Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232342e302f32322d3232203d3e20323634313030.roa
File: 3136382e3132312e3232342e302f32322d3232203d3e20323634313030.roa (raw, json)
Hash identifier: MG06/2diylx3iqhZu8kO3H2Ur7PlQ24++lwRSskE3D8=
Subject key identifier: D7:8C:C5:E3:2B:57:30:43:DE:BE:05:C7:B1:40:A6:93:41:57:7E:CF
Certificate issuer: /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial: 137DA941FFDCD07BED29D90C165405A29134DD3F
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232342e302f32322d3232203d3e20323634313030.roa
Signing time: Mon 02 Dec 2024 12:09:09 +0000
ROA not before: Mon 02 Dec 2024 12:04:09 +0000
ROA not after: Mon 01 Dec 2025 12:09:09 +0000
asID: 264100
IP address blocks: 168.121.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7d:a9:41:ff:dc:d0:7b:ed:29:d9:0c:16:54:05:a2:91:34:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Validity
Not Before: Dec 2 12:04:09 2024 GMT
Not After : Dec 1 12:09:09 2025 GMT
Subject: CN=D78CC5E32B573043DEBE05C7B140A69341577ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:f0:4d:a4:97:48:18:28:c3:7c:81:be:79:
f1:68:9f:69:b6:b1:fb:7c:39:00:08:54:82:15:0b:
05:7d:1b:b8:e5:fc:ab:1a:2f:63:52:0c:c5:e9:b2:
11:0f:3d:84:d1:28:c3:26:6f:fe:a8:2a:27:94:d6:
9a:0e:4a:7e:1f:0d:e3:5a:af:40:23:ad:90:f1:f7:
dc:b3:40:76:b0:fa:b1:02:c4:87:27:16:7f:cd:88:
e8:fa:45:6d:3f:ef:ed:f0:fa:9d:8f:85:f2:45:b1:
09:3b:26:f3:42:87:96:33:fb:f9:ef:38:85:ec:5d:
59:e1:ff:34:43:82:33:5b:b1:0f:a8:10:0d:da:3f:
38:04:73:f1:bd:39:e6:c6:b7:18:6d:e8:c2:40:9f:
e9:d6:68:f8:c5:07:66:00:69:a4:1d:f4:e4:b7:b9:
ac:33:e8:44:1c:bc:68:93:8a:25:16:43:b9:41:a0:
cf:4d:73:2f:e9:b7:60:b1:b2:65:f2:37:f1:c1:86:
27:2d:bb:37:25:6d:ae:7a:c5:35:ec:29:db:be:1f:
fb:11:30:05:0d:94:68:ec:3b:44:4f:f7:09:51:ed:
a8:53:02:5c:89:82:5f:f2:86:89:2e:6f:db:54:3d:
f0:84:6e:e1:4d:5c:fe:f5:57:bb:e4:90:00:ac:f1:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:C5:E3:2B:57:30:43:DE:BE:05:C7:B1:40:A6:93:41:57:7E:CF
X509v3 Authority Key Identifier:
keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232342e302f32322d3232203d3e20323634313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.224.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:8a:3c:79:86:7c:11:11:fa:6a:34:6e:aa:3e:58:d6:2b:db:
b9:86:87:dd:b9:9e:bc:59:00:91:71:d3:b8:0e:99:75:41:24:
4d:12:52:d8:02:6a:46:97:05:f6:16:de:e3:3d:64:61:9e:5d:
e3:23:1e:17:12:bf:90:b1:1a:a6:35:6b:f5:f9:cc:27:03:fa:
f8:7c:82:04:90:7c:d8:73:9e:e9:fe:27:8a:22:0f:06:9f:b1:
4b:7d:3e:47:0f:fa:e9:81:d9:d1:45:1a:fe:70:ba:fc:83:c8:
91:4f:c8:90:b0:a7:33:69:50:35:19:86:b7:b3:bc:75:32:82:
4e:60:27:0c:bb:51:5b:52:4b:3c:83:55:a0:3b:46:0f:24:c3:
08:92:8f:45:3f:e4:52:c1:a1:f3:1f:dd:ea:f4:d6:c2:18:d8:
97:d6:bd:0e:fa:86:8c:8e:19:bf:3e:1b:96:a2:7a:cf:68:82:
d9:5b:6c:d1:89:d1:48:70:12:27:99:ae:fe:f0:0d:47:96:7e:
f8:ea:d4:89:91:fd:6c:fd:8c:42:ae:39:1a:9f:96:0d:57:cd:
21:ff:2e:9b:00:7a:6f:35:e3:72:c1:c3:9d:1b:ad:97:78:8b:
7f:a4:d6:b9:c1:e2:f5:88:f0:dc:a4:f0:58:b9:e4:66:b9:45:
03:83:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:19:03 2025 by rpki-client