Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa
File: 3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier: dYPXu5PEZu6niiTuHlAv2jNbjYJpsbSIieXx/wiTCY4=
Subject key identifier: D4:E1:DC:E5:5F:0D:17:ED:BE:A4:57:8B:5E:1F:36:32:89:BF:90:B0
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 0FB2E0EEC73D90CFA16BFD52FE70FDAD9030E023
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa
Signing time: Wed 23 Nov 2022 12:31:55 +0000
ROA not before: Wed 23 Nov 2022 12:26:55 +0000
ROA not after: Wed 22 Nov 2023 12:31:55 +0000
asID: 262992
IP address blocks: 168.232.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b2:e0:ee:c7:3d:90:cf:a1:6b:fd:52:fe:70:fd:ad:90:30:e0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Nov 23 12:26:55 2022 GMT
Not After : Nov 22 12:31:55 2023 GMT
Subject: CN=D4E1DCE55F0D17EDBEA4578B5E1F363289BF90B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:b7:c9:d3:7e:d4:86:1a:ee:68:c6:92:84:
c0:ee:60:0a:e8:dc:a8:da:03:5e:68:00:21:b4:28:
ef:5f:65:93:fc:30:a3:64:a4:74:cb:e1:8b:f6:c6:
b6:2d:8c:7e:2f:63:db:97:e9:06:b1:a9:91:37:ae:
32:e8:43:84:9c:bb:c7:fa:1f:54:17:3b:9b:b9:b2:
19:e7:cd:69:f2:11:1b:a6:f9:a3:6f:60:9b:51:1c:
01:8e:03:33:28:07:fe:cf:19:fc:e1:6f:75:6a:37:
15:d3:42:84:d2:71:c7:93:df:88:f7:e4:b8:77:39:
c0:4d:04:f8:74:a3:67:da:4a:cd:d4:78:4c:39:a2:
1f:79:d4:11:04:ed:4d:50:d6:dc:bb:e0:d7:d0:6d:
8a:29:50:c8:3a:5c:f5:f6:40:a6:80:9d:19:71:0c:
30:92:04:d4:7b:d1:1f:25:42:46:34:98:06:ef:e3:
e9:ae:b4:1c:fa:7e:c3:e5:dc:1a:23:ae:4e:db:86:
35:8b:0b:37:d5:19:dc:05:2d:70:7e:43:c8:8e:f3:
04:ac:f9:fe:98:42:42:e3:ce:59:42:0a:38:fe:33:
b3:e6:97:77:72:e1:dc:c7:42:c3:32:60:f4:ed:be:
1d:32:f4:a3:23:70:57:c4:94:5a:f0:1d:32:e5:e6:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:DC:E5:5F:0D:17:ED:BE:A4:57:8B:5E:1F:36:32:89:BF:90:B0
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e20323632393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:9b:72:74:f2:69:b3:a1:86:c8:4f:02:c6:8c:d5:67:c5:c9:
42:69:79:a5:b8:dc:c9:ce:f2:10:cd:de:88:19:ca:0a:ca:65:
6f:73:80:fd:9d:ac:66:e9:07:3d:cb:bf:37:36:a9:fd:73:e8:
c3:02:b0:cb:80:81:1a:a0:ad:93:82:08:de:ce:3a:6a:69:8e:
c7:f0:6d:50:81:aa:12:df:d9:bc:e2:7f:08:fe:26:93:01:7e:
3c:e6:fc:a8:19:94:85:d2:41:6c:1b:2b:79:45:57:99:81:a8:
1d:b3:25:ba:5d:28:5a:42:84:55:e9:32:d2:23:d1:32:54:f3:
a9:0d:53:e7:99:b8:50:25:66:9d:23:09:2e:1d:e2:2e:d9:a0:
a2:5f:e0:3e:2b:73:0f:5d:35:76:86:09:b0:81:b3:b1:47:75:
e8:9a:82:0e:17:72:0b:30:b5:f3:c5:38:41:05:3a:fe:2e:f7:
31:f1:42:3e:dc:98:3f:51:ac:60:fc:be:d0:a7:88:6a:8b:b3:
ac:0f:25:2e:e5:04:4d:c9:00:44:81:1e:4c:8a:58:9a:d2:45:
c3:01:ed:af:e7:ce:63:17:78:3b:a3:b5:54:5b:40:ec:3b:ba:
52:4f:a6:d5:2b:22:51:09:00:5a:3e:cf:06:e0:30:bb:bd:4c:
d3:bd:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:41 2025 by rpki-client