Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
File: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier: r6x9B5sDkeRiFtkyb7+hRqYgKpoQthisXxvoRISzJ7o=
Subject key identifier: 86:0F:71:C9:00:80:19:1E:4B:1C:ED:52:F3:4F:46:62:4E:E4:A2:B1
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 5C36C2B936B92A9A063605983798F202B4EE7708
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
Signing time: Thu 06 Mar 2025 00:58:54 +0000
ROA not before: Thu 06 Mar 2025 00:53:54 +0000
ROA not after: Thu 05 Mar 2026 00:58:54 +0000
asID: 202
IP address blocks: 168.195.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:36:c2:b9:36:b9:2a:9a:06:36:05:98:37:98:f2:02:b4:ee:77:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:54 2025 GMT
Not After : Mar 5 00:58:54 2026 GMT
Subject: CN=860F71C90080191E4B1CED52F34F46624EE4A2B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:22:6f:00:fe:81:e6:15:74:1c:5d:d0:f5:
aa:1f:20:82:17:15:70:9c:af:f1:58:d2:96:ee:8b:
3c:5b:7c:51:f7:e6:6a:43:6a:65:c8:49:cc:eb:c6:
6e:6e:02:5a:7d:e1:3e:0f:4f:a7:64:8d:0e:48:c5:
a8:0c:20:c7:c7:2b:4b:32:3d:1c:1f:99:74:c5:db:
9b:91:ec:9c:4d:bb:4c:ec:f7:3d:d8:40:05:e1:80:
32:c4:93:58:77:b0:b7:52:88:8c:88:7e:be:69:63:
4f:e7:7a:6c:38:da:24:6d:e8:f0:37:12:4c:78:c3:
d9:e7:16:f7:0f:98:f3:75:95:1f:a4:dc:fb:fb:75:
e3:d1:90:9d:09:3b:06:0c:c9:ed:89:1b:fb:e4:84:
c2:45:26:b0:a9:a6:fc:89:92:53:a6:16:73:cd:3d:
0d:27:5f:2a:c0:17:a2:e8:f8:23:e0:e1:ca:db:65:
f5:ab:e8:24:a8:2b:48:55:96:a3:89:2b:7d:8e:03:
76:fd:80:2f:27:47:86:d4:09:ce:a8:07:66:1b:3f:
e9:00:27:a8:8f:81:4b:46:c9:b0:df:71:35:f6:54:
29:e3:23:98:7d:5a:f8:b2:52:bd:12:16:d6:20:3f:
14:32:22:73:b9:b4:cb:7f:39:54:ee:00:b8:b7:0b:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:71:C9:00:80:19:1E:4B:1C:ED:52:F3:4F:46:62:4E:E4:A2:B1
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ba:26:36:17:78:ba:be:54:ac:5a:80:31:ec:9d:51:71:af:
85:97:2e:c4:7d:d5:78:f3:70:56:aa:9b:7e:33:4c:c0:08:97:
ae:94:38:c1:e2:4f:3a:52:7a:70:a7:f5:1f:cc:90:fa:f6:17:
ce:d5:c1:7c:81:99:48:c9:49:00:d3:85:25:8a:5a:7c:8f:cc:
0c:64:c9:f7:d2:e2:1e:2f:3f:ef:0f:f5:8c:a5:1f:53:cc:bd:
92:7c:94:ef:3c:ab:57:fc:f6:7e:c4:2d:08:bf:01:d1:61:d9:
ba:32:b0:b4:e3:e0:44:17:ee:c5:7e:48:da:fb:9e:e3:50:58:
b8:85:42:c6:ba:12:10:64:d6:77:53:6c:dd:62:79:fb:dd:86:
76:16:96:bb:7d:02:d2:11:5e:0f:0d:af:da:fb:74:43:e2:f9:
67:26:3c:bb:14:76:b0:73:0d:ba:b0:b7:b9:82:ae:e9:32:9b:
87:21:3c:e0:25:d8:16:5a:67:74:01:d9:2f:8d:bd:db:d5:31:
70:45:fe:65:ff:b7:38:c1:68:9f:96:2c:8c:f7:71:d5:c1:f1:
e1:46:3f:53:21:ab:79:d7:87:e8:d1:1c:e4:d3:9a:52:4e:34:
da:c1:eb:39:00:3e:26:02:fe:f2:da:e1:6a:ab:e7:a4:d1:28:
12:57:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:15 2025 by rpki-client