Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
File: 3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa (raw, json)
Hash identifier: ho+2stj1+2//bBiLA82EQ15fMhZKj+ZV+8pgiUfd5lQ=
Subject key identifier: B8:AE:BF:EA:96:32:5F:DA:C2:FE:E5:E9:2D:7A:6D:A6:4D:DC:13:58
Certificate issuer: /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial: 15B28286389A3C5D8C279A9833C11225936A212C
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
Signing time: Fri 07 Mar 2025 14:41:02 +0000
ROA not before: Fri 07 Mar 2025 14:36:02 +0000
ROA not after: Fri 06 Mar 2026 14:41:02 +0000
asID: 265485
IP address blocks: 168.197.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b2:82:86:38:9a:3c:5d:8c:27:9a:98:33:c1:12:25:93:6a:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Validity
Not Before: Mar 7 14:36:02 2025 GMT
Not After : Mar 6 14:41:02 2026 GMT
Subject: CN=B8AEBFEA96325FDAC2FEE5E92D7A6DA64DDC1358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:ae:b0:94:55:c1:cb:40:1e:10:8d:0a:4c:
b8:48:85:e4:8b:98:bd:a3:35:64:69:1e:b0:7e:ea:
77:3b:9f:0c:c0:71:e5:fd:2e:92:10:02:d1:52:63:
da:2c:6d:ab:61:a7:3f:c3:1f:db:69:c5:a0:19:10:
11:2a:46:f7:7c:26:35:8a:fb:c1:4c:24:81:dc:f7:
9f:d6:38:3c:26:af:df:fe:48:73:80:cf:32:95:d1:
ae:b6:65:bb:be:a2:98:e7:23:47:9d:2e:4d:53:62:
75:d1:a7:38:d4:f5:37:22:db:8e:c7:f9:af:2e:4c:
c2:6a:9d:d3:26:c6:a1:5b:3d:dc:3f:b7:82:83:18:
2b:da:8d:64:56:a8:b1:c8:e0:dc:31:36:7e:40:f2:
f4:d6:de:df:d3:c3:53:c5:cf:dd:37:51:44:19:fa:
f6:52:d9:01:f2:6c:0f:76:c7:0c:71:3f:cd:5b:de:
3f:8a:f1:2c:4a:f2:62:d2:1c:b1:72:59:96:41:f2:
6a:58:2a:f0:f1:0f:16:da:41:96:15:86:7a:b9:a6:
a5:56:5e:4f:f3:a4:44:94:ef:f8:77:ab:3d:10:43:
bd:6d:39:ef:72:ca:da:7a:fa:b0:49:33:7d:49:09:
f9:96:ae:b0:cb:c7:90:2a:6f:8f:e5:99:32:55:01:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:BF:EA:96:32:5F:DA:C2:FE:E5:E9:2D:7A:6D:A6:4D:DC:13:58
X509v3 Authority Key Identifier:
keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32322d3232203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:67:59:9e:96:d4:8a:93:60:04:a2:00:3e:69:7d:b5:56:5e:
c6:f9:1d:8f:7c:97:14:ca:ef:31:f0:00:85:83:54:0d:fa:fa:
80:e0:a2:3e:53:fa:81:13:ca:41:42:66:02:00:74:85:28:54:
87:8e:f5:57:59:b9:01:a1:3b:7e:3b:9d:c2:5a:56:5f:45:bd:
05:f6:e6:31:39:e1:ce:1a:e0:8d:b6:16:b8:c7:35:44:b2:33:
b8:6c:d0:56:01:50:58:24:1f:f3:ff:9e:a3:55:8a:e1:28:85:
e4:bb:f5:18:67:91:68:58:a5:4f:48:e1:de:08:73:79:c8:96:
b0:b5:99:61:0c:e3:87:f2:0f:d2:df:85:94:ca:e7:14:df:ec:
61:e0:da:cb:0e:43:5e:e0:17:68:8e:15:81:8c:1e:81:b6:c7:
95:02:61:da:aa:8d:32:81:4f:72:fa:af:29:2b:39:32:79:77:
03:2c:06:a4:15:d6:1a:b9:67:2d:b8:0d:6c:72:15:ee:b0:68:
86:5d:c5:9b:47:cc:8f:45:45:9c:4f:38:5b:34:52:2e:23:35:
b3:9d:6b:48:fd:46:1e:db:76:b6:67:aa:66:b4:e6:19:36:9a:
3f:f9:90:2f:4b:37:08:08:5a:c8:70:df:a8:fc:76:d2:11:67:
c9:73:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:28:43 2025 by rpki-client