Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32342d3234203d3e203631363738.roa
File: 3136382e39302e302e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier: cIkpMzfy9tEB4rT97oFDe/gQSWSApAl+ua6nFSLUGVQ=
Subject key identifier: 55:12:1B:F2:18:88:A0:9D:81:24:FA:EC:59:C8:99:F9:C0:CA:3A:B2
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 7093531A064207BFAE2FAE102D78CDD411E2EB58
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32342d3234203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:45:21 +0000
ROA not before: Tue 24 Oct 2023 12:40:21 +0000
ROA not after: Tue 22 Oct 2024 12:45:21 +0000
asID: 61678
IP address blocks: 168.90.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:93:53:1a:06:42:07:bf:ae:2f:ae:10:2d:78:cd:d4:11:e2:eb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:40:21 2023 GMT
Not After : Oct 22 12:45:21 2024 GMT
Subject: CN=55121BF21888A09D8124FAEC59C899F9C0CA3AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:46:2d:3a:d0:9f:07:7c:18:71:66:05:2f:
62:78:cb:57:5e:4e:37:3e:47:93:aa:b1:d3:2f:f8:
d3:34:d4:12:37:48:89:ce:ba:96:63:be:de:d8:1c:
c5:8f:2d:e3:86:be:33:f1:63:56:d3:5e:dd:09:2c:
a2:0b:0c:ad:3d:62:05:f1:b2:dd:ed:9d:90:e8:b6:
c8:b9:8a:1b:6c:92:e2:f7:db:73:70:4e:ef:0e:6d:
3a:c9:7c:3b:bb:72:cc:81:bb:30:d5:23:4a:f3:16:
18:e5:a9:7d:c5:2d:28:85:51:bc:bc:34:47:d3:66:
a0:68:22:be:d4:d0:8d:37:ab:8c:a7:de:74:e5:e7:
19:d0:57:77:d6:49:82:69:97:70:8e:09:20:44:53:
a4:d8:6d:8d:e5:72:53:f7:63:2e:db:db:14:58:07:
5b:07:ca:b6:0c:46:5e:e5:ab:d5:54:46:2e:53:6c:
87:89:e9:e0:ea:9e:14:cb:f5:a7:f5:a1:c6:32:04:
ff:08:69:a8:c7:70:b8:6c:92:01:97:37:06:2c:20:
09:38:4d:c8:90:80:10:6c:ae:23:e9:8c:90:31:61:
c5:25:ce:3d:ea:49:f0:18:80:80:c9:48:42:83:85:
28:81:52:b9:36:15:a8:33:c7:70:fc:5c:db:8d:f0:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:1B:F2:18:88:A0:9D:81:24:FA:EC:59:C8:99:F9:C0:CA:3A:B2
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32342d3234203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:d7:b5:df:6c:a6:ea:fc:89:c3:57:fa:da:cd:fb:3b:be:
a0:aa:72:dd:c7:85:ef:f7:9b:2b:e7:7a:7e:06:29:be:b9:92:
21:ee:d6:0a:a9:0c:7c:01:bc:8e:1d:a7:55:27:61:67:fa:52:
c5:c3:a0:fc:12:de:6e:a0:ce:f2:8e:33:62:be:e2:b3:bb:59:
29:24:f0:9b:28:30:b9:62:bd:e5:4c:24:a9:5b:bb:0f:bd:b2:
d9:59:99:a3:17:f1:64:13:50:5e:d2:c7:8a:6d:f8:e7:cb:2f:
54:66:f0:e5:4b:8f:e2:0d:dd:3f:98:17:12:6c:dd:f7:6e:69:
1b:56:a2:af:7f:b1:06:93:0f:0a:c9:14:ac:9e:49:09:ec:1e:
8e:37:5e:e9:d7:76:06:ff:72:8a:fb:05:c6:93:a0:ee:d1:9e:
55:f4:5d:1c:96:a9:72:36:2a:c2:39:a2:a6:9d:48:f9:22:c9:
b7:bf:21:98:29:b4:07:95:9e:20:16:1b:cf:56:5e:69:0e:7a:
4f:e5:c8:ee:a3:bc:0d:95:e5:af:36:76:e8:5d:49:bb:d6:52:
43:b8:89:48:82:2d:bb:82:81:d5:b2:4c:cc:9c:d6:4d:55:80:
a2:29:b8:08:54:e3:79:a2:b1:e2:91:07:a8:5f:a5:f4:23:28:
69:fa:ae:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:36 2025 by rpki-client