Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
File: 3136382e3139352e302e302f32332d3234203d3e20323635343130.roa (raw, json)
Hash identifier: 1bK1aLDbabLC5rQ2FTJ511sWOiBmEftz3JYKT4ti7l0=
Subject key identifier: F2:CC:1A:68:97:3B:20:90:E5:E7:F0:5E:AB:A7:0D:9D:A9:CD:87:72
Certificate issuer: /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial: 2B701436260473AFE4FE26D5CBDD80022016BF84
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
Signing time: Thu 06 Mar 2025 16:33:24 +0000
ROA not before: Thu 06 Mar 2025 16:28:24 +0000
ROA not after: Thu 05 Mar 2026 16:33:24 +0000
asID: 265410
IP address blocks: 168.195.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:70:14:36:26:04:73:af:e4:fe:26:d5:cb:dd:80:02:20:16:bf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Validity
Not Before: Mar 6 16:28:24 2025 GMT
Not After : Mar 5 16:33:24 2026 GMT
Subject: CN=F2CC1A68973B2090E5E7F05EABA70D9DA9CD8772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8a:30:ea:e3:dd:64:69:01:d2:d0:8a:06:44:
bf:67:18:8e:ff:5b:71:12:68:c1:89:5c:1d:0b:45:
9a:2c:28:9f:da:0e:c5:aa:11:0d:a1:66:fa:b5:70:
c3:ad:03:40:b0:c4:ef:0d:1a:f2:e0:da:68:64:cf:
3e:15:b1:04:56:2c:8b:7e:05:2b:20:14:a0:2e:ff:
9a:57:0f:98:c7:9c:87:2f:6d:fd:3b:4d:67:18:34:
00:58:34:95:5b:73:5a:e8:5c:39:a8:8c:0b:32:7a:
0e:5c:a6:65:71:5b:3b:35:f8:86:c3:10:45:b6:bf:
91:5f:3b:8f:56:3a:41:08:f4:1f:a9:c1:73:33:2d:
36:26:86:f8:1b:11:d1:de:b3:15:74:1e:dd:0d:e7:
15:8d:80:d0:b1:54:f6:74:22:43:07:d6:29:39:55:
8e:9c:bc:4f:0b:46:13:82:77:03:02:0b:d0:1c:7c:
28:3c:e7:de:87:76:cc:21:47:e1:51:80:93:3c:8f:
83:be:39:c7:88:87:95:42:7e:81:54:68:cd:2d:d3:
ed:96:09:46:47:fa:f4:7c:af:13:3d:25:7e:d3:c8:
22:46:bb:7c:33:5c:39:50:f8:43:25:46:ff:cb:7e:
69:53:2f:bb:45:79:f6:5d:18:50:47:05:d1:20:07:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:1A:68:97:3B:20:90:E5:E7:F0:5E:AB:A7:0D:9D:A9:CD:87:72
X509v3 Authority Key Identifier:
keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.0.0/23
Signature Algorithm: sha256WithRSAEncryption
38:48:5d:39:70:73:dd:12:1a:28:f4:58:cc:f9:1a:23:88:39:
ae:2b:df:1c:79:a9:65:8c:40:7b:21:29:31:4b:60:0d:4f:97:
ec:c8:70:5f:1b:0b:13:75:36:9c:f1:78:c8:b7:b8:09:ba:44:
0e:27:eb:1a:42:14:61:20:1f:2c:4c:81:e7:8d:5e:9c:65:7f:
0a:14:5b:3b:5e:a6:f0:59:58:d6:40:44:cc:58:f2:a6:02:bb:
88:dd:44:7d:85:4d:3d:6d:14:14:2f:d9:28:bd:5d:b8:2c:27:
40:5f:b3:c4:36:be:4c:0d:3e:cb:fd:63:8a:ec:2b:05:93:4c:
5c:54:5c:f3:f5:b0:be:87:bb:c2:1a:d6:e6:59:a1:58:af:fb:
e3:e1:2a:1f:55:ee:6d:38:85:6e:42:76:6d:86:9a:63:47:bf:
1d:2f:49:91:34:a0:a9:6e:07:c4:e4:3e:97:fe:71:16:63:b2:
24:61:aa:67:6e:72:0a:a5:8c:6c:da:51:4d:c5:10:83:ac:66:
1a:ee:58:43:c6:16:d0:58:84:10:48:53:9d:bd:1f:46:e9:32:
1f:34:7d:85:09:0d:d1:f7:94:f9:8b:80:18:3b:1f:69:c3:bb:
6c:21:4e:19:2f:ff:8f:e1:da:59:5c:7f:e5:61:50:ae:1f:43:
1a:4c:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:51:22 2025 by rpki-client