Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
File: 3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (raw, json)
Hash identifier: hhBS6+u6djcxfMvZqi76WsAlziZPoaJz7hNCR2L0cDs=
Subject key identifier: 00:27:07:A4:C8:55:43:10:B9:88:04:18:5F:DC:75:AF:A5:A5:7C:B9
Certificate issuer: /CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
Certificate serial: 742FC2AA4D9D84069D7C00C9B5393DE72870D4BE
Authority key identifier: 08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
Signing time: Fri 23 Feb 2024 02:32:35 +0000
ROA not before: Fri 23 Feb 2024 02:27:35 +0000
ROA not after: Fri 21 Feb 2025 02:32:35 +0000
asID: 265397
IP address blocks: 168.194.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2f:c2:aa:4d:9d:84:06:9d:7c:00:c9:b5:39:3d:e7:28:70:d4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
Validity
Not Before: Feb 23 02:27:35 2024 GMT
Not After : Feb 21 02:32:35 2025 GMT
Subject: CN=002707A4C8554310B98804185FDC75AFA5A57CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:2f:20:a5:74:71:63:9e:12:4b:e1:59:a0:
ee:c3:b3:05:93:76:de:79:27:ee:58:2f:ac:af:c7:
f7:9d:fe:8b:ff:b0:dc:c8:41:3a:50:1c:12:f8:6f:
fe:81:f1:f4:f6:f3:30:b8:96:08:da:f3:bb:02:ef:
d5:1b:ff:0c:62:c2:90:1d:2c:38:f8:7c:25:b8:82:
91:fa:ed:d4:38:5c:e6:79:15:2d:b8:10:ca:f2:45:
2e:66:68:f1:f4:e8:1c:53:b2:b9:f0:ff:0d:88:87:
10:2a:e3:bc:22:e3:5c:e3:fe:19:61:a7:91:c5:54:
d5:b0:48:9b:99:af:c3:16:27:0a:d4:99:d0:56:f4:
3a:72:bc:31:e1:9b:0a:d1:fd:86:26:a2:05:65:91:
17:cb:bc:5e:79:91:f2:48:a3:7e:5d:7d:3a:0b:97:
29:7f:5a:64:53:a2:09:b1:27:cc:b4:52:ba:77:10:
7a:79:7d:2c:47:5f:10:b4:0f:0a:be:fa:58:6d:6f:
10:d2:ac:56:7f:42:38:f5:57:f1:0b:ee:83:81:90:
fe:0b:01:b7:36:f3:a2:87:1c:44:a7:69:66:2b:9f:
89:37:a4:8b:e8:63:aa:b7:f8:31:01:f2:f9:e4:c4:
51:18:77:13:1f:7b:8c:8e:d1:e3:c9:fc:4e:01:ae:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:07:A4:C8:55:43:10:B9:88:04:18:5F:DC:75:AF:A5:A5:7C:B9
X509v3 Authority Key Identifier:
keyid:08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.184.0/22
Signature Algorithm: sha256WithRSAEncryption
74:28:c2:55:3f:f5:49:43:75:49:8a:14:87:a3:98:99:cb:b8:
0d:71:23:64:63:32:a9:00:6b:71:0d:5e:a3:9e:d5:4a:95:8b:
02:ac:97:3d:11:e5:4f:3b:b4:3e:ec:48:98:a6:02:4f:6e:ec:
54:8d:59:65:9b:c5:87:b4:79:1c:0f:5b:41:7f:3d:af:5f:a0:
2e:b9:24:af:f7:1c:25:a3:fa:ba:9d:0d:e6:59:d7:01:23:89:
28:0d:4e:49:a6:6c:92:7d:73:02:c9:66:2d:50:a8:06:aa:1a:
48:01:71:f9:d0:1b:70:81:21:6b:74:eb:4c:98:14:75:ad:22:
be:67:3b:c4:98:e2:64:d5:3c:a3:b6:74:d4:4f:4b:27:c1:11:
9e:a4:53:d9:97:e1:fe:92:27:26:84:c5:f8:6d:81:ff:4d:8a:
6c:a9:81:c9:1b:22:9b:b2:e9:00:10:86:52:9c:33:bd:17:6f:
bc:fa:eb:04:d4:5c:e6:40:a2:cf:bc:ea:2f:9d:1d:04:35:a1:
72:7a:8b:bb:ae:b4:0f:0b:fd:0e:5d:2b:e0:b4:ee:2e:68:c5:
85:6c:a3:91:ad:07:46:91:0e:ef:4a:f5:a3:5b:b7:00:77:88:
ba:1d:4c:3f:fb:6c:b3:1b:26:41:b8:64:d7:45:b0:fe:2e:72:
7c:f3:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:00 2025 by rpki-client