Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e3139342e342e302f32322d3234203d3e203238353830.roa
File: 3136382e3139342e342e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier: CrDdQgPT2i31sJ9WzrW5CpulZrBP+3655I8YGVXTzwE=
Subject key identifier: 4F:60:07:EE:77:21:15:D4:EC:1F:D7:BA:95:99:20:24:43:FC:55:CA
Certificate issuer: /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial: 3C9B5B8E94B338D927A3910C57339989DCE3FCA1
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e3139342e342e302f32322d3234203d3e203238353830.roa
Signing time: Thu 19 Oct 2023 19:15:02 +0000
ROA not before: Thu 19 Oct 2023 19:10:02 +0000
ROA not after: Thu 17 Oct 2024 19:15:02 +0000
asID: 28580
IP address blocks: 168.194.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9b:5b:8e:94:b3:38:d9:27:a3:91:0c:57:33:99:89:dc:e3:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Validity
Not Before: Oct 19 19:10:02 2023 GMT
Not After : Oct 17 19:15:02 2024 GMT
Subject: CN=4F6007EE772115D4EC1FD7BA9599202443FC55CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:c4:71:8d:5d:d5:5a:ab:da:26:f5:28:f6:
60:b1:79:b3:6c:a3:ff:d6:ec:80:6e:ad:eb:4b:05:
a2:1b:6b:65:ae:4d:c4:ef:bc:13:99:23:99:02:dd:
e5:2f:e6:75:c9:52:b1:41:08:5e:14:eb:d0:9e:40:
5e:b9:9f:42:c2:a0:05:d7:5e:4f:15:bc:27:e3:2d:
08:82:75:fe:4e:c8:25:74:1a:b4:4c:5d:fb:e3:54:
f2:b4:e8:e3:58:28:9e:d7:8a:37:9b:b7:f9:bb:16:
b9:26:92:3d:a8:31:3c:1a:42:bd:8b:3c:3f:93:d3:
c0:66:50:fd:da:ce:01:dc:27:3a:cd:fa:5e:76:23:
ef:39:b4:f9:45:9c:8e:5b:ad:26:19:98:07:36:4a:
0b:a3:63:f1:7a:84:9e:b4:9b:68:6c:b9:d8:66:48:
7f:a0:42:07:43:4c:a9:73:33:20:1c:12:78:85:c3:
e6:c7:a7:0c:8b:db:b4:43:41:d0:7a:05:32:d9:87:
c3:58:9a:15:51:dc:3d:dd:a6:76:a5:39:bc:c0:49:
da:03:d8:b0:d5:1c:67:9e:f3:02:35:58:ee:b1:c3:
b1:74:1a:1c:15:0b:91:69:c6:cc:8c:89:9e:1d:b6:
d3:e0:ef:e3:72:03:24:0d:07:6f:bc:32:3e:8e:86:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:07:EE:77:21:15:D4:EC:1F:D7:BA:95:99:20:24:43:FC:55:CA
X509v3 Authority Key Identifier:
keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3136382e3139342e342e302f32322d3234203d3e203238353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.4.0/22
Signature Algorithm: sha256WithRSAEncryption
81:0e:33:ea:dd:29:84:02:e3:ad:09:a6:e3:b3:07:4d:98:fa:
4f:6f:2b:f2:60:ba:18:bf:c6:51:ad:0e:4a:f9:c3:33:39:59:
3e:60:1f:e0:40:fe:0c:96:47:cc:67:51:e0:cb:75:51:92:da:
1f:40:c8:b3:c1:82:02:f2:3f:96:91:73:30:b2:20:1a:07:eb:
0b:66:f6:bf:71:0c:57:d5:7f:9e:08:1c:fa:a2:67:8a:2c:d9:
10:a7:9c:90:3e:c5:c8:81:fa:f8:7c:64:17:73:00:b1:d8:6f:
ad:ad:18:b3:b3:65:31:d2:c3:38:53:1c:db:b1:7e:80:6a:03:
aa:d5:9c:d6:c2:06:ac:53:a6:ba:fb:72:4f:89:e8:39:45:4c:
8c:27:80:1a:2f:d7:07:43:5f:65:49:fd:ae:b3:00:93:fb:d2:
12:7d:d9:a0:e6:28:57:65:b0:c6:36:55:65:28:c1:56:ed:87:
8c:d3:ae:11:f9:93:f1:06:41:7d:66:7b:f2:f9:97:b9:f1:0c:
43:35:40:b8:d4:d7:04:76:41:d8:33:2a:93:17:df:5b:36:d1:
4b:73:72:e4:58:7e:87:a1:6c:54:29:08:d3:63:47:4a:b4:c2:
55:09:1d:b5:2e:5c:f1:a2:f4:b7:22:e5:87:3a:58:a0:27:aa:
8f:39:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:08:05 2025 by rpki-client