Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
File: 3136382e3139352e302e302f32322d3232203d3e20323635343130.roa (raw, json)
Hash identifier: wnydP9U50BhWhcT0RcTlXRxU2W3duY+JimK8g4DCnMk=
Subject key identifier: 59:A1:6F:C3:2A:72:1A:F7:6B:D8:8B:1C:99:4D:07:5A:FE:8C:6E:29
Certificate issuer: /CN=54C4052D39431D563CCB2D911DC264CD61964490
Certificate serial: 34B726A8F2210C4C9C1F391655A99ADECB8CFAC4
Authority key identifier: 54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
Signing time: Thu 07 Mar 2024 16:26:38 +0000
ROA not before: Thu 07 Mar 2024 16:21:38 +0000
ROA not after: Thu 06 Mar 2025 16:26:38 +0000
asID: 265410
IP address blocks: 168.195.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b7:26:a8:f2:21:0c:4c:9c:1f:39:16:55:a9:9a:de:cb:8c:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C4052D39431D563CCB2D911DC264CD61964490
Validity
Not Before: Mar 7 16:21:38 2024 GMT
Not After : Mar 6 16:26:38 2025 GMT
Subject: CN=59A16FC32A721AF76BD88B1C994D075AFE8C6E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:05:1e:6f:91:6e:d5:0e:07:21:ec:07:74:
c4:45:6a:52:f0:73:1b:91:b4:80:52:4b:33:d3:79:
3e:bf:53:3c:41:52:a9:f8:78:b6:c0:39:da:43:27:
03:b2:7c:32:09:28:86:26:8e:df:a7:0a:2a:9f:f0:
3c:07:44:16:94:42:d8:fd:d7:0c:49:06:a3:79:0a:
44:37:6c:dc:e5:44:45:bb:77:e9:93:a5:33:58:5b:
58:e2:d5:ba:d0:6d:41:39:2e:37:18:e1:7b:24:f6:
b1:cf:0b:77:f4:4c:53:ee:66:c4:d5:83:5d:cf:4c:
59:a5:d9:f4:ad:e7:a6:b6:d0:50:8d:6b:13:57:93:
0e:d2:3d:3b:33:90:38:9a:b6:3f:ff:6f:1e:e7:6b:
9b:c4:16:21:31:a7:b6:41:cc:79:21:5d:e2:c2:b5:
75:e7:0b:b4:80:a8:e8:47:9a:88:82:a4:4a:a9:a7:
e8:0d:52:c9:18:c0:e5:fc:8e:0f:79:f3:1f:14:31:
4f:82:14:d7:70:4b:ba:e2:df:7f:67:75:8f:75:91:
eb:cc:ad:45:d8:7f:58:6c:1d:f3:d8:34:7d:38:2f:
d9:2b:97:83:e7:af:46:e2:29:8e:40:26:c4:e1:b5:
5b:19:21:15:78:31:7e:7f:34:93:8c:31:da:29:18:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:6F:C3:2A:72:1A:F7:6B:D8:8B:1C:99:4D:07:5A:FE:8C:6E:29
X509v3 Authority Key Identifier:
keyid:54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/3136382e3139352e302e302f32322d3232203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
10:cf:09:24:7e:4b:7d:d5:22:bf:2c:17:2c:60:bd:cc:e3:f6:
cb:5f:52:8f:00:18:8e:c9:df:40:3c:99:c9:b3:f3:87:03:77:
f2:a6:ea:4d:cc:15:6f:13:ca:70:01:ed:3d:c4:44:98:4b:ad:
46:22:98:5d:a4:d4:c4:11:b9:24:ac:5c:57:b5:35:cf:da:8b:
d4:4f:04:aa:29:06:4a:03:40:68:1d:65:69:0b:2f:c3:cd:d0:
cf:cc:41:87:2e:8b:a3:02:a0:f5:1e:f2:11:e5:de:40:02:21:
6c:92:f8:98:2f:c7:76:e1:9d:2e:68:5c:c0:4b:ed:40:75:84:
5a:3e:5f:bd:30:ec:1e:49:0c:19:4c:dd:99:3d:18:df:b8:91:
d9:a3:5e:81:dd:03:da:de:72:81:fc:24:e7:09:7e:2e:d7:7a:
e8:ff:ad:11:d2:bd:9e:b3:3f:aa:f0:bc:4f:98:e9:8f:52:a9:
bd:da:2f:73:08:60:41:d7:ed:13:f6:3b:8a:b9:97:af:80:5e:
85:ae:e3:ea:65:2c:a4:6a:0d:3a:42:8f:37:6a:2b:62:b2:aa:
75:a9:3f:f2:02:b2:05:f8:05:c0:1c:56:3e:f2:6d:0b:e2:69:
ec:e7:4e:70:6f:a5:7b:54:2a:72:c0:5d:cb:38:30:1b:b6:40:
b5:a0:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:24 2025 by rpki-client