Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32332d3233203d3e20323632333736.roa
File: 3134332e3235352e3136382e302f32332d3233203d3e20323632333736.roa (raw, json)
Hash identifier: 5PDKAPi0MWoZdDHwz9ivmbE0hoflnHLS6Nq5YyU42CE=
Subject key identifier: 5F:36:73:63:01:EA:8C:94:B8:82:C0:98:9A:F0:F4:CF:B1:E6:41:38
Certificate issuer: /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial: 7D7FBDA225F47FB69B9670D14BCCD60821D89F11
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32332d3233203d3e20323632333736.roa
Signing time: Tue 04 Jun 2024 17:32:36 +0000
ROA not before: Tue 04 Jun 2024 17:27:36 +0000
ROA not after: Tue 03 Jun 2025 17:32:36 +0000
asID: 262376
IP address blocks: 143.255.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7f:bd:a2:25:f4:7f:b6:9b:96:70:d1:4b:cc:d6:08:21:d8:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Validity
Not Before: Jun 4 17:27:36 2024 GMT
Not After : Jun 3 17:32:36 2025 GMT
Subject: CN=5F36736301EA8C94B882C0989AF0F4CFB1E64138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:a1:0b:88:1e:b5:54:64:4c:57:fc:46:1a:
f2:2c:7a:0d:30:f0:b7:31:14:9f:40:b7:7f:f8:e3:
90:01:6f:06:27:67:49:24:02:ad:b3:94:d2:3a:f5:
98:68:59:34:43:c5:1f:d1:67:83:93:cb:8d:78:da:
87:48:fc:18:f3:7b:a5:ae:1d:fc:0f:ae:09:b1:41:
5a:36:99:63:e5:c9:10:9d:37:dc:1b:3c:b5:84:0b:
af:d5:c3:d3:80:5f:72:9c:37:41:2d:ee:bd:ff:62:
80:69:46:82:1d:90:a9:d6:d5:c7:f8:61:bb:1e:5c:
ff:dd:03:7e:ae:77:c5:ef:69:e9:ec:62:2a:ba:ac:
b7:cf:16:73:b2:de:99:02:06:22:4a:1b:21:ff:50:
4a:7f:3a:d9:8a:38:59:da:b4:9c:1d:fe:19:e9:89:
e5:33:b9:c7:70:b1:6c:1a:00:f9:a7:57:6e:3f:da:
42:8a:f2:c0:08:b8:9e:4c:32:46:fd:34:db:ac:7d:
86:6e:ca:8d:71:82:9f:a7:c4:e3:a0:83:96:e7:a8:
d1:99:18:bf:30:54:63:1d:63:64:d3:cd:2c:dc:04:
a7:86:ef:fe:e6:62:63:3e:b4:dc:41:2d:d0:de:9d:
e8:89:2a:83:9e:99:ad:8a:06:9c:f1:a1:67:14:9d:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:73:63:01:EA:8C:94:B8:82:C0:98:9A:F0:F4:CF:B1:E6:41:38
X509v3 Authority Key Identifier:
keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32332d3233203d3e20323632333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.168.0/23
Signature Algorithm: sha256WithRSAEncryption
26:cc:e6:a1:ed:39:3d:25:a5:67:7c:d6:e1:37:fe:87:83:28:
e9:4c:03:ac:99:b6:c7:f1:20:40:71:e5:1f:be:ba:db:1c:4e:
46:1d:fd:fc:53:66:f8:a8:80:59:0a:6a:13:db:43:e0:23:2d:
4c:85:cd:46:51:d0:b7:d2:99:9c:6b:92:53:e9:02:f9:78:95:
c7:48:be:9a:6b:33:97:1c:dc:b6:85:e0:ca:58:5e:d5:31:f8:
04:d1:08:ef:38:fd:25:89:ad:b3:22:ca:d3:40:3b:25:79:96:
a7:73:09:6f:b9:00:1e:12:82:d5:98:fa:7f:6f:2f:01:ac:2b:
d8:20:a5:f8:22:d8:1b:a7:14:69:4d:2f:18:35:7b:db:20:1f:
87:06:cc:ee:5f:56:b6:88:b7:41:a8:a9:b6:8a:16:b4:1e:58:
fe:72:5a:66:56:fb:66:96:b7:82:a3:22:d3:fa:a5:49:ba:fb:
b4:89:b3:14:06:b3:e1:f8:3c:46:6f:01:61:4d:aa:22:88:e5:
61:9a:86:f9:c3:35:d3:82:94:b1:56:c8:8c:50:cb:7f:f2:29:
fd:36:f2:4e:1b:21:9a:27:c7:4a:d9:3e:70:b3:0d:c6:4f:db:
36:97:7a:07:fd:5d:2f:3d:36:a3:90:4a:25:c5:79:86:73:cf:
11:48:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:50:37 2025 by rpki-client