Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232372e302f32342d3234203d3e20323634313030.roa
File: 3136382e3132312e3232372e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier: Dw6yqnsl1WUMrpTiD1s4azPDKnDhEfAfAf8iEUhoiAw=
Subject key identifier: 40:FB:2E:69:A8:09:85:BA:5C:79:D9:1F:74:7A:9D:FC:60:28:D2:7A
Certificate issuer: /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial: 559B14FE353F0943942762E9CD0DA6DA1D97B831
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232372e302f32342d3234203d3e20323634313030.roa
Signing time: Mon 02 Dec 2024 12:07:30 +0000
ROA not before: Mon 02 Dec 2024 12:02:30 +0000
ROA not after: Mon 01 Dec 2025 12:07:30 +0000
asID: 264100
IP address blocks: 168.121.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9b:14:fe:35:3f:09:43:94:27:62:e9:cd:0d:a6:da:1d:97:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Validity
Not Before: Dec 2 12:02:30 2024 GMT
Not After : Dec 1 12:07:30 2025 GMT
Subject: CN=40FB2E69A80985BA5C79D91F747A9DFC6028D27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:59:b5:10:ea:cd:88:b3:1e:5f:1e:4d:88:
43:d0:92:5f:f6:49:54:6e:04:38:85:b5:44:e3:54:
e4:05:e3:54:0d:f9:ba:f7:f0:20:90:7a:5d:14:7a:
8a:16:35:4d:b2:78:06:1a:a3:26:a4:76:58:85:3d:
45:3d:f0:75:e2:fa:78:ac:b3:c1:4d:f6:9f:93:5a:
dd:b3:78:e3:34:5b:74:ca:0c:a7:7c:b6:5e:ee:5c:
52:f9:bb:fa:3e:40:11:27:bd:9c:bb:6a:11:76:27:
1d:af:4b:9c:9f:f5:ab:90:dd:cf:4f:90:4e:d4:78:
0e:13:d1:ac:ef:4e:9d:9b:06:08:2c:87:c5:18:0e:
27:53:53:0b:1d:e2:5b:45:c8:5b:ba:07:85:17:9d:
aa:2b:10:ed:9f:ca:2b:e2:6e:2b:e9:9e:11:72:cb:
d4:f9:53:47:c6:60:bf:7b:a5:30:c0:b4:e6:00:5c:
52:d8:74:c8:d4:ee:1e:b7:c3:34:36:5b:1f:32:ad:
23:ac:2f:7b:63:88:87:48:d6:aa:f8:11:1b:5c:1a:
a5:3d:e2:2f:14:5c:c9:cf:5f:93:3b:c0:83:65:71:
7c:ab:f3:1f:98:62:3b:48:cd:5b:e6:61:38:f8:0f:
bb:d0:92:f5:28:a7:7c:00:3c:72:11:5c:c7:a7:cc:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:2E:69:A8:09:85:BA:5C:79:D9:1F:74:7A:9D:FC:60:28:D2:7A
X509v3 Authority Key Identifier:
keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3136382e3132312e3232372e302f32342d3234203d3e20323634313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.227.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7a:f3:bc:1d:58:d7:86:f4:94:46:d5:57:b7:9e:98:53:0e:
18:ea:c0:5a:2b:f3:bf:a6:07:a6:23:e1:08:48:46:03:88:74:
96:73:4b:76:d6:89:e6:8f:59:ab:92:de:d2:76:2b:8b:6e:11:
17:c6:0b:be:a4:80:1c:90:ec:4b:1e:de:db:86:da:c1:55:7d:
b5:af:9e:8e:dd:44:91:b6:55:16:c4:9f:a2:f3:94:9f:af:30:
9f:19:47:00:a2:54:6e:18:32:b9:d5:ab:46:56:a9:cf:f8:16:
f2:f6:f7:b3:4f:29:19:08:3b:d1:e5:1c:77:02:92:3e:98:ea:
71:d3:ed:b3:01:ab:1e:67:c8:9e:cb:26:22:8c:53:79:bf:b9:
25:31:d8:28:29:e2:14:ad:55:8f:fb:27:36:8a:e6:f4:fe:29:
53:5a:ff:c2:9b:aa:ca:30:88:03:7e:50:a6:07:76:07:d2:97:
62:37:23:68:8d:a1:f9:e7:ee:d3:76:e6:f0:47:49:ac:bb:31:
bc:c0:87:43:72:b8:d9:a9:dd:c4:1c:6a:5f:e4:b9:ad:f1:49:
68:71:4f:0c:77:c7:5e:b8:81:af:8a:db:62:e8:21:6c:f9:4d:
bb:d9:9e:ea:5a:32:b0:59:6f:34:c3:a7:04:fa:54:f0:50:40:
b5:59:2b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:54 2025 by rpki-client