Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
File: 3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier: +WC8mavVfsopLMmc29ZgQzU+IStVJ5nDKk58LUr4v9s=
Subject key identifier: 12:E6:46:16:F2:A4:C4:B2:F1:4D:DB:28:41:D8:C0:4F:E4:F4:CC:77
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 7106D62E33BF69F750BC4289EBE7F28834582AFC
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
Signing time: Fri 23 Feb 2024 23:40:59 +0000
ROA not before: Fri 23 Feb 2024 23:35:59 +0000
ROA not after: Fri 21 Feb 2025 23:40:59 +0000
asID: 265485
IP address blocks: 168.197.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:06:d6:2e:33:bf:69:f7:50:bc:42:89:eb:e7:f2:88:34:58:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Feb 23 23:35:59 2024 GMT
Not After : Feb 21 23:40:59 2025 GMT
Subject: CN=12E64616F2A4C4B2F14DDB2841D8C04FE4F4CC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:9e:41:88:62:4c:56:cf:e5:e5:98:29:d4:
ec:8f:35:b5:41:90:35:3a:1e:64:54:46:73:82:dd:
03:53:11:4c:fa:86:f6:73:ea:65:d4:76:40:18:eb:
13:4a:d4:72:b7:43:76:4c:07:7d:6b:42:e7:6d:4a:
a4:da:57:23:44:d4:4a:b1:6b:a9:7b:0f:62:4e:38:
6b:de:e1:3d:3d:30:11:41:75:4e:78:3c:5a:fb:37:
16:91:19:6e:c8:eb:a5:9b:d6:88:42:76:82:fb:58:
a8:59:f7:bb:8e:b7:0e:5b:d8:35:82:8c:4f:d3:2c:
73:2b:cd:f6:3d:36:e7:48:a7:26:2f:1d:e5:2b:2b:
87:19:80:fc:cd:5c:bd:24:50:2b:38:85:fb:41:ca:
28:cd:c3:ba:8c:e8:c5:ca:b4:1d:6c:0a:cc:be:9d:
1b:ba:de:b2:6e:7f:89:d2:e6:36:bf:08:cc:89:b1:
45:63:da:52:35:0d:9b:05:f9:15:06:5d:7f:49:2e:
d2:67:d5:a2:ed:7b:3e:5a:2b:78:81:da:44:25:3b:
80:35:ac:e1:52:93:26:69:66:a0:b9:ee:45:7c:1f:
d7:9d:0a:c1:d3:79:22:a2:4e:ad:90:94:a5:18:2a:
2b:c8:0f:4e:5f:70:0f:91:e8:15:a4:f2:f0:af:a2:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:46:16:F2:A4:C4:B2:F1:4D:DB:28:41:D8:C0:4F:E4:F4:CC:77
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:95:8a:3f:9b:e3:a7:ce:b0:93:9a:50:61:46:25:20:3c:fd:
46:96:2d:83:1a:3e:72:91:a3:39:a9:4c:25:2a:ab:6e:03:ac:
4c:d4:02:02:d1:80:25:d1:7d:74:92:00:3c:c9:d7:f8:4b:ad:
d6:2f:5b:8f:fb:ef:37:31:6a:03:40:d6:c1:4d:51:0a:8b:8a:
74:cb:37:f1:9a:1d:fe:92:3a:55:9e:c6:e2:0e:24:2c:0d:bb:
2a:1c:09:cd:11:ec:60:ac:3e:05:7d:bd:ab:0b:0f:3b:28:f6:
16:47:ca:c9:97:77:ab:31:d9:ee:7c:4a:d1:e6:18:4d:81:98:
9f:c9:f6:3b:55:c0:50:45:8b:c2:2a:0a:94:2b:d1:02:68:8a:
87:a8:9d:ab:9f:be:60:81:64:9c:81:76:68:c3:38:fd:c2:99:
8d:51:e9:34:51:31:43:ee:bf:c5:4d:a1:c3:ca:37:9c:10:16:
de:12:23:ad:13:4e:bd:da:72:0c:d9:f5:24:e7:60:dd:62:3c:
e8:be:49:d5:56:60:f1:4a:aa:bd:0d:6b:98:69:27:57:c8:58:
d0:4e:13:74:e8:ab:70:73:9a:30:59:d1:71:c4:c1:89:2e:30:
43:47:91:e2:26:23:23:c6:17:5a:68:46:19:ea:a6:78:ff:de:
76:b0:c3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:30 2025 by rpki-client