Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
File: 3136382e3139352e342e302f32342d3234203d3e20323635343036.roa (raw, json)
Hash identifier: a6VuFwVlxH4VGDbaUtLVSOb7rd9aljCH9EIu36FGFOw=
Subject key identifier: E5:69:BA:59:FB:32:F1:D1:62:A1:02:07:EB:96:33:27:DC:73:8A:13
Certificate issuer: /CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Certificate serial: 3900CE68293D68D9F5C968F220338B27719A2149
Authority key identifier: 20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
Signing time: Fri 13 Jan 2023 15:27:24 +0000
ROA not before: Fri 13 Jan 2023 15:22:24 +0000
ROA not after: Fri 12 Jan 2024 15:27:24 +0000
asID: 265406
IP address blocks: 168.195.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:00:ce:68:29:3d:68:d9:f5:c9:68:f2:20:33:8b:27:71:9a:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208FFAFD8389347E0A0F0B5521884A995EB099DA
Validity
Not Before: Jan 13 15:22:24 2023 GMT
Not After : Jan 12 15:27:24 2024 GMT
Subject: CN=E569BA59FB32F1D162A10207EB963327DC738A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:7b:72:96:13:16:7c:9a:e2:53:94:40:e0:
bb:1c:68:65:63:d0:01:a4:17:be:40:f1:60:07:a1:
a1:dc:1a:10:57:d1:1c:80:21:f8:0d:18:0c:cc:8b:
47:01:44:19:4a:f7:bf:40:e8:e6:29:9a:8e:03:8d:
ac:93:ac:83:bb:78:1a:1e:15:b7:36:1e:c6:aa:9e:
a0:b8:ef:59:cc:b9:73:a4:14:4a:58:c5:e8:9a:68:
f1:28:30:6e:60:22:51:41:83:dd:03:9f:66:d1:ee:
53:41:b5:71:6d:28:85:cc:7d:4a:41:97:80:20:7b:
fc:77:54:30:f7:b3:df:2d:67:b1:3d:1e:ce:78:2d:
92:c4:5d:a8:92:62:08:91:95:70:66:99:29:8c:a5:
34:f0:68:37:cd:29:cf:15:6f:d5:b9:6c:e8:a5:cc:
6b:2a:ef:c8:67:12:84:8e:70:15:e5:a2:7d:7d:d6:
df:68:29:6b:1a:94:a3:41:ea:c9:6c:ac:27:cc:a6:
ed:e8:39:f4:13:04:2d:36:d7:d5:dc:ae:ef:af:35:
8d:e2:4e:18:0f:d1:3e:bd:35:b5:5f:94:95:e4:27:
01:c6:3b:f8:4c:ca:c7:4f:5d:db:e8:e6:3f:a3:6c:
53:70:21:b2:f5:4e:48:69:a0:fe:7e:6e:04:8a:14:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:BA:59:FB:32:F1:D1:62:A1:02:07:EB:96:33:27:DC:73:8A:13
X509v3 Authority Key Identifier:
keyid:20:8F:FA:FD:83:89:34:7E:0A:0F:0B:55:21:88:4A:99:5E:B0:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208FFAFD8389347E0A0F0B5521884A995EB099DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/3136382e3139352e342e302f32342d3234203d3e20323635343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:39:ce:b3:97:87:28:c5:3e:ba:60:e9:a6:3a:63:c3:94:38:
f2:f6:f4:ff:09:95:79:1f:7b:8b:c7:37:af:1b:01:72:51:6e:
fc:88:5b:c2:48:7d:6e:a1:28:70:19:14:7e:14:47:31:8a:d4:
f6:0e:84:77:18:4e:da:9c:d0:3f:3f:8e:28:da:d6:b3:14:46:
9a:dd:bb:26:40:43:ec:96:c4:cf:7b:ca:e9:50:84:ae:fa:56:
60:d8:b6:c1:08:32:31:99:3d:b3:96:46:95:b1:95:5e:bb:bd:
e5:1f:b9:81:20:34:ad:08:f0:7a:80:54:d9:87:ab:21:f0:7d:
9f:b4:46:ef:0f:68:7f:df:58:12:da:73:b9:6f:a8:e1:b7:c0:
c4:29:ea:ad:b4:1d:1b:50:5c:0e:9d:a6:9b:ec:82:0a:89:98:
8b:8b:9a:97:a1:4b:46:b7:f9:0a:56:e5:11:cb:c7:0c:20:f2:
d2:eb:68:9d:ca:c1:6e:fd:7f:ea:f3:59:a3:3a:5c:76:79:87:
00:18:c2:c7:f3:ea:6f:d4:8b:fa:7e:31:29:7a:d5:61:66:5b:
8c:62:9b:5e:32:20:c2:f5:17:93:5e:c7:5f:61:9e:38:c8:f3:
93:7c:b3:93:39:10:a2:59:79:e0:a3:ed:1c:2b:f0:7d:bb:56:
28:ba:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:32 2025 by rpki-client