Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235322e302f32342d3234203d3e20323634383932.roa
File: 3136382e3230352e3235322e302f32342d3234203d3e20323634383932.roa (raw, json)
Hash identifier: 5pA+YN+OpruM5+uWHioargYMfJ5tPN1MriK9GmrQOyk=
Subject key identifier: 6A:EA:24:F0:22:03:8C:AB:4C:E2:A8:15:AF:53:10:9E:C1:31:2D:A8
Certificate issuer: /CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Certificate serial: 2765ECC05F4E74CDD198AC362B1E7165DC3E7BCF
Authority key identifier: 20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235322e302f32342d3234203d3e20323634383932.roa
Signing time: Wed 31 Jan 2024 20:10:03 +0000
ROA not before: Wed 31 Jan 2024 20:05:03 +0000
ROA not after: Wed 29 Jan 2025 20:10:03 +0000
asID: 264892
IP address blocks: 168.205.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:65:ec:c0:5f:4e:74:cd:d1:98:ac:36:2b:1e:71:65:dc:3e:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Validity
Not Before: Jan 31 20:05:03 2024 GMT
Not After : Jan 29 20:10:03 2025 GMT
Subject: CN=6AEA24F022038CAB4CE2A815AF53109EC1312DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:14:aa:64:63:a0:ef:d8:d1:3b:57:73:38:
4a:f4:d6:d8:91:fb:93:60:b1:c4:93:01:4d:ca:9a:
2b:aa:9d:e0:f1:15:c0:60:1f:2a:9a:69:f7:98:66:
b9:ea:e9:5d:b0:7d:05:40:b5:2d:df:d4:c4:ca:d3:
92:5a:3c:5b:a5:36:a9:2b:2c:23:99:36:2b:ac:0e:
14:7e:76:6e:e4:11:6a:ac:df:79:02:82:d5:9e:07:
56:86:7b:34:38:c1:76:a1:fc:3d:89:86:aa:06:a7:
4a:02:94:49:92:51:8c:f7:fa:0a:2d:31:45:b6:9f:
69:cd:05:11:5b:e9:df:69:25:ba:8d:e1:89:48:cc:
04:59:f2:57:49:86:ab:c7:98:d9:e3:c5:c0:00:3f:
d3:eb:62:97:8f:d7:30:c8:5f:6d:ca:0a:aa:25:fd:
9c:6e:ce:80:82:e2:3a:a7:3c:96:67:cc:14:b7:01:
8a:65:9c:4b:6f:3c:c4:c4:72:75:8f:04:21:26:df:
27:78:58:78:0f:89:d4:94:b4:14:2b:80:a3:90:cd:
cd:41:4c:7f:93:dc:8c:6f:b8:cc:6e:71:2a:66:f5:
5d:d1:cb:c8:18:38:40:43:77:eb:29:05:04:f8:2c:
f5:95:68:14:9f:c8:9b:e9:14:6b:b7:9e:b0:a9:95:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:24:F0:22:03:8C:AB:4C:E2:A8:15:AF:53:10:9E:C1:31:2D:A8
X509v3 Authority Key Identifier:
keyid:20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/3136382e3230352e3235322e302f32342d3234203d3e20323634383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.252.0/24
Signature Algorithm: sha256WithRSAEncryption
18:96:bc:d0:d9:24:cc:90:48:0f:cf:ec:50:0e:41:8f:a2:14:
bc:a0:27:a6:1e:fb:cd:a6:cb:17:30:fc:49:3f:15:e5:2e:49:
1e:bc:86:a5:05:f7:09:e4:b5:06:d8:fe:6d:ed:34:1b:69:e7:
5f:42:18:f9:e3:df:2f:20:d3:95:37:4d:6d:15:4b:a6:4a:a6:
9b:74:33:5d:f1:5c:bf:c0:d3:39:68:cd:0b:64:fd:9a:87:32:
18:76:54:d9:66:d2:34:65:97:d6:c8:dc:b4:c9:74:fb:3d:f1:
12:f4:50:cb:1e:b7:10:80:a7:0e:b3:34:60:e1:73:ff:ff:90:
b0:ed:b5:cd:e1:f3:f4:2b:9c:35:d1:94:b6:f6:3f:43:02:fc:
31:e9:e7:49:87:28:19:02:b8:90:f2:08:f4:f9:11:e5:a7:b3:
f9:58:7b:b1:aa:f2:ba:c5:19:8c:6c:e8:14:23:cc:63:23:4e:
da:8f:47:11:29:23:b9:c5:e3:9b:1f:5d:2b:35:3b:ab:44:e3:
b9:9c:7e:42:68:9c:b4:89:84:3c:e1:91:ef:41:4a:03:c5:13:
f6:8d:05:14:98:89:11:be:a6:ad:12:af:71:1b:f3:9a:2e:d2:
a9:fc:f1:68:5f:ce:df:65:06:4f:3c:99:3a:fe:ea:87:7a:71:
62:60:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:10 2025 by rpki-client