Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
File: 3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier: iMXPdJz/MKHCR1LlWHrwyT7SWpE1mySC2+OlBFwUNTY=
Subject key identifier: D4:F6:87:5F:ED:1A:8A:0A:8D:26:AE:A6:5A:A6:31:B9:F5:34:0C:12
Certificate issuer: /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial: 18880DD839311B62C95846F7DB3779F9DE37268C
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
Signing time: Tue 04 Mar 2025 06:47:13 +0000
ROA not before: Tue 04 Mar 2025 06:42:13 +0000
ROA not after: Tue 03 Mar 2026 06:47:13 +0000
asID: 265393
IP address blocks: 168.194.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:88:0d:d8:39:31:1b:62:c9:58:46:f7:db:37:79:f9:de:37:26:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Validity
Not Before: Mar 4 06:42:13 2025 GMT
Not After : Mar 3 06:47:13 2026 GMT
Subject: CN=D4F6875FED1A8A0A8D26AEA65AA631B9F5340C12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:f1:56:e2:63:6c:8a:5f:18:cd:ca:eb:f9:
55:13:e3:e1:1d:0e:88:12:9d:12:7f:a5:8c:8d:f3:
15:9e:b8:4f:fe:06:b3:e8:e3:1e:66:40:5f:2f:1c:
26:bb:25:42:8f:f8:c5:f5:bd:db:1d:70:8b:f2:39:
5e:ac:f7:72:72:a8:92:4e:29:36:d9:8c:b1:48:c1:
0b:21:28:2c:e4:8a:cb:ff:32:48:d3:aa:d4:a9:9c:
b5:d3:c7:0b:48:25:a8:fa:f7:23:cc:12:60:21:99:
11:ef:2d:1c:4c:6d:cf:86:f6:0f:8d:30:85:6c:b3:
99:5a:fd:3b:e1:bd:20:fe:25:14:d5:12:9b:6b:a7:
b6:c9:53:f2:38:13:f5:f6:92:6f:4a:e8:f7:12:b9:
0e:03:ef:e4:cf:b1:8b:e0:cc:3d:8a:66:f6:b4:9b:
15:cc:0b:d3:43:bd:8e:e1:2e:1a:84:cf:8b:3e:f7:
e1:4d:fa:c4:ca:ae:ca:ca:e2:5f:be:fc:a8:ca:18:
59:46:52:a7:19:e4:a9:64:68:98:3a:c9:81:ab:45:
e6:ae:59:60:17:12:b5:49:c1:93:fb:1b:e8:1b:82:
a0:5c:0f:47:b0:a3:e6:c5:c2:b3:67:16:d5:59:2a:
12:52:80:e8:ff:bb:2f:a7:50:27:c4:b7:a7:3f:7d:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F6:87:5F:ED:1A:8A:0A:8D:26:AE:A6:5A:A6:31:B9:F5:34:0C:12
X509v3 Authority Key Identifier:
keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.166.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:bb:0c:28:d9:b1:71:5a:29:b7:d9:b6:db:83:8b:12:8f:4e:
c3:5d:0c:30:6e:1e:44:c6:6d:51:cc:af:44:5f:54:2d:08:95:
02:21:2a:ec:e6:ad:d6:58:23:c5:0a:42:5c:11:b0:a9:97:ae:
c9:a6:15:7c:82:c5:a9:0e:d5:20:2e:33:4e:69:21:14:80:4c:
5e:92:32:6f:5b:38:9d:50:6d:3c:6a:b5:e1:db:96:f7:65:96:
f8:cc:76:1f:bb:b0:0d:68:d8:ca:f7:f1:f2:ed:79:de:4a:04:
d0:ea:c0:62:06:e4:42:0d:39:a6:c5:bf:9a:42:53:49:d4:79:
d5:99:72:a4:ba:61:d2:5b:17:e4:2b:7a:7d:e6:ff:62:bf:ee:
72:82:31:d8:cf:29:7a:ba:8c:72:ad:cd:6e:13:08:5d:65:85:
bc:41:af:78:87:74:40:7f:bc:b4:40:2a:54:45:12:04:74:63:
68:1c:95:df:6d:8f:96:7f:ad:5b:ae:9f:16:46:14:0b:33:95:
d1:a3:67:db:36:b2:71:3c:ea:87:a0:a4:80:ae:c8:62:3f:ef:
bd:a3:86:50:30:a4:38:b5:78:da:98:7f:6b:c6:6c:b3:ce:6f:
f1:1e:44:9b:ac:9d:06:f2:e8:d3:6a:9c:7c:28:c8:f6:4a:dc:
bd:d0:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:24:38 2025 by rpki-client