Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: WFp5ouZqyi4R6iSNJYpOezrbdWX2n6wW5+yqBt7OJdw=
Subject key identifier: A3:DA:ED:3F:2B:01:E1:94:14:B5:E9:6F:62:68:5E:1F:80:48:D3:E5
Certificate issuer: /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial: 65EF3024C5AC5C30B408E04A2670E50E9BCC0913
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
Signing time: Tue 04 Mar 2025 06:48:42 +0000
ROA not before: Tue 04 Mar 2025 06:43:42 +0000
ROA not after: Tue 03 Mar 2026 06:48:42 +0000
asID: 265393
IP address blocks: 168.194.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ef:30:24:c5:ac:5c:30:b4:08:e0:4a:26:70:e5:0e:9b:cc:09:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Validity
Not Before: Mar 4 06:43:42 2025 GMT
Not After : Mar 3 06:48:42 2026 GMT
Subject: CN=A3DAED3F2B01E19414B5E96F62685E1F8048D3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:d2:16:31:37:92:5f:65:a8:4b:52:5d:7f:
5c:4f:7f:33:92:a9:6a:75:9b:13:c0:bc:90:0d:08:
bf:f4:6d:86:07:36:93:a2:62:44:3a:a6:8f:a2:0a:
6e:9a:61:8d:59:f6:c5:44:01:e9:28:b2:d4:8b:81:
e5:56:a2:14:58:2a:f7:a0:2e:0e:c1:33:30:53:1b:
91:55:2c:8f:80:45:5c:76:57:3f:cf:86:5b:17:14:
b9:e7:7e:79:88:65:2b:3f:53:b5:d3:67:5d:2b:61:
43:fc:4a:be:5b:f0:f2:27:02:8f:ef:a2:43:67:ea:
fd:53:34:d4:06:43:04:e6:bc:83:78:6e:1a:db:0f:
43:73:3b:91:33:15:54:00:09:f1:da:51:f6:01:f0:
c1:18:03:0b:7c:3b:e8:b0:e8:7a:23:41:9a:ed:58:
48:b6:07:7d:2c:1c:27:d5:73:de:e8:f2:d6:48:81:
6a:05:b6:b7:f2:e0:2b:39:3c:a8:6b:19:6e:54:0f:
9c:a6:34:6a:ea:82:a5:53:be:fd:de:24:6b:24:89:
26:85:aa:1e:60:fd:78:b5:2c:4e:d8:38:72:95:a5:
57:1e:bf:6f:83:cc:e5:77:54:72:ab:ce:15:9b:a7:
34:32:c2:9d:5e:1c:c8:3f:d7:76:5d:40:71:34:88:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:ED:3F:2B:01:E1:94:14:B5:E9:6F:62:68:5E:1F:80:48:D3:E5
X509v3 Authority Key Identifier:
keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.167.0/24
Signature Algorithm: sha256WithRSAEncryption
13:55:8d:85:d6:2d:02:75:f0:04:f5:b5:36:8e:9f:47:ca:c9:
9d:dc:c6:a8:75:c0:5d:40:9e:f6:9f:65:2c:c9:d6:a8:a6:10:
f2:45:9d:a4:20:53:db:50:4a:c4:ed:99:22:87:ff:ba:e0:58:
62:5d:58:90:a2:53:40:fe:f6:d9:fb:71:17:e0:37:67:79:e1:
97:d6:90:4b:a5:a4:32:50:58:d2:25:c0:42:39:69:93:e0:58:
e1:8c:1c:8c:39:15:ec:8e:21:04:2d:24:b4:7c:64:2e:91:0f:
4c:b4:08:af:61:3d:52:98:c1:2f:74:91:43:f6:fc:31:08:77:
1d:30:b9:0d:66:ae:fb:20:e7:72:09:ab:a6:67:9a:16:b2:ca:
68:db:5c:3c:df:d2:e8:e2:56:5a:23:38:35:b9:38:6d:7c:cb:
ea:d9:b5:ed:ed:e3:ba:fa:51:5f:f7:45:57:da:32:14:11:1a:
06:0c:c8:b1:ec:2c:e0:8b:d5:60:b2:44:9a:60:aa:d0:33:c7:
60:fc:87:e3:a5:bb:16:aa:fb:e6:fa:ef:eb:af:61:bf:fc:e7:
54:12:fa:8a:72:69:9c:de:9f:8c:fa:05:c8:1c:c5:6d:3c:d2:
47:e6:64:28:be:14:09:b1:8e:b7:b9:56:63:b5:f2:bc:b0:a3:
e3:71:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:24:34 2025 by rpki-client