Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File: 3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier: KuAODwHBLpABAK62a+qjGqXo7MW4IoqRZ7qIg41YcJQ=
Subject key identifier: ED:52:F3:B7:6E:54:B8:56:4B:D4:48:D4:DC:72:E4:F4:07:45:D7:61
Certificate issuer: /CN=198E6997B7790B601CE9B8657001F896E66D3D74
Certificate serial: 4B900C751BBEFF63160DDD643CB88E96A4A29E7A
Authority key identifier: 19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time: Tue 10 Dec 2024 11:50:30 +0000
ROA not before: Tue 10 Dec 2024 11:45:30 +0000
ROA not after: Tue 09 Dec 2025 11:50:30 +0000
asID: 52898
IP address blocks: 168.227.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:90:0c:75:1b:be:ff:63:16:0d:dd:64:3c:b8:8e:96:a4:a2:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198E6997B7790B601CE9B8657001F896E66D3D74
Validity
Not Before: Dec 10 11:45:30 2024 GMT
Not After : Dec 9 11:50:30 2025 GMT
Subject: CN=ED52F3B76E54B8564BD448D4DC72E4F40745D761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:5e:74:62:76:66:d4:e7:75:e2:8c:0b:f2:
59:0a:b2:24:e7:27:da:b6:67:da:3c:33:c0:4f:2a:
87:b1:46:b0:86:cd:fa:dd:9d:19:57:39:71:be:ad:
45:0f:3d:86:6c:78:85:c4:1f:b8:e9:5d:74:84:a3:
fa:fb:f2:df:98:bb:c4:26:83:65:91:f0:87:47:6a:
f2:21:26:e4:5f:47:96:2c:54:1c:ef:67:cc:a0:b7:
52:3b:c1:b6:b9:32:11:40:21:ff:79:67:0b:c5:fc:
4a:04:cb:05:e3:ce:5a:58:15:15:4e:4e:61:c7:b1:
55:18:7c:4a:b4:2a:68:c9:70:c3:3a:7c:ef:50:98:
de:8c:1a:3a:87:8f:94:4a:5c:c0:77:81:f1:60:80:
bb:1d:b2:72:8f:21:25:31:53:87:81:57:57:d2:ac:
03:03:74:75:e2:74:92:f7:f9:dc:8e:d6:8f:46:14:
81:a8:5a:8a:9b:2b:ea:8c:73:04:0d:89:dd:09:31:
f6:d3:44:a5:31:49:bf:2d:d9:dc:b9:af:33:cc:9c:
2e:81:15:10:fb:ab:67:06:c2:fc:e9:14:34:6d:3c:
a0:48:7d:db:df:48:50:1a:35:6b:c6:04:a3:f8:82:
29:e2:ee:99:a0:cd:7b:4d:b4:02:f4:32:22:0e:4d:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:F3:B7:6E:54:B8:56:4B:D4:48:D4:DC:72:E4:F4:07:45:D7:61
X509v3 Authority Key Identifier:
keyid:19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/198E6997B7790B601CE9B8657001F896E66D3D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.156.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ad:44:c1:19:6b:3d:f4:fa:7e:3f:92:6b:6d:eb:4b:81:b9:
6a:fd:8c:0b:69:d1:8b:8d:c4:00:20:8e:70:bc:f9:e3:5b:1f:
4a:4f:d3:0c:2c:f2:a0:c9:41:57:ed:96:3a:35:0f:ed:06:c6:
85:64:54:fa:2d:a9:af:d4:d4:66:2b:ce:43:e5:35:20:f3:19:
f3:a5:2c:12:eb:bc:b1:cc:d7:56:45:97:55:05:b7:26:ca:dc:
35:22:da:ed:73:04:c2:9f:3d:60:2a:51:d0:dc:64:52:38:45:
b3:ea:30:20:95:7c:51:e4:cc:ed:b9:a1:6d:d2:54:27:50:77:
0b:a8:cc:91:19:20:e4:f9:86:25:3c:b8:1b:3b:c4:f7:51:09:
02:35:b3:6a:06:de:38:90:3d:01:07:32:d4:de:c5:ee:d8:86:
b6:85:d4:e3:68:5b:d5:17:a3:0c:2a:af:d3:8f:fb:ff:c6:2d:
90:62:d9:13:3e:83:05:f4:6f:d5:20:fd:56:88:47:05:3c:bb:
d7:3a:31:84:5e:74:f6:9d:00:eb:f7:8e:85:12:0a:7e:08:4b:
80:1c:b5:b1:fe:55:b7:dc:15:c2:dc:15:7a:70:af:60:af:7e:
fb:c6:89:ee:df:42:1f:b3:35:17:34:88:70:da:e2:9e:23:7e:
4a:50:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:32:26 2025 by rpki-client