Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e322e302f32342d3234203d3e203631363738.roa
File: 3136382e39302e322e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier: IHLi43onOAEGqbxcWG/U4v9a1VdHUHL+D61bkJu0xEo=
Subject key identifier: B9:B6:9E:41:2E:A3:69:27:3F:A6:44:9C:B9:20:0D:5B:67:0C:FA:F7
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 30224AA2476438D71496D06FE4577F896A6D2B18
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e322e302f32342d3234203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:45:32 +0000
ROA not before: Tue 24 Oct 2023 12:40:32 +0000
ROA not after: Tue 22 Oct 2024 12:45:32 +0000
asID: 61678
IP address blocks: 168.90.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:22:4a:a2:47:64:38:d7:14:96:d0:6f:e4:57:7f:89:6a:6d:2b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:40:32 2023 GMT
Not After : Oct 22 12:45:32 2024 GMT
Subject: CN=B9B69E412EA369273FA6449CB9200D5B670CFAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:2d:b1:c6:68:ab:ff:31:a9:a3:6e:1e:0e:
62:6b:e0:b7:7c:46:b1:47:7a:4e:8a:14:a7:bd:dd:
0d:7a:23:f6:1d:1e:0b:2b:79:89:dd:03:80:cc:e1:
43:b7:69:b0:1f:43:d1:13:16:6c:86:38:c9:b9:f3:
c6:a4:39:f3:0a:c4:4e:56:52:fd:15:53:73:05:a1:
c9:73:e0:54:2b:ed:1f:22:27:c7:c3:8b:5a:1c:e8:
93:77:b7:8f:41:75:6d:13:1d:eb:82:a8:70:20:51:
6a:49:6c:1b:a0:ac:c6:af:55:fb:2a:f3:d8:87:4a:
9d:3a:ff:26:f2:f4:ee:70:95:36:9e:14:44:7a:df:
9f:d4:0f:0a:4a:90:50:d0:28:56:98:c6:29:5e:54:
af:77:ab:bf:42:a3:bb:3f:db:27:ca:20:42:1b:fd:
d0:0b:af:ab:d4:c7:53:c7:2e:c4:26:93:78:9d:9f:
4e:c6:99:dd:05:55:17:ef:12:58:65:62:10:55:ca:
9b:43:35:f5:9f:1a:a8:d6:22:dc:cd:b4:30:a3:96:
3f:3d:e3:66:d1:2c:bd:cc:e9:d6:61:32:15:ee:fa:
71:56:ab:b8:34:fc:74:e3:e9:87:38:b8:72:3e:a9:
0d:8a:ef:b8:f7:57:ef:98:71:9f:29:70:5b:32:71:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:9E:41:2E:A3:69:27:3F:A6:44:9C:B9:20:0D:5B:67:0C:FA:F7
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e322e302f32342d3234203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a5:11:f1:39:83:c9:08:f8:de:fc:d2:17:2c:3d:bb:24:df:
93:4a:bd:ab:b3:36:36:5c:7c:81:09:28:2e:51:d4:68:ed:c1:
5d:8a:a0:85:c8:8c:a1:76:2a:64:aa:7a:e0:a3:d8:9e:38:95:
1a:5b:b0:98:34:2c:c9:26:37:1e:70:db:7c:7c:e4:98:55:eb:
1b:ca:d5:69:88:72:28:83:4e:f6:2a:a6:e6:e4:b4:33:f7:fa:
e0:93:dc:7b:f0:a9:4c:af:9b:b0:0a:de:ab:5d:fa:dc:d5:5c:
ea:a0:64:80:61:1e:27:31:2a:11:e3:19:55:f1:1c:d3:ba:ac:
c2:f5:48:77:9a:e3:75:89:28:2d:8a:32:52:af:09:88:89:66:
d9:72:2e:cc:7c:17:88:fe:2c:d5:d4:2a:ef:00:e1:e9:ce:d7:
54:1a:1b:44:21:a7:1e:06:b8:3c:95:14:9f:71:76:b1:aa:36:
cb:2a:39:b0:8f:cb:d3:01:0d:c0:cd:2e:ac:bb:dc:62:9d:03:
94:d4:ca:86:14:61:86:0e:99:69:80:bd:0e:7f:09:e4:91:34:
ff:01:8f:63:c6:a7:7a:ec:b3:1a:c7:3b:e4:8b:1c:7e:af:34:
be:89:37:7e:7a:55:68:fe:43:9f:0f:2c:c1:5f:2f:a6:8b:0b:
32:1b:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:34 2025 by rpki-client