Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa
File: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier: hsUqcBtrggzHi8XWKiDT4v+VWmLmwqE/MP++GHfCjxs=
Subject key identifier: 57:DA:A7:C5:13:D7:AF:96:92:52:B0:26:A5:AF:60:0E:21:40:6C:67
Certificate issuer: /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial: 4A54A5167EAE046F25D9550B3243A4A8817BFB11
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa
Signing time: Tue 18 Feb 2025 21:23:48 +0000
ROA not before: Tue 18 Feb 2025 21:18:48 +0000
ROA not after: Tue 17 Feb 2026 21:23:48 +0000
asID: 262769
IP address blocks: 168.181.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:54:a5:16:7e:ae:04:6f:25:d9:55:0b:32:43:a4:a8:81:7b:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Validity
Not Before: Feb 18 21:18:48 2025 GMT
Not After : Feb 17 21:23:48 2026 GMT
Subject: CN=57DAA7C513D7AF969252B026A5AF600E21406C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:c0:81:78:f7:63:ab:ae:a1:bb:de:2f:90:
81:e6:df:5a:d2:05:43:aa:8c:d8:b9:64:a5:7a:e3:
42:be:12:10:3e:2e:58:64:90:e1:39:b9:61:6b:52:
e2:8b:41:1c:5e:5f:9f:76:da:0d:3a:19:36:70:51:
0c:01:68:4c:58:0c:1c:26:df:05:e9:63:4d:79:ed:
87:86:8b:d3:a5:18:f5:05:b3:4e:d5:b3:69:9b:8c:
2b:cb:1a:f0:f3:8f:64:d8:5b:43:a9:91:29:4a:2b:
4c:9e:e3:5f:8f:6d:5e:e1:43:b1:5b:6a:a8:0c:0d:
1a:ff:7c:81:3f:64:f2:42:96:7a:5f:c3:d6:a2:3d:
e6:c0:33:e0:06:02:79:2a:bf:7e:a9:89:d3:29:85:
76:60:5c:66:d0:20:b7:15:e6:d6:fc:57:21:a5:06:
77:5e:99:ef:9d:5d:ee:29:9a:ad:fb:40:db:0a:8e:
1f:ea:29:9e:31:12:e9:e5:20:a9:d0:ce:f3:1e:98:
38:b8:c5:68:64:2e:3e:cc:12:a3:cd:76:2c:d0:30:
28:f3:a2:f0:d5:85:fb:f7:96:77:b1:14:aa:88:b8:
d4:e4:6e:5c:c2:a3:0b:82:09:16:30:b9:0b:1b:05:
5d:54:36:31:a4:90:05:5a:87:be:81:55:f2:5f:d7:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DA:A7:C5:13:D7:AF:96:92:52:B0:26:A5:AF:60:0E:21:40:6C:67
X509v3 Authority Key Identifier:
keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d7:98:f8:cd:3f:68:9f:3a:8c:50:c4:f0:bc:d5:f7:20:3a:
d8:45:2f:ef:ed:e7:d4:98:52:41:f0:14:ec:d9:d7:cf:a0:67:
a7:b3:bb:8c:e1:33:1e:c3:51:e1:87:c5:c0:a9:c4:13:ea:16:
ca:69:20:17:3f:04:82:45:29:a8:12:c7:d1:ae:c6:5d:52:7e:
ad:4b:95:51:80:cd:e9:78:dd:79:45:6a:90:73:07:11:d9:6f:
7c:e7:73:d4:ea:1c:6d:d0:26:5a:b7:8f:bd:ab:f7:5e:67:e5:
91:35:36:0f:c6:f4:95:b4:d6:8f:32:a7:a1:28:44:ed:5c:f6:
87:2f:87:ac:8a:eb:06:04:e7:69:7a:6a:98:53:bb:16:50:57:
f2:34:e2:56:fe:2a:4e:73:10:3b:55:a7:87:e1:31:97:7d:21:
5d:06:f0:6b:09:e4:4e:e6:d4:75:28:5c:9f:83:88:5b:8a:1c:
80:a4:a3:9c:46:ae:3d:be:47:29:25:cf:e9:8a:98:55:43:19:
40:b0:33:53:df:3c:f5:3d:9e:f1:46:2d:70:6a:ed:cc:6b:20:
44:0a:c6:5e:ce:2e:f6:8e:31:01:e1:64:57:44:e4:c3:83:ba:
3e:39:0b:0e:85:b8:cb:9e:2a:ed:33:03:02:2f:5d:ad:fe:93:
dc:91:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:43:37 2025 by rpki-client