Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
File: 3230312e34362e31362e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier: C5TgOit1XzMkPfIW7K7X+Hb3CCv/yu4ZCz9k+DinXDI=
Subject key identifier: F6:D1:3C:6A:E6:97:A5:42:9C:F8:B1:9A:40:55:D9:3E:2D:23:58:CF
Certificate issuer: /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial: 08881D4132221C6DD9DAA7F6E5055FE41EBA9042
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
Signing time: Fri 03 Nov 2023 13:03:30 +0000
ROA not before: Fri 03 Nov 2023 12:58:30 +0000
ROA not after: Fri 01 Nov 2024 13:03:30 +0000
asID: 28669
IP address blocks: 201.46.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:88:1d:41:32:22:1c:6d:d9:da:a7:f6:e5:05:5f:e4:1e:ba:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Validity
Not Before: Nov 3 12:58:30 2023 GMT
Not After : Nov 1 13:03:30 2024 GMT
Subject: CN=F6D13C6AE697A5429CF8B19A4055D93E2D2358CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:89:6d:b5:91:f3:71:59:9b:17:e6:34:c1:
a7:98:1f:71:03:66:ca:8a:5f:39:3f:ba:fc:e9:a2:
0e:f3:52:af:70:ea:dd:7b:f9:9a:25:3b:c8:f7:d1:
a1:57:c1:67:fc:5d:22:82:25:5e:1b:79:c6:fc:06:
ab:fc:9f:75:7a:01:d4:97:be:8d:33:06:81:76:24:
df:57:bb:b2:9d:7d:31:7d:f9:44:f8:c2:dd:79:ea:
3b:5d:35:28:64:81:bc:17:06:ee:72:41:f8:dd:14:
f7:d4:63:12:e2:c4:2b:4b:b1:96:c0:10:df:d8:36:
61:ac:d2:21:e1:02:9e:1b:f6:da:50:62:31:06:e9:
0e:93:20:b3:3e:93:75:b8:95:af:57:71:a0:99:dc:
e8:74:66:04:28:c9:af:4f:c1:5c:ce:b2:4b:ab:44:
cc:83:c5:00:0f:27:f2:72:63:8c:b7:28:83:89:39:
90:0e:01:68:5f:f7:26:79:bc:ae:b6:3a:f9:0a:85:
cb:07:af:0a:f1:3e:e6:d4:df:93:68:87:53:6b:2f:
f0:ec:10:63:86:2c:14:04:41:15:ff:10:ae:1c:61:
77:2f:78:c6:70:d6:59:46:27:9c:f3:de:fc:33:c5:
9b:68:56:41:a4:bf:8e:c4:99:89:9f:35:15:30:cf:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:3C:6A:E6:97:A5:42:9C:F8:B1:9A:40:55:D9:3E:2D:23:58:CF
X509v3 Authority Key Identifier:
keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3230312e34362e31362e302f32302d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.46.16.0/20
Signature Algorithm: sha256WithRSAEncryption
50:0a:03:01:18:5e:21:7a:c8:53:ab:51:a8:94:55:62:f5:9e:
8d:04:e9:70:3c:e8:e3:5f:00:d9:32:30:1f:82:fc:73:63:b5:
c0:d7:ed:8e:73:f8:bd:15:18:ba:60:3f:aa:dd:6b:ed:30:31:
1c:4e:5a:69:8f:b4:bc:4e:42:ca:be:d4:d0:ed:b5:1d:f9:f7:
92:d7:e0:f4:58:c8:43:ee:b8:bd:ea:a1:8f:67:bd:26:b5:3b:
19:06:ff:f4:e1:27:70:03:1b:e1:ca:3b:8b:a0:54:cc:7b:be:
65:48:60:50:1b:c3:7f:6c:c5:9c:f8:25:10:0b:94:3b:f4:d4:
72:ba:70:f7:a9:19:1f:f5:88:3b:d9:73:14:7e:1e:ef:50:18:
5a:a5:3c:e5:2a:4a:72:5d:f3:e8:49:92:ff:6e:40:16:d0:05:
45:b9:e9:60:39:e3:54:07:b1:b4:1b:01:1d:e4:42:15:1f:a1:
a0:28:d3:86:29:d1:a7:4a:c3:95:4e:a3:68:e9:9a:ae:7d:47:
72:44:96:13:ec:94:85:d7:3b:2d:d9:03:dc:4c:de:04:74:ba:
f4:a1:48:2a:86:10:33:0c:c1:52:9f:71:7f:e5:dc:06:ee:ce:
26:db:70:c8:c9:41:be:e9:47:ea:a7:3b:e4:5d:89:46:d4:c3:
7c:2d:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:49:59 2025 by rpki-client