Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35322e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: y7PUGr65Sm2I0IN+qsOxsQh1XmPYJ9tG9O9tya4WvzQ=
Subject key identifier: B7:84:04:13:3D:4E:9B:B7:49:E7:EE:26:4D:18:B9:9F:17:21:8D:7A
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 04E1D5903E04394E4312032D8791A9B665DE4049
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 168.121.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e1:d5:90:3e:04:39:4e:43:12:03:2d:87:91:a9:b6:65:de:40:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=B78404133D4E9BB749E7EE264D18B99F17218D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5a:9c:a6:03:64:ee:c4:30:d4:2f:0d:17:78:
51:3a:2e:fd:6f:f1:dd:92:0e:98:cd:10:d4:d6:07:
53:6e:9b:00:ed:da:36:cf:e5:6f:37:48:4f:51:bb:
24:80:15:5b:20:9e:98:d4:8d:ff:42:75:a8:5f:ad:
21:8a:82:50:96:f6:c4:08:e3:83:ad:25:e2:34:b5:
e0:94:84:37:fb:b7:29:41:e2:2a:b3:99:45:04:a1:
be:b1:bd:9b:14:24:ef:1a:e5:de:a1:c0:a1:d6:36:
a4:a4:9e:ea:34:86:a0:07:37:a7:22:12:fd:a3:2b:
b7:f6:73:de:3a:f9:b6:54:1f:7f:f7:0d:15:ff:2d:
fb:94:1e:51:53:ad:63:46:d8:60:06:a6:37:0a:46:
3d:78:55:41:c5:59:de:f5:66:06:d2:b3:82:3c:e8:
ae:06:c4:c2:42:f3:c8:4d:76:4e:ce:7d:97:9b:95:
5e:98:ef:b6:6d:9b:b8:3b:34:19:05:8c:ee:54:56:
76:a0:67:af:9e:75:0b:a8:2c:8f:4b:72:37:a7:d3:
5a:f5:6b:ba:a0:9b:ac:09:6e:4b:0c:5d:1c:e0:48:
3d:13:af:9f:10:6e:68:61:34:db:e2:87:d2:51:af:
83:dc:26:11:bf:b0:c3:51:24:02:23:2d:2d:52:91:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:04:13:3D:4E:9B:B7:49:E7:EE:26:4D:18:B9:9F:17:21:8D:7A
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.52.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b9:df:c8:2e:95:2e:13:41:f1:43:6b:f3:f0:b2:0c:9a:ef:
33:0e:07:81:b9:0d:14:e7:06:81:07:54:65:7e:bd:e1:d8:eb:
90:fd:71:da:7b:9f:45:a3:3d:64:d0:50:07:b5:27:bc:08:6f:
6d:fc:d1:97:3d:18:de:71:b7:7a:0c:18:59:3f:21:1e:d0:b7:
8b:4c:f8:a7:ec:ee:cf:e2:f2:6e:45:ad:47:3f:34:82:8d:0e:
d6:06:ad:bb:36:80:08:13:cf:9b:92:05:19:37:e5:b0:3f:57:
91:96:7a:5c:91:89:1e:a3:da:6d:ef:6f:4a:c0:93:5d:3b:9b:
21:d9:74:8d:be:99:6b:6c:4b:c9:6f:06:f7:c5:a2:49:7e:e8:
e2:44:e1:10:81:6e:0f:87:d2:0c:15:cc:22:3a:12:2b:02:03:
6d:ec:73:27:73:32:69:bb:f8:6b:5a:91:99:96:f2:fb:5b:70:
cf:8a:0e:fa:c0:2f:b3:92:74:2d:2b:b0:ef:63:3e:60:10:79:
c3:6d:38:f4:7c:d6:8c:3c:a2:47:a2:5f:6c:e2:05:a9:95:83:
a6:0b:16:36:cb:24:da:95:75:0f:24:ce:f6:2b:5c:5a:8f:46:
40:23:06:6e:7d:b1:2f:33:34:c0:03:20:73:e5:36:54:05:8c:
05:23:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:34:58 2025 by rpki-client