Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa
File: 3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier: daBXUG+xz3kREwQwQWK8M+pUYARVCJKpetTKNek192w=
Subject key identifier: 13:D5:5D:8B:E6:D9:02:63:56:4F:13:47:0C:25:40:21:36:64:B5:06
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 18DD4AD7F3CADD3D76F389787DCBBEA6F6D99631
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa
Signing time: Fri 16 Dec 2022 19:43:57 +0000
ROA not before: Fri 16 Dec 2022 19:38:57 +0000
ROA not after: Fri 15 Dec 2023 19:43:57 +0000
asID: 262992
IP address blocks: 168.228.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:dd:4a:d7:f3:ca:dd:3d:76:f3:89:78:7d:cb:be:a6:f6:d9:96:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Dec 16 19:38:57 2022 GMT
Not After : Dec 15 19:43:57 2023 GMT
Subject: CN=13D55D8BE6D90263564F13470C2540213664B506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:84:8c:9c:c6:eb:82:e7:fd:52:d0:4e:c4:
f2:3e:21:13:6f:58:e8:36:bd:c0:04:89:df:c8:42:
5f:34:b6:02:8c:18:f4:a9:bd:7f:f4:d6:97:e5:09:
82:f0:f7:6d:fb:89:32:74:95:b1:93:9d:f5:9e:af:
4f:83:39:64:e2:1c:77:dc:c4:94:a4:3e:1d:d2:af:
31:ff:4b:29:dc:fa:a6:4a:e2:28:cd:96:5a:88:14:
fa:91:63:2f:17:93:e9:98:a3:76:f9:aa:f4:b2:03:
49:98:b1:81:3b:ce:67:a8:9e:d2:71:64:aa:55:78:
45:83:42:69:c4:bc:9f:2d:ae:17:17:3c:ef:b4:d9:
0a:4b:ec:65:0d:aa:a9:49:3f:23:2d:b6:0b:1b:3a:
77:2a:e4:6f:f0:dc:b1:7e:22:03:94:db:76:25:fd:
72:02:7f:27:d0:99:89:5a:f9:20:ba:07:d3:4f:de:
a7:30:cb:ad:12:06:f2:3a:dd:8d:bf:c2:92:f4:55:
51:04:90:84:f8:e6:51:10:e3:6b:65:c5:3a:dd:58:
fe:2c:14:2e:81:4a:d1:51:4a:c6:85:9c:0a:64:2e:
2b:8a:04:0a:a4:61:7b:df:b5:02:56:c8:d6:e5:e0:
44:ec:71:27:56:3f:39:57:3b:7d:fb:11:c1:c6:ca:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:5D:8B:E6:D9:02:63:56:4F:13:47:0C:25:40:21:36:64:B5:06
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232382e3132382e302f32322d3232203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:8c:8d:70:e7:cb:b9:fa:43:62:ba:03:87:d2:6a:ae:2f:d9:
4f:44:9d:3e:3e:80:f8:54:73:50:92:d4:ad:37:2c:d5:da:17:
a5:2b:c1:be:f4:b5:ae:15:60:9f:c9:c5:9c:a6:39:e5:f5:2f:
1d:92:c9:be:2f:fe:93:32:c4:b7:10:af:17:2c:bc:f4:c7:58:
c3:5b:33:ab:bd:1c:81:2e:a7:73:10:42:63:2d:54:34:41:c1:
a8:ae:93:d5:81:72:5d:6e:62:a2:df:28:6d:43:2a:fb:d1:00:
d9:26:fe:1f:4a:fe:5c:af:7c:03:70:ef:2b:62:95:ae:96:4c:
ae:c4:67:a0:f3:fe:29:9e:06:76:01:1c:11:ab:02:b1:16:7c:
54:f6:05:6e:7a:2a:2c:a3:26:eb:f4:67:c4:ad:0d:71:01:3f:
d5:1c:15:f7:dc:aa:86:0f:c2:05:15:33:f1:43:28:7d:2b:46:
af:22:45:0a:f1:92:72:e6:f7:94:fe:c3:b8:33:34:80:fc:8a:
e8:df:0c:af:39:79:2f:96:4a:c2:04:6f:b1:3d:be:28:3c:af:
4d:13:37:c4:ae:1b:54:5d:c6:52:aa:43:c5:8f:c0:18:98:f4:
50:27:30:92:04:17:7b:d5:c6:fc:6f:8b:3a:01:75:33:df:ac:
62:9e:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:27 2025 by rpki-client