Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35342e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: 75EN/Yj41iv4T2r9c5iIG8qBin/wP/2gxlkNV0PEWvI=
Subject key identifier: 8B:94:69:CF:62:7E:ED:1C:98:F8:2F:C2:9D:FC:DC:92:73:13:C2:21
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 456F4E6EB970BF581EE6156C5AFA5BC15297B3A9
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:02 +0000
ROA not before: Mon 08 Apr 2024 20:02:02 +0000
ROA not after: Mon 07 Apr 2025 20:07:02 +0000
asID: 28270
IP address blocks: 168.121.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6f:4e:6e:b9:70:bf:58:1e:e6:15:6c:5a:fa:5b:c1:52:97:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:02 2024 GMT
Not After : Apr 7 20:07:02 2025 GMT
Subject: CN=8B9469CF627EED1C98F82FC29DFCDC927313C221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:1f:eb:fd:82:49:81:fe:70:88:59:d5:7e:
2b:28:ed:78:05:95:e3:04:80:9d:0b:7b:13:b7:ca:
c2:6a:d5:8e:9e:88:38:53:65:cc:09:a7:b5:4c:31:
85:f9:f7:aa:f3:71:5e:96:cd:72:c9:98:6c:a9:95:
95:9f:4e:38:16:b5:81:1d:89:94:59:d3:46:23:53:
8a:8b:d5:7d:ef:0c:41:0e:34:2f:12:ee:f6:83:bd:
6e:5a:da:7d:fd:15:cf:de:21:e2:b1:84:fd:7b:d3:
b2:2a:1c:16:b4:5e:14:66:c3:9e:b2:5a:18:b3:ac:
72:1e:bd:01:a8:40:27:d5:ce:bd:00:13:11:bc:13:
b8:c5:95:92:d4:95:17:05:08:c6:ba:35:37:f8:0c:
63:98:96:2f:f3:ae:e4:ea:6e:ef:be:db:66:f1:c9:
e1:da:dd:02:fc:c4:7f:a6:c1:ca:4a:76:3d:c5:35:
5b:9e:01:29:a8:16:c4:60:5e:ea:cf:28:4b:40:62:
25:6a:06:4b:85:4e:dd:4b:b9:55:d8:c2:2d:f8:29:
f6:51:4b:e7:c4:d2:b6:63:31:09:4f:d4:15:42:0b:
36:c5:39:c7:7d:fe:2c:c8:dc:7d:35:53:53:fa:00:
c8:0d:e7:3e:88:7d:fd:8f:e2:32:96:d1:40:e2:55:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:69:CF:62:7E:ED:1C:98:F8:2F:C2:9D:FC:DC:92:73:13:C2:21
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3132312e35342e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.54.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7c:40:fa:c8:bd:62:dc:60:a4:5d:d9:db:e6:a3:06:dd:e9:
85:1b:91:3b:74:95:f2:81:33:71:ed:2f:e4:4a:f5:0d:5b:47:
e8:29:19:c5:2a:22:cc:8a:b7:d5:90:05:dd:f2:47:1a:7b:13:
51:3f:d1:e8:8e:d6:e6:44:02:da:55:7c:88:b7:8b:b7:00:f3:
1d:2b:01:80:60:f6:ae:c9:03:9c:43:1e:f7:eb:24:61:98:ed:
0a:c7:e9:da:4c:fb:85:a0:0f:0f:32:cf:95:16:0a:9d:df:63:
bb:dc:21:c9:a7:de:80:d0:9d:6a:df:98:e2:09:b6:d0:34:a2:
e2:ff:44:e5:a3:03:7d:15:3f:6a:d2:a3:a1:22:3c:45:dd:91:
20:df:8d:f0:d3:2e:27:28:97:70:70:37:36:f9:2f:d2:99:41:
28:2a:64:d6:2e:76:5b:c9:10:1d:d7:9f:22:b3:dc:dc:e5:90:
ee:bc:c0:e6:62:06:d6:09:45:51:d8:e3:16:38:fa:8a:d5:78:
b2:17:c9:b7:8e:03:38:ee:03:eb:87:e9:c5:c5:04:e9:b4:1e:
ee:56:92:b8:e0:25:b8:4a:8b:d2:a0:4d:fe:37:21:50:d3:c6:
ab:a2:6d:58:8f:ac:98:0f:7a:da:2c:df:21:f6:37:2a:38:ee:
b1:ba:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:00 2025 by rpki-client