Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: HL1INbEJzD+h7/oHS8M2SYo5XiUE4XBWsRI8Wp9Ur7E=
Subject key identifier: A7:31:3B:93:3A:D8:9D:71:8A:D2:0F:D2:82:88:21:AD:BE:4F:C6:22
Certificate issuer: /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial: 4A4FB4FDF637F5AB1B1B928E9AF85AD2A80E9CF7
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
Signing time: Tue 04 Mar 2025 06:48:19 +0000
ROA not before: Tue 04 Mar 2025 06:43:19 +0000
ROA not after: Tue 03 Mar 2026 06:48:19 +0000
asID: 265393
IP address blocks: 168.194.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4f:b4:fd:f6:37:f5:ab:1b:1b:92:8e:9a:f8:5a:d2:a8:0e:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Validity
Not Before: Mar 4 06:43:19 2025 GMT
Not After : Mar 3 06:48:19 2026 GMT
Subject: CN=A7313B933AD89D718AD20FD2828821ADBE4FC622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:e6:d8:7e:89:3e:ef:a3:03:39:7a:a6:3e:
07:a0:07:d2:be:a1:2a:02:4e:07:a1:46:40:af:4b:
ad:07:20:d7:e8:6d:e5:48:6d:3d:0e:96:7b:73:0b:
83:71:06:6e:16:71:d8:8e:fb:e8:53:29:d2:a5:35:
7d:02:49:62:2e:c9:6b:fc:c3:ed:9f:5a:41:c9:8a:
85:c0:04:45:4a:af:fe:d6:09:a8:b8:e3:f3:04:c4:
63:ed:ad:25:75:e5:60:c3:d7:bc:6b:0e:0e:97:2f:
74:ef:13:e7:f7:c7:ce:62:07:c6:23:55:2c:e7:c5:
d1:31:57:d9:47:bb:59:12:8a:85:2c:6e:63:bd:0f:
e4:2b:c0:97:6b:03:45:a7:4f:39:14:13:d3:23:eb:
5d:b4:c3:c9:2d:a0:22:93:dc:c2:76:e2:5d:92:44:
33:83:18:07:6d:1d:00:6c:21:ea:1d:a8:0a:41:73:
3d:25:1a:a9:c6:7c:7c:2c:45:48:a0:be:79:c8:d1:
64:da:bf:75:11:82:5d:2e:94:d6:19:e8:f1:cc:28:
58:79:70:c4:4e:06:50:21:26:8c:0b:c4:c6:69:e4:
e0:2d:23:27:42:cd:b8:3c:19:5b:cd:f5:b5:79:3a:
81:70:b5:ef:68:42:37:59:3d:57:1c:82:10:03:92:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:3B:93:3A:D8:9D:71:8A:D2:0F:D2:82:88:21:AD:BE:4F:C6:22
X509v3 Authority Key Identifier:
keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b6:dd:52:30:8b:91:dc:53:a4:f2:8e:75:32:1c:ec:d9:08:
6d:c1:5c:db:ff:4e:0d:a9:fb:ec:e7:bd:0f:6b:8d:65:4d:84:
54:f8:10:91:a9:1c:08:0e:14:1f:ba:f2:c0:a4:6a:e6:bc:76:
2a:a7:78:da:76:77:66:7d:44:1c:60:57:78:75:02:ab:1a:2a:
4f:b2:79:a3:06:25:62:ea:ef:15:1f:c4:e9:f7:93:ae:63:85:
c2:5f:13:49:bc:fb:94:30:75:a7:3e:22:f0:c8:fa:38:9a:ab:
16:3c:0b:b1:b2:53:54:74:7e:94:6d:74:c2:ae:9a:3a:2f:88:
30:be:4f:ad:fa:10:0a:85:f6:b1:9d:ae:3c:b2:19:65:d2:2c:
1a:48:a5:64:61:df:7a:f4:f4:6e:ce:59:97:38:f1:a2:ab:e3:
6b:1f:97:01:72:bb:d5:a0:fa:17:b8:42:f4:d9:e0:10:d4:da:
d1:bb:47:c0:98:61:50:a4:4e:11:1c:8a:29:2c:de:c7:17:9f:
06:3c:c2:3b:e5:45:f9:52:4b:81:d3:62:78:0d:22:f0:4a:5f:
26:d6:26:6c:d8:5f:fa:79:c7:71:c3:25:a5:62:ae:e5:c5:4b:
f3:a9:9d:d4:c5:e4:e6:6a:eb:17:65:39:31:a3:d1:66:4b:24:
12:41:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:27:04 2025 by rpki-client