Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa
File: 3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier: kC4ohzPIFCKYTXrPl6c3v01MljKO2fvgrBbVa7PnLV0=
Subject key identifier: 9A:64:62:2F:4B:3E:FF:C7:BA:BD:A2:AD:00:19:D3:B2:5F:B3:75:96
Certificate issuer: /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial: 4F76DE554CAA8EB79F0460A7C72617634F935FF8
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa
Signing time: Fri 07 Mar 2025 14:41:01 +0000
ROA not before: Fri 07 Mar 2025 14:36:01 +0000
ROA not after: Fri 06 Mar 2026 14:41:01 +0000
asID: 265485
IP address blocks: 168.197.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:76:de:55:4c:aa:8e:b7:9f:04:60:a7:c7:26:17:63:4f:93:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Validity
Not Before: Mar 7 14:36:01 2025 GMT
Not After : Mar 6 14:41:01 2026 GMT
Subject: CN=9A64622F4B3EFFC7BABDA2AD0019D3B25FB37596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:c1:90:24:98:72:2c:45:3f:81:cb:11:c8:
2a:42:7f:7c:67:3c:1e:56:95:cc:1a:8f:51:3b:4c:
64:8d:40:6a:e2:e4:4b:e5:17:96:c9:32:06:c3:09:
73:53:f8:5e:25:63:51:d9:c1:82:c1:ba:13:23:9c:
5a:a9:19:02:cb:45:26:b1:36:c1:8f:65:fb:43:97:
14:20:30:12:ee:3f:c5:3c:0e:fd:31:84:a6:20:f0:
0f:af:25:d8:6b:96:b3:e3:64:39:79:5a:92:ec:98:
13:56:80:80:32:bc:74:1b:b9:08:b0:3c:08:0f:3b:
cd:29:44:55:f8:c9:21:6c:e2:9b:0e:82:35:66:62:
d0:5a:41:cd:5a:86:a4:cb:fe:38:a7:2d:b4:88:c2:
35:d8:6a:fc:db:e4:4a:31:1c:f1:17:32:88:88:ea:
f4:3b:12:51:9d:81:22:dd:9f:3c:e1:b1:a5:1f:f6:
eb:84:37:03:fc:5e:64:b8:92:4d:1c:58:2a:1e:0b:
54:1e:48:48:85:80:18:0a:e5:93:39:ff:27:d7:59:
b0:33:5d:49:7d:a8:4a:7e:87:af:28:31:7a:dc:11:
61:68:09:d9:95:3f:99:f8:5d:28:36:8b:3f:fb:2c:
1a:fc:e9:0b:76:48:a6:b8:b1:48:30:79:d5:3b:ed:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:62:2F:4B:3E:FF:C7:BA:BD:A2:AD:00:19:D3:B2:5F:B3:75:96
X509v3 Authority Key Identifier:
keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32342d3234203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.158.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:fc:f5:0c:07:93:db:b4:74:2e:49:17:31:dc:00:85:87:49:
27:22:a8:86:47:ff:58:ad:da:fc:7e:28:0e:76:99:ad:af:f4:
0a:a5:7d:43:a0:ed:f3:35:85:e3:5e:b6:b2:fe:fa:81:c0:a3:
c5:58:3e:1b:c2:56:69:0b:97:db:3d:4f:b3:22:6e:f0:80:48:
ba:12:6a:8c:e9:33:97:7a:17:ee:89:48:ea:07:17:08:eb:22:
bd:5e:75:a2:66:af:16:d8:f1:79:8a:1f:8e:14:31:d6:37:43:
f7:2a:56:9f:ff:4a:e9:ae:52:73:78:33:9b:92:0a:fe:6b:b7:
ac:b3:d6:da:22:d3:71:f9:19:01:e4:c2:6d:eb:f4:24:80:42:
1c:06:ea:51:08:0c:b6:4f:3c:c3:8a:ef:10:d8:64:e0:ea:32:
f6:a1:8d:22:a9:ea:02:cd:dd:85:3f:94:9d:a9:d2:36:c8:0f:
1c:1f:7f:e5:b8:c5:50:a0:b8:49:87:3e:e8:89:3d:d3:ff:72:
b0:59:26:61:90:23:cd:dd:5f:dc:fd:91:39:a2:30:d6:21:7e:
dd:ac:0b:be:92:99:eb:31:b1:f6:dc:b1:92:af:1a:0f:d2:c4:
f6:81:48:77:13:32:26:3e:30:35:c4:09:d7:87:22:ef:49:44:
4f:4d:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:56:35 2025 by rpki-client