Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32342d3234203d3e20323638373836.roa
File: 3136382e3139362e3230362e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier: K5PPZYX7M+jBJJ/ozA2rHctNaHZPBxyR4dGfrPs+dOs=
Subject key identifier: 70:5B:F1:C7:A6:D7:BA:0F:95:87:86:0E:C7:03:FA:AA:D7:42:CE:FF
Certificate issuer: /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial: 6C67B765AE282595D64FF8E4C6E2BE6B7795B95C
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32342d3234203d3e20323638373836.roa
Signing time: Fri 28 Feb 2025 12:52:10 +0000
ROA not before: Fri 28 Feb 2025 12:47:10 +0000
ROA not after: Fri 27 Feb 2026 12:52:10 +0000
asID: 268786
IP address blocks: 168.196.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:67:b7:65:ae:28:25:95:d6:4f:f8:e4:c6:e2:be:6b:77:95:b9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Validity
Not Before: Feb 28 12:47:10 2025 GMT
Not After : Feb 27 12:52:10 2026 GMT
Subject: CN=705BF1C7A6D7BA0F9587860EC703FAAAD742CEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:3f:d2:1d:35:20:e5:6a:9a:65:a5:af:cd:
c5:0f:df:45:06:3a:4c:2f:3b:fd:48:3c:62:b2:51:
48:5a:70:cf:be:9d:77:3e:71:ee:5e:d5:c6:4e:9e:
88:d9:6e:93:de:9e:cb:7c:b0:5a:92:cb:bf:9e:20:
b3:91:13:d2:ae:4b:81:e9:2a:ab:a5:f7:f5:8e:47:
73:9f:52:7f:0b:ea:3d:3f:51:76:d1:68:20:bc:ac:
39:d0:84:48:aa:93:3c:cb:62:d1:91:e7:82:8c:07:
40:56:e1:0d:05:27:6e:2b:7f:cf:93:f2:96:e1:0f:
f1:89:38:d9:03:81:e1:da:ea:4e:8a:cd:5c:0e:75:
9b:a9:9f:4b:fc:49:3d:e3:29:e3:ed:d7:ff:7d:5c:
a4:0b:21:09:40:17:d9:1e:4a:56:d8:9c:5b:4b:cd:
08:b8:b9:dd:6a:80:df:82:35:c3:3e:cc:af:c1:ac:
49:48:8f:64:cf:c9:ff:f5:3a:22:41:40:5e:47:22:
01:ac:e2:b5:cb:0a:e5:dd:de:fc:60:48:3c:79:88:
b9:ed:fe:ad:eb:01:66:a9:f5:65:62:5c:de:f6:12:
9a:7e:55:76:28:ed:64:01:d4:cb:b1:cf:81:10:bc:
04:9a:57:78:12:d0:39:1c:36:f9:77:92:d2:ae:30:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:F1:C7:A6:D7:BA:0F:95:87:86:0E:C7:03:FA:AA:D7:42:CE:FF
X509v3 Authority Key Identifier:
keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32342d3234203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.206.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c3:a6:0e:35:b3:1a:77:36:62:f3:3e:53:6e:53:b5:c9:31:
ee:65:98:e1:d3:a4:ee:c6:83:73:ca:06:06:01:aa:bf:bc:24:
cf:f4:77:8d:2c:18:4f:c6:c5:00:ea:d7:3a:29:dc:37:49:75:
2b:da:26:fa:0a:16:81:62:8b:d2:f4:d0:9b:3e:f8:1c:4b:4b:
0b:85:3d:81:e8:01:69:ca:51:15:09:17:c0:e6:4f:51:0d:d7:
61:9f:8e:4f:d2:d4:2f:cf:b1:ab:c7:99:10:85:89:7b:b3:fc:
7c:3e:02:98:0c:88:3d:2b:68:f4:bb:2a:c7:cc:d2:ad:f9:ef:
33:4f:05:a2:80:70:28:6e:e7:81:32:9b:4c:5b:7b:40:a4:cc:
43:7b:61:5f:12:14:13:12:1b:4b:44:3a:73:82:b5:13:1c:54:
54:b1:ce:43:89:d9:72:75:23:c0:eb:56:82:72:77:6d:4b:ee:
fa:2a:83:b5:32:7c:b2:fe:9f:9a:73:ea:5a:ed:3c:15:f0:e6:
95:94:7f:be:f0:29:53:d3:a0:2f:d7:1f:bf:bb:80:d5:01:a0:
62:12:53:ba:55:fe:39:fa:8d:d9:11:17:c0:29:ac:dd:fa:b5:
5d:84:97:6b:5b:c3:7e:2a:11:74:3a:48:f3:84:75:5d:ad:9a:
b2:38:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:39:33 2025 by rpki-client