Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/3136382e3139372e302e302f32322d3234203d3e20323634343630.roa
File: 3136382e3139372e302e302f32322d3234203d3e20323634343630.roa (raw, json)
Hash identifier: PpFoUrSq2DKIUu9+lE7rB0PyA1yZjBeSnshZCtZ8Mdk=
Subject key identifier: 4A:A9:88:86:71:2C:02:B3:12:23:CE:11:BD:F9:BE:85:56:64:F3:1A
Certificate issuer: /CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
Certificate serial: 33B3E25C7AD9751DF45FBC605121AF3F244F4770
Authority key identifier: 64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/3136382e3139372e302e302f32322d3234203d3e20323634343630.roa
Signing time: Mon 16 Dec 2024 17:10:23 +0000
ROA not before: Mon 16 Dec 2024 17:05:23 +0000
ROA not after: Mon 15 Dec 2025 17:10:23 +0000
asID: 264460
IP address blocks: 168.197.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b3:e2:5c:7a:d9:75:1d:f4:5f:bc:60:51:21:af:3f:24:4f:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DD83F92699F1FE6E92049BB0290C52C8B04D15
Validity
Not Before: Dec 16 17:05:23 2024 GMT
Not After : Dec 15 17:10:23 2025 GMT
Subject: CN=4AA98886712C02B31223CE11BDF9BE855664F31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:29:3a:3f:61:8a:3f:8a:1f:bf:5e:99:4d:
41:3a:6e:51:ba:f1:07:3f:88:fb:27:f6:82:b7:87:
63:54:f9:8b:58:c2:8a:fc:3c:52:a4:1c:e6:5e:67:
65:40:5a:5b:09:f3:47:8c:99:70:f7:da:7c:25:1b:
d8:36:da:70:84:d4:f3:c0:b9:20:77:37:8d:70:57:
17:bf:cf:e4:a4:b2:1b:8b:51:42:af:e7:3a:8f:e6:
48:16:3f:dd:35:0f:a0:e4:9a:84:83:d0:bd:dc:33:
a2:95:0d:4c:85:e6:fa:04:bc:d4:60:5d:26:ad:13:
b5:76:ae:fa:43:0f:c9:9e:a5:2e:c7:86:8b:31:fc:
7d:97:21:53:00:ae:45:bd:6f:38:5e:8d:83:de:00:
cb:f6:25:6f:ef:ff:18:0d:54:e5:e4:f4:ae:60:f4:
51:e0:7e:25:a2:96:19:f1:3f:45:57:22:bb:2f:16:
d8:72:18:62:6c:4e:d7:68:7d:b5:9e:4d:a5:39:54:
35:d8:51:28:23:15:8a:b5:01:2f:09:5d:7b:25:6b:
29:3f:4c:ea:53:4e:a5:ae:5e:5a:93:76:f1:ba:2c:
73:73:a6:2f:f2:21:a8:fa:1f:75:ef:84:32:af:7d:
27:f5:34:cb:89:b8:a9:f0:70:ea:9a:40:56:ed:ab:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:88:86:71:2C:02:B3:12:23:CE:11:BD:F9:BE:85:56:64:F3:1A
X509v3 Authority Key Identifier:
keyid:64:DD:83:F9:26:99:F1:FE:6E:92:04:9B:B0:29:0C:52:C8:B0:4D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/64DD83F92699F1FE6E92049BB0290C52C8B04D15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64DD83F92699F1FE6E92049BB0290C52C8B04D15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/3136382e3139372e302e302f32322d3234203d3e20323634343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:1c:7f:af:79:b0:59:51:b8:98:50:b0:66:c0:9d:aa:79:36:
d2:67:38:5c:27:69:f4:07:ee:8b:3d:15:f8:66:93:55:29:fe:
28:34:9a:19:60:48:37:38:48:d0:1b:53:3a:e4:63:c2:b5:9a:
a0:9b:26:c3:f4:cc:88:69:18:32:d8:43:76:52:4a:34:84:72:
7c:e1:ab:9e:e5:d9:3f:ca:3b:06:21:7c:cc:e8:14:ad:b0:0c:
d3:da:ff:c6:d7:31:d4:39:d0:9f:5c:37:00:15:67:b1:a9:44:
a4:4e:43:08:33:ea:fb:a5:50:af:85:bc:cf:6f:8d:7d:bf:b7:
72:89:11:f1:5c:be:dd:c8:51:e4:bc:a4:ee:02:34:26:e7:35:
d2:fa:a5:cf:51:cd:4d:91:9b:10:0a:3e:f8:ca:d8:00:03:39:
51:ca:2e:0b:0d:39:a9:a1:35:54:36:61:fc:dc:e7:7c:f1:5c:
7b:40:78:ec:13:fd:22:2b:91:0f:e0:89:2b:df:d2:e3:f5:4a:
bf:fc:69:fd:a0:06:75:54:df:8c:75:f9:f1:34:79:af:79:96:
35:47:2d:d7:e9:13:4c:49:0c:52:3a:1e:fa:2d:2e:3b:dc:8d:
d9:5b:c3:a0:62:1c:ec:ce:61:64:23:e0:43:93:ef:f1:37:4f:
fd:a0:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:02 2025 by rpki-client