0f:f8:be:8d:54:11:1f:
0b:6d:1f:4f:fa:ff:c9:be:d9:95:c6:3b:4e:39:86:
1d:a0:ff:3d:9d:a1:55:d3:6c:64:9a:4a:de:3b:be:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:44:4C:E0:46:79:61:C1:43:08:7F:A9:9E:35:36:4C:9F:FB:A8
X509v3 Authority Key Identifier:
keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3136382e3233322e3137342e302f32332d3233203d3e20323633393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.174.0/23
Signature Algorithm: sha256WithRSAEncryption
27:c7:39:0b:f1:62:07:f4:db:f0:23:44:9c:8c:20:a3:d7:b3:
a7:b3:1e:6b:81:0b:bf:d7:75:fd:5f:ac:a8:72:e3:eb:3a:a5:
e2:21:dc:19:2a:32:88:3e:6e:49:c2:00:57:cd:98:bb:8e:28:
cf:3e:71:e1:7f:51:8c:16:b4:23:07:b5:57:cd:98:0b:30:a9:
66:22:40:75:41:df:43:c3:76:d3:65:74:a6:ce:54:9a:ee:c2:
22:6f:e6:b1:eb:0c:2a:9f:dd:1d:f7:04:8f:07:43:ba:70:f7:
6b:a4:b4:e7:46:67:f1:2f:3b:a0:b2:e4:d8:ea:7b:28:ca:5e:
c7:2e:34:57:d7:9a:b5:45:e6:ca:c5:72:f4:b8:78:41:11:c4:
25:52:1a:ee:fa:aa:df:14:f4:b2:ed:c6:48:0b:3e:8a:57:0c:
21:3c:86:73:ed:25:6e:a2:d6:7d:a4:a9:fd:b2:99:ad:66:63:
24:a3:fd:e2:4f:65:9d:48:3b:e5:7a:3b:6e:8c:1f:9d:18:7a:
b6:f8:87:6e:f2:ab:b7:6d:70:6c:db:f6:ad:76:22:68:69:9a:
8f:d5:c8:b1:36:ef:51:4b:aa:0a:e3:c6:3a:2e:db:9a:b3:f3:
0a:ed:01:ef:3d:cf:59:13:a4:b1:9c:de:8c:88:6c:ef:6f:cb:
cb:56:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:08 2025 by rpki-client