Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/3134332e3230382e36382e302f32322d3234203d3e203533303934.roa
File: 3134332e3230382e36382e302f32322d3234203d3e203533303934.roa (raw, json)
Hash identifier: FMYpqkqfofvIkO4QJta1kHZRMKYAr2XnWRiU1XovlbQ=
Subject key identifier: DB:70:95:65:E5:20:58:54:13:58:84:A4:FC:75:4F:A8:F4:E4:DE:64
Certificate issuer: /CN=CFE268146F94B25E5775F1EEA7547C0D76B04F44
Certificate serial: 0D0EB78B495EB0D413BBB36CDADDEE3913C6501D
Authority key identifier: CF:E2:68:14:6F:94:B2:5E:57:75:F1:EE:A7:54:7C:0D:76:B0:4F:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFE268146F94B25E5775F1EEA7547C0D76B04F44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/3134332e3230382e36382e302f32322d3234203d3e203533303934.roa
Signing time: Fri 05 Apr 2024 19:43:34 +0000
ROA not before: Fri 05 Apr 2024 19:38:34 +0000
ROA not after: Fri 04 Apr 2025 19:43:34 +0000
asID: 53094
IP address blocks: 143.208.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0e:b7:8b:49:5e:b0:d4:13:bb:b3:6c:da:dd:ee:39:13:c6:50:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE268146F94B25E5775F1EEA7547C0D76B04F44
Validity
Not Before: Apr 5 19:38:34 2024 GMT
Not After : Apr 4 19:43:34 2025 GMT
Subject: CN=DB709565E5205854135884A4FC754FA8F4E4DE64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:9c:b1:e0:03:55:91:be:eb:07:f3:aa:79:
e9:c7:4d:89:b5:36:e5:31:d9:8f:ae:2c:6a:f0:7c:
ff:e8:c7:88:6d:59:71:bf:b9:7d:fc:bf:6e:c0:33:
6f:4c:6c:d6:dc:e1:30:bf:2e:02:19:e9:31:40:eb:
51:62:23:f6:48:c7:f3:dc:45:83:4f:8c:fc:dc:5f:
2a:1d:f1:10:6e:5f:d0:47:2d:2e:17:46:da:0b:83:
99:77:52:8f:cb:15:b2:66:93:30:33:aa:07:b3:c4:
52:76:f8:44:57:49:ef:c8:b5:c5:13:17:10:46:54:
8d:2c:03:a4:93:e3:30:f7:da:72:5c:d4:39:62:df:
82:42:2a:64:2f:f8:52:75:f4:1e:c7:0a:ff:f4:87:
b0:32:da:3c:7e:e7:42:bd:73:5f:e1:7f:61:08:01:
9a:3f:a1:51:4a:12:be:b8:65:66:f2:9e:75:a5:0e:
e1:85:d8:67:15:e9:20:3a:e9:5c:77:77:81:c0:5a:
fc:44:f5:92:a2:0b:47:3a:fb:a6:54:05:b1:d2:f1:
41:d7:76:1e:56:1d:d9:b6:9d:4a:a0:60:55:28:e9:
4f:3a:0e:ed:c1:cb:15:1e:2d:49:dc:6b:07:06:35:
92:a0:c8:45:c3:21:d0:d5:b7:c0:51:ad:46:77:e1:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:70:95:65:E5:20:58:54:13:58:84:A4:FC:75:4F:A8:F4:E4:DE:64
X509v3 Authority Key Identifier:
keyid:CF:E2:68:14:6F:94:B2:5E:57:75:F1:EE:A7:54:7C:0D:76:B0:4F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/CFE268146F94B25E5775F1EEA7547C0D76B04F44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFE268146F94B25E5775F1EEA7547C0D76B04F44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/3134332e3230382e36382e302f32322d3234203d3e203533303934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.68.0/22
Signature Algorithm: sha256WithRSAEncryption
36:2f:a0:7a:aa:89:23:74:f0:93:76:6f:f8:4c:9f:3a:f5:1c:
93:df:13:51:b0:e0:7a:60:8c:18:2a:b0:88:4b:8f:a9:23:15:
b6:21:00:0d:e6:2d:d4:cb:60:22:30:e9:ee:f3:50:62:dc:32:
23:f2:dc:7c:97:97:e1:e4:b1:12:5a:5f:ee:5c:d3:d4:e6:45:
a7:2c:0c:76:e3:26:f2:0c:5b:8d:b9:4e:27:ac:72:48:e8:f6:
97:de:4d:47:c4:60:2d:96:bd:23:6b:ea:c9:93:2e:32:1c:5f:
87:c2:43:66:b4:d6:e8:bf:24:40:2f:43:5b:a7:ad:8f:30:29:
6b:c4:3b:73:76:3b:80:dd:d4:0e:0b:0b:28:eb:f0:f2:ea:f7:
b9:69:75:05:7e:5d:d4:65:b7:54:c3:0a:0e:01:8a:63:86:05:
bc:e1:62:c0:36:55:c6:6f:87:30:dc:5f:17:29:58:b6:0e:8d:
80:0a:1b:aa:c6:65:92:ab:ad:91:e9:39:80:55:7c:37:78:df:
15:1b:a2:47:39:ba:d6:04:71:cc:6d:19:c5:ab:c6:77:83:e3:
c5:02:d0:ff:fd:63:55:79:e8:f1:78:a5:fd:00:3d:7f:4d:c4:
99:f6:9d:78:d0:3c:85:31:da:62:26:0f:06:2a:3a:a8:8f:94:
16:81:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:30:21 2025 by rpki-client