Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File: 3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier: xDssjLfkZEf8PTOBrgUd4pN2bw5aKi5GonR0Th9xDhs=
Subject key identifier: C0:35:86:26:83:C0:18:91:35:EF:DF:D1:28:3C:84:DE:0A:58:0D:2B
Certificate issuer: /CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
Certificate serial: 64908BA2D8287FB02EDEB44365B789BA360A7103
Authority key identifier: EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time: Mon 23 Dec 2024 11:42:03 +0000
ROA not before: Mon 23 Dec 2024 11:37:03 +0000
ROA not after: Mon 22 Dec 2025 11:42:03 +0000
asID: 52898
IP address blocks: 168.227.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:90:8b:a2:d8:28:7f:b0:2e:de:b4:43:65:b7:89:ba:36:0a:71:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
Validity
Not Before: Dec 23 11:37:03 2024 GMT
Not After : Dec 22 11:42:03 2025 GMT
Subject: CN=C035862683C0189135EFDFD1283C84DE0A580D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:71:b2:db:aa:86:80:9e:36:e6:de:d8:7d:
93:b9:cd:f4:29:53:46:ac:b7:3f:cd:44:fb:66:80:
69:3c:f8:54:67:e7:9e:5a:8b:35:6b:87:58:60:4c:
46:9d:8f:c3:a3:0e:1d:f7:2f:bd:b1:ed:6f:30:86:
d4:dd:8b:0f:95:39:e2:e6:63:c0:5d:1f:8b:89:cf:
4d:40:81:b8:9e:b6:a1:7e:65:50:d7:af:3c:22:9b:
ee:28:23:be:f3:ad:1e:cf:f7:54:7e:2a:3b:eb:ba:
06:b1:12:b5:b0:db:03:d5:90:55:b6:fe:b7:77:b8:
91:87:40:05:a1:08:fe:bf:c2:7b:68:df:c5:c9:13:
99:4e:24:af:7a:f8:eb:9b:54:71:0d:91:35:21:7f:
94:1d:1a:3b:87:f8:5c:50:d2:39:a6:17:ee:f1:33:
8d:b6:40:95:8f:33:ec:f3:c4:7c:c8:62:ac:d2:f4:
91:eb:29:dc:51:43:80:cb:3c:7c:84:38:4e:8d:7e:
a4:58:4a:2d:b0:fb:7b:65:13:74:10:0c:22:3a:e8:
3b:57:8e:ed:8b:1f:64:28:89:3c:be:4f:b9:2b:ce:
ba:51:30:86:cf:17:9b:48:25:8f:98:0b:4c:cb:17:
c8:dc:d9:72:44:df:3b:4d:fa:27:3f:29:b0:04:3e:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:86:26:83:C0:18:91:35:EF:DF:D1:28:3C:84:DE:0A:58:0D:2B
X509v3 Authority Key Identifier:
keyid:EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:94:9d:a7:63:1b:7a:3d:0a:08:f9:16:66:bf:a1:00:8c:00:
4b:49:3c:84:34:b4:3f:30:04:a0:6a:67:94:d8:7b:29:0b:e3:
a5:6f:91:40:a9:e4:5c:3a:2d:4f:59:9a:08:65:ce:19:4c:ee:
5c:72:19:73:50:57:c9:df:30:98:e2:fc:b7:c1:ef:4f:3d:45:
1e:65:c6:d0:92:3c:3a:70:f1:87:5b:99:ef:70:c4:df:cf:9a:
18:72:54:6e:be:09:5f:df:ac:0c:5b:a8:d4:00:6a:23:3c:49:
10:7c:ec:b7:26:50:44:44:45:ad:bc:d4:bf:e3:85:05:70:53:
b4:83:70:41:b8:6f:50:5c:0a:bd:52:b2:cc:da:28:d7:80:c7:
e1:58:59:2c:cd:57:d6:f4:ac:7a:df:37:9e:39:7d:4c:a7:a9:
93:be:55:b5:49:d1:a4:a3:09:ff:12:b7:2f:85:da:ed:4e:77:
0d:51:de:e8:50:35:0a:36:8e:3e:7b:68:7d:19:3c:4a:c3:1d:
e0:ea:cc:51:a4:0e:30:6e:58:5f:73:d3:13:76:56:08:ee:23:
30:7f:a4:45:6b:bc:b7:db:eb:e0:9e:78:e2:d7:64:04:13:57:
7e:32:b2:c8:de:1d:63:10:6c:de:72:f6:46:a1:79:f4:5e:08:
eb:7e:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:15:39 2025 by rpki-client