Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/3136382e3139362e34302e302f32322d3233203d3e20323635343432.roa
File: 3136382e3139362e34302e302f32322d3233203d3e20323635343432.roa (raw, json)
Hash identifier: ezmIe/Sm/Q6vK6wXdxn7nJdzxvpr9pgI8Ck/Dttl+ms=
Subject key identifier: 31:E0:2C:01:95:0C:15:72:E1:F3:31:DF:FF:24:B1:44:F5:8F:6E:AF
Certificate issuer: /CN=25C2D875F5CBA31070CD57D8D61496748E38F2FE
Certificate serial: 280840275B6C1864C21A8F17EE80C464ED3EEAED
Authority key identifier: 25:C2:D8:75:F5:CB:A3:10:70:CD:57:D8:D6:14:96:74:8E:38:F2:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/3136382e3139362e34302e302f32322d3233203d3e20323635343432.roa
Signing time: Thu 26 Jan 2023 12:27:04 +0000
ROA not before: Thu 26 Jan 2023 12:22:04 +0000
ROA not after: Thu 25 Jan 2024 12:27:04 +0000
asID: 265442
IP address blocks: 168.196.40.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:08:40:27:5b:6c:18:64:c2:1a:8f:17:ee:80:c4:64:ed:3e:ea:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C2D875F5CBA31070CD57D8D61496748E38F2FE
Validity
Not Before: Jan 26 12:22:04 2023 GMT
Not After : Jan 25 12:27:04 2024 GMT
Subject: CN=31E02C01950C1572E1F331DFFF24B144F58F6EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:10:25:7c:6a:17:62:9d:2f:d9:6d:95:cc:
49:92:5e:e3:8b:c8:65:f8:4b:86:84:04:e8:ee:2c:
f6:ad:56:43:bf:5c:39:18:ca:7c:2e:a1:1b:3a:53:
0e:52:fe:d6:e9:b1:7b:2b:41:6a:be:48:68:93:59:
70:50:af:fd:df:33:b9:e0:6d:f6:5b:ad:a1:b6:35:
98:24:04:eb:87:18:68:41:5a:f2:56:66:c6:ad:93:
fd:ce:93:3e:21:a4:a7:79:c7:0f:b2:70:2f:c0:b6:
13:74:ad:20:a7:c8:cb:1a:dd:3a:84:57:31:9d:3f:
cd:55:45:2d:03:ff:07:15:a6:68:54:69:ba:86:d6:
d7:58:e7:0e:84:34:63:56:b4:8d:bc:9d:fd:57:10:
01:0a:8a:b5:bd:35:a0:12:e3:d6:53:2b:10:b9:4c:
83:87:53:12:4d:76:7f:24:c2:60:f4:77:f8:e9:a7:
6f:a5:2f:3c:c8:d8:89:a6:64:66:50:fd:b4:26:9a:
1b:0f:2f:d2:d2:f7:e4:76:72:4c:4d:e8:06:9a:25:
d8:36:c6:44:13:bc:f2:e0:3e:bb:e1:54:ab:b2:bb:
a9:b9:97:43:8f:51:64:fb:db:d3:44:d7:95:4f:78:
a0:89:b4:4a:80:c7:57:d8:1c:52:f7:c7:d7:05:89:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:2C:01:95:0C:15:72:E1:F3:31:DF:FF:24:B1:44:F5:8F:6E:AF
X509v3 Authority Key Identifier:
keyid:25:C2:D8:75:F5:CB:A3:10:70:CD:57:D8:D6:14:96:74:8E:38:F2:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/3136382e3139362e34302e302f32322d3233203d3e20323635343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:54:e1:72:b2:a5:ae:bc:20:f8:7f:88:a6:cf:0b:07:20:8b:
ba:0c:f0:2c:f9:a3:3c:37:78:d4:75:52:87:4d:51:36:4c:62:
99:cb:09:9c:65:63:f6:13:10:d5:9b:1f:36:e0:9a:db:ae:12:
3f:2d:21:b2:d5:c1:37:df:b2:a1:72:35:b6:ba:e4:e8:bc:dc:
59:b5:ed:52:55:f6:92:49:2d:42:25:0a:af:6a:9a:49:99:01:
aa:b4:7c:4a:59:ab:5b:9c:32:32:f6:71:97:29:78:af:fa:06:
08:24:bc:be:8c:51:90:d8:09:cb:f4:84:0f:d3:fe:b6:ea:5a:
21:8e:61:7f:06:82:fb:50:d6:32:67:c5:00:00:8b:11:21:35:
14:4a:b6:7f:6c:68:56:f0:10:1d:29:ca:2f:c7:a7:26:33:6b:
58:6d:7a:51:1b:b0:11:f7:2b:f7:1d:f7:73:c6:04:fa:4a:ee:
61:aa:46:94:a0:0b:f0:93:39:00:68:cc:51:e4:95:d5:d0:be:
6b:21:7c:8f:9b:b3:43:00:65:42:36:69:01:a3:ed:c7:db:52:
74:29:d0:34:da:d9:f0:00:f0:3f:d5:3a:31:b2:1c:b5:d5:08:
bc:b8:91:1d:a4:b0:fc:92:3c:15:9e:b1:dd:1b:6e:2e:c2:62:
c1:ca:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org