Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa
File: 3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier: 7tYbtLc4dP5NebOrOnKedCG+S5/TlgE0Hki5d8cw+nk=
Subject key identifier: C6:61:92:42:37:E9:3F:C0:3A:3F:CF:D5:D1:55:84:17:11:C4:F2:42
Certificate issuer: /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial: 2453C6B67ACF28B77E681F467D6340032F59A518
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa
Signing time: Tue 13 Feb 2024 15:52:47 +0000
ROA not before: Tue 13 Feb 2024 15:47:47 +0000
ROA not after: Tue 11 Feb 2025 15:52:47 +0000
asID: 264915
IP address blocks: 168.228.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:53:c6:b6:7a:cf:28:b7:7e:68:1f:46:7d:63:40:03:2f:59:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Validity
Not Before: Feb 13 15:47:47 2024 GMT
Not After : Feb 11 15:52:47 2025 GMT
Subject: CN=C661924237E93FC03A3FCFD5D155841711C4F242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:8d:34:ec:e4:50:90:04:9a:74:ca:1f:81:
d1:35:dd:77:28:7c:c7:48:c0:fa:2d:fa:91:d7:69:
74:99:64:81:7b:61:fd:d1:e9:dc:81:d3:a2:d4:4c:
1b:5f:93:28:53:d5:ab:d3:d8:d2:f7:fc:51:c8:64:
4d:0e:e5:67:e1:8f:f3:24:50:e1:7b:44:dc:4b:f2:
dc:86:ab:66:c1:34:79:cd:ba:56:ab:b1:84:62:fa:
d7:f3:29:75:be:64:69:7b:68:33:b3:b2:ea:3e:4f:
c7:87:55:07:35:06:39:82:8b:35:f5:1d:03:17:07:
32:e4:7b:41:13:35:61:04:ce:8d:f7:26:08:2a:6e:
f1:f0:d6:e6:2b:d4:d4:aa:30:13:cb:91:15:5a:c0:
e0:49:f4:5d:9f:32:e3:eb:3f:d0:73:bb:ac:04:7e:
89:df:6f:02:b1:12:51:40:9c:eb:46:de:29:1f:a9:
22:e1:ef:8f:05:b5:78:4e:28:c0:be:1b:62:2d:d3:
c0:b8:84:a6:20:68:8c:74:d2:20:74:25:7f:8e:05:
8b:75:52:04:e8:1d:0b:71:d9:d9:54:09:fa:4e:a1:
6c:fd:05:53:d1:c4:c1:0a:1c:4c:7b:f8:8c:72:95:
59:51:0d:e9:fb:bb:ba:6f:f7:fa:67:73:1b:a8:f6:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:92:42:37:E9:3F:C0:3A:3F:CF:D5:D1:55:84:17:11:C4:F2:42
X509v3 Authority Key Identifier:
keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.222.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b4:43:4c:5e:fc:5e:93:34:17:83:41:71:3e:5c:da:0e:2a:
df:6c:8e:57:82:e4:ac:dd:df:cd:3d:09:7e:95:aa:64:ad:70:
b4:65:25:c4:90:0e:4b:1e:a5:82:3d:1a:f8:42:ce:39:03:58:
12:47:38:79:9c:5b:83:4e:44:e0:fc:53:90:2f:5d:5f:58:bd:
61:fc:a5:42:80:6e:79:07:d9:a3:a5:b7:cf:6b:d0:14:9d:5c:
06:17:f2:bd:4f:7d:4e:22:9e:32:bb:51:fb:41:40:60:5e:19:
85:17:4f:75:37:64:e2:a4:73:21:42:b6:d2:f6:4b:e4:c4:fe:
4a:99:e7:e5:ff:6f:1d:e7:9b:da:60:df:d0:a0:ad:5f:05:1a:
86:91:a3:4e:55:4c:79:a0:36:3f:df:38:4a:77:de:3e:a7:33:
50:b4:37:19:f1:cf:ca:b9:2d:ec:d2:4f:d6:2a:5f:fd:97:c8:
75:e7:b3:34:7c:20:de:a3:d4:3c:3e:d2:9a:6b:f8:12:c4:e2:
59:35:ea:54:29:93:44:e6:e7:00:37:39:c1:fb:a7:2d:f0:ce:
8c:64:43:ae:f0:2c:22:06:3d:05:f9:9f:8d:55:51:6a:b7:bc:
81:b4:6a:21:1d:a7:e1:60:78:dd:eb:27:32:79:26:e6:95:24:
44:c3:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:08 2025 by rpki-client