Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
File: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (raw, json)
Hash identifier: 5ZoSA3t4CmuYl5galp38fak/ZKkB1wTwTIkdyhDqNRg=
Subject key identifier: C1:52:77:7A:D3:19:C0:FC:AB:85:73:2D:78:17:CD:CA:EF:42:BB:93
Certificate issuer: /CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
Certificate serial: 6120DF24919A4D35B9DF3085FE2A7DB79438B49B
Authority key identifier: 3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
Signing time: Thu 04 Apr 2024 22:55:52 +0000
ROA not before: Thu 04 Apr 2024 22:50:52 +0000
ROA not after: Thu 03 Apr 2025 22:55:52 +0000
asID: 265018
IP address blocks: 160.238.200.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:20:df:24:91:9a:4d:35:b9:df:30:85:fe:2a:7d:b7:94:38:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
Validity
Not Before: Apr 4 22:50:52 2024 GMT
Not After : Apr 3 22:55:52 2025 GMT
Subject: CN=C152777AD319C0FCAB85732D7817CDCAEF42BB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:94:a2:81:9e:e4:b4:dd:5c:03:13:97:24:66:
c5:1a:dc:bb:72:78:98:ff:29:62:b3:26:06:d8:b4:
d7:db:c1:3d:71:f3:85:cf:3d:31:9b:3b:2b:16:1e:
ba:21:ce:70:07:b4:7d:29:ea:c7:3e:e6:9f:6e:fc:
5d:be:78:d4:f4:05:54:1e:7d:bf:39:a9:9f:31:3c:
62:8f:52:f2:48:9b:82:e2:b5:d5:75:b4:4d:e5:02:
90:46:63:a9:df:1a:73:76:de:02:15:78:84:32:90:
65:04:2f:1a:8a:54:57:b4:04:f8:ce:61:02:bf:77:
7d:8d:63:5a:57:69:26:e5:8a:ca:2e:95:64:be:dc:
0d:4e:c8:8a:fe:09:ca:7e:59:13:c6:17:e1:a3:8c:
77:ee:74:8a:31:8f:ca:a7:60:c6:af:08:be:32:98:
85:43:84:0e:4f:5e:a6:ad:8c:51:43:1c:97:92:02:
c4:5a:2f:07:fa:dc:90:a9:84:cf:80:9e:45:c9:11:
97:85:1b:8b:00:93:0d:51:09:ee:a4:ea:a7:72:32:
1e:8b:c9:08:89:7d:a4:05:1c:1f:7d:1f:db:31:4f:
f8:1c:b6:5b:75:fd:5c:91:6c:7e:e9:7b:2d:f9:fd:
de:4e:3c:39:77:32:19:b6:7c:dc:76:d7:db:37:19:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:77:7A:D3:19:C0:FC:AB:85:73:2D:78:17:CD:CA:EF:42:BB:93
X509v3 Authority Key Identifier:
keyid:3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.200.0/22
Signature Algorithm: sha256WithRSAEncryption
11:02:a5:0f:b9:8e:96:78:16:5c:2b:e0:47:a2:94:04:ae:b2:
d8:41:9a:96:ba:47:d3:34:d6:24:49:c7:b3:fd:45:b3:3c:e3:
eb:91:52:dd:74:69:9f:64:2e:ee:e4:2d:34:33:2b:00:9b:1a:
bb:d7:ad:7f:40:1d:3c:53:6e:1d:d6:d9:68:72:49:a4:86:87:
b9:dd:5f:be:e3:9d:ef:de:62:ac:fa:80:8b:d2:7f:b7:bb:69:
2e:fb:9c:79:c7:dc:7f:b9:98:2b:b3:93:1c:6c:10:bf:e0:ca:
77:5f:34:55:93:63:ab:df:51:b4:00:2d:cf:36:a9:94:6f:75:
73:18:6f:f7:49:27:30:c7:35:1e:94:96:cc:76:d0:15:7a:9f:
de:49:92:72:c5:66:eb:17:ea:96:f8:08:52:c6:3c:61:5a:26:
65:e3:2a:37:22:d4:20:19:7b:85:65:20:3f:63:08:29:c0:39:
e4:98:0a:85:37:1f:00:b9:7c:b0:7a:91:6b:51:d1:25:b4:0d:
bd:5d:8c:57:ef:7b:5d:1f:2d:e9:29:b2:e7:df:29:2c:42:14:
87:72:fb:a3:25:83:6f:0d:2e:50:71:bd:5b:e4:75:8f:a7:86:
db:aa:d1:23:f0:b0:7d:47:2b:47:23:90:86:6b:6b:b9:58:6c:
37:75:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:37:44 2025 by rpki-client