Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32342d3234203d3e20323632333736.roa
File: 3134332e3235352e3136382e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier: XabKf8cXJkXfDVpWSsUwLh2D4nx6kBuDnYLNHa/gJL8=
Subject key identifier: 89:28:15:4D:A0:43:0B:76:64:75:16:E8:30:71:3A:33:10:56:B5:94
Certificate issuer: /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial: 2AFC4E626642FB40F8723E7E8DE23DD7947A5D3D
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32342d3234203d3e20323632333736.roa
Signing time: Tue 02 Jul 2024 14:03:35 +0000
ROA not before: Tue 02 Jul 2024 13:58:35 +0000
ROA not after: Tue 01 Jul 2025 14:03:35 +0000
asID: 262376
IP address blocks: 143.255.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fc:4e:62:66:42:fb:40:f8:72:3e:7e:8d:e2:3d:d7:94:7a:5d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Validity
Not Before: Jul 2 13:58:35 2024 GMT
Not After : Jul 1 14:03:35 2025 GMT
Subject: CN=8928154DA0430B76647516E830713A331056B594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:fe:a5:42:92:39:3e:af:fe:83:72:e2:78:
92:83:44:6c:31:fd:3a:ab:b7:66:73:94:e2:7c:88:
8a:a5:92:2b:f3:31:39:27:08:30:51:21:57:7c:a4:
fa:88:1d:0f:e8:4e:9e:55:4c:e6:6a:d2:41:e1:3e:
74:72:bd:b1:a2:f7:51:cb:76:e2:c1:97:bb:27:f6:
d8:97:a2:7d:03:1a:1d:44:49:d8:44:f9:90:b4:98:
a2:5d:73:1e:f9:19:5a:0f:17:0c:6b:64:bd:d3:75:
52:68:fa:3e:17:2c:d9:2d:93:f4:cf:32:72:87:d2:
e1:d9:af:ac:38:3a:f0:d2:3c:54:00:2b:69:01:15:
10:4f:a5:31:75:31:97:67:61:62:60:ae:de:59:44:
a6:74:5a:5e:d0:29:ab:ed:db:6b:03:e3:21:02:47:
e4:f9:98:0f:f1:af:97:9f:91:15:6d:72:ed:96:c2:
41:34:1d:5f:d6:62:9c:fe:74:e9:b2:0c:6f:d6:dd:
0e:24:d6:62:1a:87:e9:87:16:be:86:0c:cb:ab:ff:
ba:20:68:e1:ec:79:f4:71:19:c7:4a:1e:c9:31:35:
01:a8:4e:10:39:e7:6e:3d:a2:a1:f1:a2:df:8b:af:
8a:a9:77:8a:a1:28:4d:de:1c:a3:c3:c0:dc:29:9c:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:28:15:4D:A0:43:0B:76:64:75:16:E8:30:71:3A:33:10:56:B5:94
X509v3 Authority Key Identifier:
keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136382e302f32342d3234203d3e20323632333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:78:f5:f9:09:ed:66:19:83:29:f0:ee:32:19:57:e6:cc:49:
5e:ac:d2:a4:b2:c5:0e:61:42:02:3c:11:89:ae:32:48:de:3c:
07:02:fa:f6:fb:64:a8:32:65:4b:eb:bf:b2:9b:6d:47:75:65:
d8:5c:bb:90:da:b3:80:01:ea:46:a2:81:6e:8c:9b:54:d2:86:
a5:81:71:c5:48:9a:d7:c4:71:55:6d:4e:0e:6f:be:8a:3f:00:
ba:89:77:69:41:55:2b:fd:76:52:82:d6:65:46:bd:b7:f2:52:
0f:4b:85:21:18:39:5e:bb:3c:9b:bb:a1:aa:f9:38:a7:f2:e8:
56:02:df:6e:5b:70:4d:33:4c:ad:b7:65:49:f0:95:c3:2a:a2:
5e:35:cc:e3:d8:a7:43:6b:d2:61:d2:02:f6:64:1c:fb:f2:d8:
45:6e:41:6c:e4:b8:08:43:b4:37:5e:15:d4:d4:c4:44:a4:f6:
56:78:a1:98:05:01:e3:14:31:1a:11:a2:e7:93:83:5d:a1:c5:
09:37:16:31:c7:09:df:a9:5f:d1:be:f2:d2:9d:24:a9:ed:26:
b7:74:05:73:09:b6:c6:ab:48:1a:f1:d2:12:ee:d4:c8:4e:c9:
02:d6:82:55:d2:92:4c:cd:fa:96:57:52:59:4c:ca:90:15:a7:
24:dc:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:11:15 2025 by rpki-client