Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa
File: 3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier: jkkOGZPledEF6E9x5rsPI8MVkGn8hTe+DHZRsBgyckk=
Subject key identifier: FB:9A:84:00:47:C2:E3:A5:F5:FC:25:5C:BA:71:85:27:E1:BC:0D:D9
Certificate issuer: /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial: 278D96AC857E1E6208D819E51E85DEED33337D24
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa
Signing time: Fri 02 Feb 2024 00:16:08 +0000
ROA not before: Fri 02 Feb 2024 00:11:08 +0000
ROA not after: Fri 31 Jan 2025 00:16:08 +0000
asID: 265181
IP address blocks: 167.249.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8d:96:ac:85:7e:1e:62:08:d8:19:e5:1e:85:de:ed:33:33:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Validity
Not Before: Feb 2 00:11:08 2024 GMT
Not After : Jan 31 00:16:08 2025 GMT
Subject: CN=FB9A840047C2E3A5F5FC255CBA718527E1BC0DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:ed:b6:eb:21:fb:57:c7:1c:cc:0e:69:26:
d5:bb:a6:20:33:09:27:56:6c:42:e1:10:e0:bc:d9:
27:d8:6b:5d:0a:6c:9d:7f:12:bb:25:91:55:cc:b2:
b9:c3:96:f6:57:4f:bb:69:74:e6:d1:94:b5:4c:c2:
c9:cd:13:7a:71:68:af:6c:5b:8e:ef:b2:7d:6b:ae:
be:4c:a7:68:6a:e3:ad:7b:be:c5:10:81:b9:c2:09:
e4:2c:ff:51:b3:b3:2a:ae:b2:c7:50:b3:67:7a:d1:
f4:76:81:57:99:a6:3a:c0:ed:c6:bc:b9:e3:8c:7d:
03:86:47:d8:09:86:c5:0a:40:01:fd:0c:98:59:4b:
a1:a9:3e:aa:b7:25:96:f8:77:83:4f:27:78:d2:ec:
ef:b9:0a:cc:75:df:1a:79:51:c3:ec:9d:36:70:aa:
bf:19:1e:e2:9e:65:91:2a:77:03:50:e0:c1:86:a5:
c9:a5:7b:d6:68:4f:51:c6:4f:db:59:91:24:b5:e5:
e4:3a:d1:86:98:54:2d:48:27:df:be:4a:5a:8e:08:
4f:64:99:94:0f:66:ed:da:e6:d4:5e:a8:7b:1d:66:
72:99:bc:70:bf:6b:93:6e:99:49:cb:dc:07:f0:21:
3c:a9:9e:5c:02:52:f6:ed:6c:ad:73:27:05:f4:94:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:84:00:47:C2:E3:A5:F5:FC:25:5C:BA:71:85:27:E1:BC:0D:D9
X509v3 Authority Key Identifier:
keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32332d3233203d3e20323635313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.132.0/23
Signature Algorithm: sha256WithRSAEncryption
70:39:c4:ee:1b:70:20:8a:1e:0f:39:b5:36:ab:8a:ce:93:76:
c0:b7:52:9e:3c:16:85:88:10:43:f0:59:9a:ac:05:9d:ee:38:
12:1a:6a:28:12:4a:23:47:8a:e2:dd:5f:c1:96:bd:e7:2d:e7:
1c:04:ef:97:bc:b9:ae:08:84:11:49:ff:ec:7c:8b:87:b9:10:
dc:b3:91:94:ab:10:b5:55:11:fb:c7:a5:de:55:57:b5:9a:92:
6c:7c:c2:4b:f6:6c:4f:8e:4c:c2:f1:01:9a:d6:bd:58:69:4a:
6f:70:27:3e:f6:f4:dc:f1:1f:d9:58:7b:df:7d:9e:31:95:fd:
3b:9e:94:8a:c7:c7:07:ae:7e:af:77:b8:ca:32:7c:b4:d2:be:
e5:d1:24:85:40:e7:8b:7c:85:41:4e:6f:23:87:22:b4:a5:f6:
48:b1:bf:6f:b7:00:54:3b:86:4b:ed:48:1c:f8:05:36:e7:79:
48:3e:15:14:f6:20:a3:bb:a1:e4:aa:f2:e9:57:90:d0:38:01:
a4:da:fc:d3:ac:1e:00:f4:8b:9d:da:18:c9:b0:a6:19:ad:df:
6e:34:9b:04:e9:ab:b5:9b:63:2c:e6:c6:0a:f3:f7:68:39:27:
da:cb:8a:9f:59:cf:cb:f0:24:c2:49:48:0a:d4:ec:b7:46:3c:
ca:90:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:48 2025 by rpki-client