Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
File: 3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier: TQCIt1l7wznP8o8ebsk5sRXBiDr+tTvOYbzXgimWK3E=
Subject key identifier: E1:C8:DB:7F:06:D9:F6:3A:45:B7:4E:66:1D:EA:45:2A:CB:A7:E6:A7
Certificate issuer: /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial: 78EEF113D0A20119547A96D8150997BAC46225AD
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
Signing time: Thu 31 Aug 2023 20:32:45 +0000
ROA not before: Thu 31 Aug 2023 20:27:45 +0000
ROA not after: Thu 29 Aug 2024 20:32:45 +0000
asID: 265462
IP address blocks: 168.196.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ee:f1:13:d0:a2:01:19:54:7a:96:d8:15:09:97:ba:c4:62:25:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Validity
Not Before: Aug 31 20:27:45 2023 GMT
Not After : Aug 29 20:32:45 2024 GMT
Subject: CN=E1C8DB7F06D9F63A45B74E661DEA452ACBA7E6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:ca:ef:39:c0:8c:bd:df:72:ef:48:93:2e:
4c:95:29:86:bc:a7:4a:f5:39:45:bc:bf:48:6e:0b:
e5:10:31:e4:7b:23:21:8c:3c:3c:97:b9:c9:1f:41:
bd:1f:de:8e:2c:e1:86:ac:d7:f2:0e:77:d3:cf:ae:
69:d9:a1:c3:92:81:13:c7:33:e1:6e:6d:13:07:56:
bf:16:e7:52:2f:42:10:21:d4:f2:7f:d9:89:2d:1d:
27:39:32:30:1b:22:20:1c:11:fd:4a:b7:ad:6b:88:
da:6d:9d:a0:e8:ea:b7:e6:3b:fd:8a:72:57:cd:aa:
05:a3:d7:2f:0b:24:78:42:69:58:71:e9:8e:45:9a:
06:cd:0e:c2:fa:79:40:c0:b0:f6:03:7f:f7:d1:3b:
5c:ef:1e:4e:ef:6e:6d:3a:61:44:15:14:c3:e5:3f:
d5:a8:94:ff:3c:fe:48:7d:28:fc:4b:21:ec:ca:9f:
0d:c2:42:d4:fe:17:32:2b:75:2b:8a:d5:8e:8d:12:
7e:cf:7d:ec:31:71:d7:04:a6:ac:41:65:30:13:26:
89:8b:86:fa:28:2b:35:96:88:1b:b4:0b:ec:03:a3:
1b:a2:df:21:6a:a5:f3:f9:f3:dd:a3:b9:10:2c:49:
43:c2:89:97:5e:09:55:1a:49:f0:c8:e7:c6:a5:a7:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:DB:7F:06:D9:F6:3A:45:B7:4E:66:1D:EA:45:2A:CB:A7:E6:A7
X509v3 Authority Key Identifier:
keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:37:67:10:95:ef:c8:d9:1d:48:57:a5:26:e1:f1:cb:78:e4:
b8:57:7a:26:bd:21:57:4d:ff:99:17:40:7b:fd:f3:c9:b1:d9:
64:2a:6f:ba:d1:cb:d3:d6:25:2c:f6:eb:fc:f8:e3:b4:46:66:
46:24:42:b2:a3:04:23:22:cc:de:2b:93:20:d0:31:dd:ea:af:
65:27:5f:00:23:92:ac:37:75:e0:aa:fd:0f:7a:21:26:03:0c:
1b:1a:cc:e2:e6:ea:22:5d:e2:d7:8d:a6:6b:0d:a3:5d:78:d3:
30:72:f1:40:08:a8:78:c7:5c:4b:62:c8:62:04:54:75:38:2a:
4d:21:d3:28:01:1c:e3:be:85:08:fc:30:06:4f:db:de:09:b4:
20:8b:d1:05:cc:5f:47:30:4a:a2:0b:ad:26:7e:82:e7:5f:a1:
c7:33:5e:b1:4e:66:38:1a:43:d8:c3:10:e1:2a:79:8c:57:25:
51:81:2c:6e:75:7f:02:74:a5:66:55:3d:8e:98:aa:cb:a1:98:
0b:ea:25:72:c1:d4:81:a5:90:78:c0:b8:34:69:4c:ee:e5:eb:
64:1d:07:de:77:a6:a0:50:19:b5:80:ad:b3:0e:c1:73:dc:43:
53:de:59:1b:84:9c:f3:8c:39:06:71:4c:c2:31:dc:9b:09:92:
34:2e:28:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeO7xE9CiARlUepbYFQmXusRiJa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJENzhDRjY4RDcxRTVFNTQwNzE2QzlCNDJBODk2OUU5
QkUyOEYyMjAeFw0yMzA4MzEyMDI3NDVaFw0yNDA4MjkyMDMyNDVaMDMxMTAvBgNV
BAMTKEUxQzhEQjdGMDZEOUY2M0E0NUI3NEU2NjFERUE0NTJBQ0JBN0U2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJsrvOcCMvd9y70iTLkyVKYa8
p0r1OUW8v0huC+UQMeR7IyGMPDyXuckfQb0f3o4s4Yas1/IOd9PPrmnZocOSgRPH
M+FubRMHVr8W51IvQhAh1PJ/2YktHSc5MjAbIiAcEf1Kt61riNptnaDo6rfmO/2K
clfNqgWj1y8LJHhCaVhx6Y5FmgbNDsL6eUDAsPYDf/fRO1zvHk7vbm06YUQVFMPl
P9WolP88/kh9KPxLIezKnw3CQtT+FzIrdSuK1Y6NEn7PfewxcdcEpqxBZTATJomL
hvooKzWWiBu0C+wDoxui3yFqpfP5892juRAsSUPCiZdeCVUaSfDI58alp3UrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4cjbfwbZ9jpFt05mHepFKsun5qcwHwYDVR0j
BBgwFoAUG9eM9o1x5eVAcWybQqiWnpvijyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hSbndoeVdoUUVYYXlSbm1qODQ2QWlqMkxZZkpMaFFhWlVyYzUzck1E
Z2IvMC8xQkQ3OENGNjhENzFFNUU1NDA3MTZDOUI0MkE4OTY5RTlCRTI4RjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCRDc4Q0Y2OEQ3MUU1RTU0
MDcxNkM5QjQyQTg5NjlFOUJFMjhGMjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYUm53aHlXaFFFWGF5Um5tajg0NkFpajJMWWZKTGhRYVpVcmM1M3JNRGdiLzAv
MzEzNjM4MmUzMTM5MzYyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjE3DANBgkqhkiG9w0BAQsFAAOCAQEACjdn
EJXvyNkdSFelJuHxy3jkuFd6Jr0hV03/mRdAe/3zybHZZCpvutHL09YlLPbr/Pjj
tEZmRiRCsqMEIyLM3iuTINAx3eqvZSdfACOSrDd14Kr9D3ohJgMMGxrM4ubqIl3i
142maw2jXXjTMHLxQAioeMdcS2LIYgRUdTgqTSHTKAEc476FCPwwBk/b3gm0IIvR
BcxfRzBKogutJn6C51+hxzNesU5mOBpD2MMQ4Sp5jFclUYEsbnV/AnSlZlU9jpiq
y6GYC+olcsHUgaWQeMC4NGlM7uXrZB0H3nemoFAZtYCtsw7Bc9xDU95ZG4Sc84w5
BnFMwjHcmwmSNC4oYg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:33 2025 by rpki-client