Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
File: 3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (raw, json)
Hash identifier: vF+oEJ+H4K1vmo/5RnO7umBmrHHN0947zthyPpb6x0U=
Subject key identifier: 47:CF:6F:76:6B:34:70:1D:F7:44:CF:09:47:ED:CC:4A:4B:F8:51:5D
Certificate issuer: /CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
Certificate serial: 12169C89E23B097647396C53CE087962D5A3A93F
Authority key identifier: 9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
Signing time: Wed 12 Mar 2025 16:28:24 +0000
ROA not before: Wed 12 Mar 2025 16:23:24 +0000
ROA not after: Wed 11 Mar 2026 16:28:24 +0000
asID: 262469
IP address blocks: 168.196.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:16:9c:89:e2:3b:09:76:47:39:6c:53:ce:08:79:62:d5:a3:a9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
Validity
Not Before: Mar 12 16:23:24 2025 GMT
Not After : Mar 11 16:28:24 2026 GMT
Subject: CN=47CF6F766B34701DF744CF0947EDCC4A4BF8515D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:2e:5c:9a:23:5a:b6:5e:d3:8f:0c:aa:d6:
d4:57:aa:ab:d2:c2:23:d8:f0:a9:36:84:21:d5:65:
00:20:23:66:c7:c4:0b:9c:56:15:70:d9:da:30:2b:
21:58:ae:e7:1e:05:b6:cf:64:af:53:2a:ef:8a:f8:
f3:a1:c2:0f:54:8f:a0:a0:e9:f3:1b:48:a5:87:63:
fe:c9:8c:6a:f0:28:a8:70:c5:95:49:ab:d1:49:79:
20:5b:5d:ff:7c:1e:4b:fe:63:4d:50:a0:12:36:05:
26:1a:44:0a:6a:7c:d1:3b:a8:42:c9:91:db:4f:58:
4b:35:d6:7e:84:00:a0:a0:58:53:e1:31:f8:a1:48:
94:3f:dc:c6:7b:04:d0:2e:0d:72:e4:a4:61:f5:68:
26:3b:37:74:c4:b5:f5:72:ae:5f:66:c1:3c:bf:fb:
37:83:b7:3e:12:a4:63:15:19:d3:37:5f:f5:ea:09:
13:01:fa:ed:7b:e7:7b:c5:a2:e8:b0:d6:30:a4:71:
da:7b:1b:f3:30:db:c5:bf:4f:4a:d4:28:bb:cf:d0:
df:21:92:e6:98:13:62:1e:6f:a2:2b:84:5d:40:30:
a4:0f:92:63:2b:1a:4c:4f:4e:3e:ff:8b:9c:90:41:
be:7d:14:ed:8f:04:1a:73:4d:f0:6a:5b:36:02:20:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CF:6F:76:6B:34:70:1D:F7:44:CF:09:47:ED:CC:4A:4B:F8:51:5D
X509v3 Authority Key Identifier:
keyid:9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.172.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ff:c7:c5:63:49:60:35:aa:0f:6f:99:00:38:b5:83:d4:09:
2b:e4:ea:6e:58:e3:47:b0:c6:cb:68:90:86:96:8f:8c:4e:32:
b5:b1:20:b7:43:0e:07:4e:66:85:3f:f3:f6:fa:7b:f7:a6:13:
ef:8f:59:7b:22:8f:f2:37:a2:7b:54:70:3d:61:2e:77:1f:da:
2a:ef:1b:ba:ed:32:d7:b0:fc:58:97:d7:57:26:fd:70:40:ca:
ef:03:7f:a6:5e:ef:1a:94:e1:93:5b:41:b1:4f:6a:01:3c:ee:
2e:97:aa:f0:14:60:9d:f0:43:d8:63:cd:ba:09:2d:d0:b4:00:
c0:d4:3d:b1:91:b5:88:d4:f6:05:d7:4a:cf:33:aa:7c:0f:da:
49:c4:a3:10:8b:07:20:0c:7d:62:25:00:ad:1a:ae:87:d5:bb:
11:df:dc:8b:fd:2a:ca:e7:22:9e:27:60:f4:08:c5:47:61:3a:
0b:f0:d7:b6:76:a9:cb:77:a7:15:f3:fd:28:8f:c1:f6:95:7d:
94:40:d9:ac:b7:74:ed:73:a4:c6:cc:3c:38:e5:d7:7c:2a:1d:
48:93:98:45:4f:a5:97:f4:0d:3c:48:7d:fd:82:11:81:76:09:
d4:5c:97:31:b4:3e:08:0d:47:28:0e:39:a9:8b:1d:63:3d:ec:
ae:bb:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:20:19 2025 by rpki-client