Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e20323033.roa
File: 3136382e3139352e3131322e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier: b757+w5vz3E6vmlIluARXJXMiNFF1m1t4eoh3Y8S57o=
Subject key identifier: 44:E2:7E:CF:44:2E:8E:4D:A8:A0:67:83:F0:41:3E:D8:FA:B4:8E:F2
Certificate issuer: /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial: 4FD071DDC0ACFB7E19795AE9C2F25791F5CF9132
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e20323033.roa
Signing time: Thu 23 Nov 2023 17:10:16 +0000
ROA not before: Thu 23 Nov 2023 17:05:16 +0000
ROA not after: Thu 21 Nov 2024 17:10:16 +0000
asID: 203
IP address blocks: 168.195.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d0:71:dd:c0:ac:fb:7e:19:79:5a:e9:c2:f2:57:91:f5:cf:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Validity
Not Before: Nov 23 17:05:16 2023 GMT
Not After : Nov 21 17:10:16 2024 GMT
Subject: CN=44E27ECF442E8E4DA8A06783F0413ED8FAB48EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:46:d0:eb:2a:22:f3:21:57:f8:de:11:16:
5b:d1:fb:48:dc:40:55:0b:df:f3:6b:48:07:11:c7:
2e:bd:f7:3c:95:bd:c7:fd:e6:90:31:49:f3:25:8a:
e6:ce:b1:a7:b3:0f:17:cc:5b:a8:91:9f:e2:da:79:
05:5d:87:a7:92:a1:74:3b:f5:d0:a9:3e:6a:71:32:
91:2a:c1:77:9b:2d:3d:51:26:0c:14:d1:de:57:23:
cd:55:ec:81:ea:29:60:23:08:1b:ba:fa:2e:62:2d:
ce:8a:79:ca:32:49:12:dc:0e:0f:3b:22:9d:f6:41:
00:d0:f4:d8:2c:5b:1b:64:d1:dd:89:98:f1:c2:9a:
bc:75:74:02:37:fa:7c:70:01:cf:8e:6e:ef:fb:22:
9a:2c:ed:72:a6:39:ab:c9:3a:c9:17:8c:26:72:90:
84:04:69:4e:9e:98:49:14:fd:55:8b:b5:74:64:49:
67:b0:41:63:4e:c8:f1:60:86:25:86:32:f6:8f:fc:
16:e6:9c:a9:35:22:a7:8f:f8:61:24:90:7f:cf:ce:
dc:cb:82:e7:06:ba:9c:91:7c:af:e5:b2:7c:b4:4b:
17:61:cf:5b:b7:a4:1f:40:d0:f8:00:de:94:af:23:
6e:99:55:1b:07:fb:91:43:d8:f2:af:19:54:8f:05:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:7E:CF:44:2E:8E:4D:A8:A0:67:83:F0:41:3E:D8:FA:B4:8E:F2
X509v3 Authority Key Identifier:
keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3332203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:54:5c:f8:67:c4:b3:b5:e7:85:96:4e:bd:90:24:da:eb:5c:
11:f0:ec:06:3f:00:d7:10:34:19:c8:af:cb:17:34:16:15:1c:
1f:5c:ea:8d:0f:b6:e2:22:76:96:70:37:07:29:52:73:90:69:
76:9a:4e:29:41:73:db:3d:4f:67:42:5d:f1:e8:b9:49:04:22:
20:58:d5:6d:c1:98:54:93:e2:3f:c4:f5:b6:b7:26:65:42:1f:
83:88:d5:e1:c1:8e:a4:5e:01:cf:93:97:e5:c4:00:22:34:1b:
9b:ba:b8:4f:67:0f:7f:a3:16:1a:1c:83:ab:aa:34:98:73:e1:
a2:76:ea:e6:ab:7b:e5:3a:9f:8f:8b:56:10:0e:42:e0:0d:32:
10:37:3d:ea:93:35:93:5a:8b:52:08:f8:ba:93:78:18:c4:a9:
5b:a8:98:9f:02:3e:af:e2:25:d4:ec:20:92:3f:ef:dd:e2:8f:
d4:ef:c7:bd:a1:31:9d:ff:d8:c8:e1:a3:26:7e:d6:ca:7b:b9:
22:82:7b:c8:6a:08:2a:5e:ef:32:47:d1:8f:2d:82:e9:d2:72:
a8:3b:05:fc:5a:cd:81:ed:41:78:88:72:14:cc:ec:bc:7b:df:
6f:7d:07:44:5c:92:72:db:e7:73:86:08:59:6f:b5:ce:5d:f2:
3c:0c:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:08:19 2025 by rpki-client