Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
File: 3136382e3232382e34302e302f32322d3332203d3e203631373531.roa (raw, json)
Hash identifier: efmPVoVspdg5rQLOAZMfkpjSOnS1ZFS+4ItllO7dqLE=
Subject key identifier: FF:DD:CB:FB:9E:11:2E:58:90:7C:76:FC:9C:DB:0E:50:B7:0C:3C:22
Certificate issuer: /CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
Certificate serial: 6EC8C52FCBA39357C64A0170954D92F4C2E6EDC7
Authority key identifier: 1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
Signing time: Tue 11 Feb 2025 18:13:22 +0000
ROA not before: Tue 11 Feb 2025 18:08:22 +0000
ROA not after: Tue 10 Feb 2026 18:13:22 +0000
asID: 61751
IP address blocks: 168.228.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c8:c5:2f:cb:a3:93:57:c6:4a:01:70:95:4d:92:f4:c2:e6:ed:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
Validity
Not Before: Feb 11 18:08:22 2025 GMT
Not After : Feb 10 18:13:22 2026 GMT
Subject: CN=FFDDCBFB9E112E58907C76FC9CDB0E50B70C3C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:e1:e6:7a:ea:54:33:d9:3e:29:94:fe:64:
08:56:5f:b2:b6:08:54:f4:c1:7b:31:33:3a:ae:08:
dc:bd:0a:14:22:c5:8c:4d:a4:a6:07:f1:19:74:47:
0b:13:e0:3a:49:af:38:fd:ae:22:26:66:d4:bb:f2:
b8:81:e9:c2:2f:e9:d1:08:e9:dd:46:10:3a:13:23:
c8:7b:3d:13:2a:8a:f2:29:6f:5e:e6:dc:e7:21:c6:
07:07:6f:86:3f:68:7a:c9:d5:3e:b0:a9:68:76:ce:
3f:1b:d8:1e:c0:24:45:5b:1b:b3:a2:49:2e:cd:8f:
82:b5:47:dd:97:ad:be:18:ac:79:20:ea:7f:31:31:
4f:4d:95:69:10:bb:49:4f:74:43:67:2c:8d:25:8d:
b2:c7:b3:28:9e:d9:cd:8b:3f:1b:2c:71:a2:d6:5f:
37:ff:81:04:aa:31:11:f3:13:a1:41:07:6b:ff:2a:
ad:a6:ec:f1:c1:f5:d0:0a:e4:6a:01:e2:32:ae:9c:
17:61:93:f8:06:35:3d:6c:3a:90:21:f9:4d:df:f4:
3c:f8:3f:c6:6c:c3:d9:1f:0a:2f:4d:9a:4f:60:13:
b1:42:5d:24:27:9e:5c:5d:5c:9c:07:21:9f:e0:7d:
2a:99:44:04:cf:00:36:31:56:13:85:96:15:2c:80:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:CB:FB:9E:11:2E:58:90:7C:76:FC:9C:DB:0E:50:B7:0C:3C:22
X509v3 Authority Key Identifier:
keyid:1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:2b:a3:11:8e:bd:99:e9:66:c2:2e:2a:09:2a:8d:13:84:27:
79:b1:2c:54:7b:91:42:15:6e:da:f7:ac:ad:22:79:74:29:52:
79:e4:e5:63:74:e5:75:0d:8d:fb:5a:61:52:13:86:29:11:ee:
1a:8e:89:0c:57:ba:76:e7:e3:15:49:a1:47:e2:f1:52:09:c2:
71:fb:dd:20:33:11:f4:ee:c1:42:aa:f5:ff:93:e1:01:8f:6d:
72:7f:61:08:25:d9:5c:f3:52:59:bd:4f:6e:f2:67:d1:03:ce:
ad:00:34:bd:78:81:36:2e:74:98:f1:23:65:3d:3a:22:43:ea:
6c:94:25:ed:60:75:54:29:79:67:0c:82:22:e9:23:a0:0a:81:
7a:bb:11:5c:6e:93:6a:17:fe:d0:6d:86:a2:42:c3:bb:51:7d:
ce:eb:89:c0:73:16:be:d0:87:b6:ba:c7:ff:b6:3d:43:c3:99:
98:ee:90:c8:5e:34:de:75:2a:1d:0c:4e:33:84:13:c3:e5:12:
a9:61:57:4d:da:21:25:f5:be:31:b2:a8:da:72:cf:e8:31:6c:
39:60:fc:84:15:aa:b4:e5:1e:a6:d3:61:46:0e:c6:9b:98:fa:
b3:ff:3f:e5:6e:8a:26:71:1a:7a:7e:2f:da:a9:ca:cb:40:3f:
5a:50:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:58:57 2025 by rpki-client