Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
File: 3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa (raw, json)
Hash identifier: SvHnLpXNwdJGGOe4us0NY3Aw+g+W4i85Reae68383Mo=
Subject key identifier: A4:A4:A4:57:55:11:B8:DC:5F:41:4D:CC:F9:5D:48:D5:09:94:74:7B
Certificate issuer: /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial: 3ACA420F47EE8245160656AFA84E2834E8A6B395
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
Signing time: Thu 13 Mar 2025 18:14:26 +0000
ROA not before: Thu 13 Mar 2025 18:09:26 +0000
ROA not after: Thu 12 Mar 2026 18:14:26 +0000
asID: 264915
IP address blocks: 168.228.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ca:42:0f:47:ee:82:45:16:06:56:af:a8:4e:28:34:e8:a6:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Validity
Not Before: Mar 13 18:09:26 2025 GMT
Not After : Mar 12 18:14:26 2026 GMT
Subject: CN=A4A4A4575511B8DC5F414DCCF95D48D50994747B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:89:c2:ac:99:56:14:f5:55:0c:dc:fe:d8:
02:1d:fb:a4:fc:60:4d:63:29:13:82:17:7b:b9:f0:
1f:ac:ba:38:a7:28:d9:7f:48:de:38:b7:d5:7d:24:
6f:80:41:d7:0b:05:1f:d5:bd:be:cb:8b:3c:91:9f:
57:e1:09:f8:a1:9b:fc:51:78:6e:4c:f4:7e:9d:47:
53:1f:27:48:75:7f:30:2e:de:ff:a8:69:43:df:6e:
81:45:6c:f4:09:89:c5:3d:f7:70:bf:4c:56:fa:ee:
0d:d9:aa:e7:b2:53:c0:12:75:23:59:b3:10:2c:d4:
09:5b:d6:c9:a0:07:a0:5d:71:5f:42:c4:cc:eb:d0:
5b:76:b7:3f:f0:c8:10:b9:90:b0:07:8b:e2:1b:ab:
3a:59:ec:cb:3a:dd:a8:4d:a0:70:0b:72:e5:7d:5a:
ec:3e:82:b4:71:1d:4d:71:0f:0e:62:b7:d0:f4:09:
c7:40:ab:5f:ab:16:1c:a6:c7:b5:a5:56:29:02:7e:
ef:bf:3f:ae:cb:67:90:3f:ae:ce:ea:c1:bd:1a:b1:
cb:d2:96:4b:20:30:43:95:64:11:65:4c:71:ca:de:
37:4a:cc:c9:e3:3e:5e:5d:84:c0:07:b4:a2:24:81:
29:13:91:d8:7e:a3:aa:e1:20:91:f4:41:f0:c6:8e:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:A4:57:55:11:B8:DC:5F:41:4D:CC:F9:5D:48:D5:09:94:74:7B
X509v3 Authority Key Identifier:
keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
89:ac:28:c9:0d:46:9b:65:c5:27:40:eb:48:da:71:ff:25:39:
b0:cd:59:44:f7:61:86:b6:26:52:36:c8:de:07:74:2f:c7:d6:
23:8a:7d:f1:43:03:50:09:09:5a:42:44:13:98:e2:ac:00:08:
5e:95:ee:d9:f1:94:1a:8d:c2:2b:18:ff:ba:5a:71:60:ab:a1:
19:8e:66:b7:f2:90:37:d4:7a:ad:78:5d:32:a4:ae:b3:e8:c6:
4e:05:6d:eb:07:1a:34:14:2f:a7:96:98:41:19:d9:db:4a:6e:
ba:27:ef:f5:f6:10:aa:79:e1:51:6b:55:9f:86:53:d8:fc:4c:
8f:04:b6:79:5e:be:5c:ba:68:5a:bc:87:d6:8b:32:73:3c:c9:
81:ae:fe:92:4e:e7:8a:2f:df:58:48:8c:50:a2:28:ca:38:57:
70:c5:2f:c3:59:e0:4d:0d:6f:53:a5:fc:17:89:d2:eb:80:88:
51:d6:97:06:ee:82:b1:44:c4:ea:9d:b9:e4:21:fc:f3:03:38:
db:d3:ba:b1:fa:a4:05:13:3f:78:65:53:57:8f:de:75:a1:64:
07:a7:03:18:74:f2:62:2f:85:c3:68:13:15:ac:a7:7d:55:d4:
c9:82:f7:8d:e1:17:64:96:c6:e5:ae:11:07:2a:6c:57:77:2b:
f0:54:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:28 2025 by rpki-client