Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32322d3232203d3e20323635343335.roa
File: 3136382e3139352e3135322e302f32322d3232203d3e20323635343335.roa (raw, json)
Hash identifier: wp8CTdPxhHtQjX8o3lgjFC63mLlUqUBOrNj7nQEbNzk=
Subject key identifier: D9:1C:59:19:C4:64:61:E4:56:0A:20:E0:20:DA:D8:82:C2:89:53:7B
Certificate issuer: /CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Certificate serial: 25AC784FDBE04AB75FC2EF12EC4D197A401A38BE
Authority key identifier: 7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32322d3232203d3e20323635343335.roa
Signing time: Mon 17 Apr 2023 16:22:46 +0000
ROA not before: Mon 17 Apr 2023 16:17:46 +0000
ROA not after: Mon 15 Apr 2024 16:22:46 +0000
asID: 265435
IP address blocks: 168.195.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ac:78:4f:db:e0:4a:b7:5f:c2:ef:12:ec:4d:19:7a:40:1a:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B
Validity
Not Before: Apr 17 16:17:46 2023 GMT
Not After : Apr 15 16:22:46 2024 GMT
Subject: CN=D91C5919C46461E4560A20E020DAD882C289537B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:1e:d2:20:7f:14:ae:ce:5c:24:aa:35:2d:
68:42:6f:a7:5b:d4:8f:8d:de:f9:5d:4d:41:cc:3a:
3c:ae:23:3d:59:2b:12:26:98:7b:99:f0:c0:e1:49:
64:41:31:ea:26:31:79:00:50:0e:58:b1:3d:b5:62:
ad:d1:dd:2d:b6:74:b7:1d:29:88:6f:d4:a0:48:cb:
c0:1b:34:b6:b2:18:00:70:e6:b3:1f:26:c6:5d:14:
77:08:62:ff:bd:d3:2d:c6:9a:ed:99:9e:5d:c8:f2:
82:bb:3b:42:c3:30:1f:14:27:6b:36:63:1d:68:3e:
eb:9a:0c:49:0d:51:9e:33:2f:ac:10:c2:8e:2c:c3:
42:c7:af:d9:29:c0:21:bd:88:1d:c1:cd:27:84:42:
64:1a:50:b8:b6:48:6d:e6:49:a5:18:6f:bc:46:9f:
05:3d:27:ee:ae:68:15:cd:98:b6:ce:47:44:6d:e8:
a1:63:e3:24:b9:88:fd:99:81:10:7c:24:cf:e0:00:
b1:2d:9a:72:6c:8f:70:1d:f4:70:3d:9b:a1:89:09:
bb:e2:25:f1:c0:aa:97:2c:49:a9:2c:9b:76:d0:6c:
98:e4:a4:98:5e:b1:48:de:1c:0d:bb:65:d9:5c:2c:
5b:54:87:7a:10:35:5d:d4:eb:08:04:dc:9c:d4:4d:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:59:19:C4:64:61:E4:56:0A:20:E0:20:DA:D8:82:C2:89:53:7B
X509v3 Authority Key Identifier:
keyid:7A:C3:F8:6B:BB:41:4B:AC:E7:98:C3:4B:BF:24:8A:BF:FE:48:CB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AC3F86BBB414BACE798C34BBF248ABFFE48CB9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Q3pDWGo9toJMNuuk5EHfW5NNLxxTSKqDbkNT8JSK31E/0/3136382e3139352e3135322e302f32322d3232203d3e20323635343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:2b:6e:52:ef:8e:4d:51:86:f1:90:06:74:e5:6a:da:26:cf:
65:be:d3:64:52:64:46:d2:0f:d3:04:93:ee:e5:bd:59:17:23:
da:05:77:2c:94:be:ed:46:5f:16:7e:41:84:ca:d4:1a:d8:8c:
83:fe:19:61:89:da:52:be:1d:dd:bc:88:e2:ff:ea:dd:88:3c:
19:8f:f2:f4:55:af:c3:b2:9b:4e:17:1d:d1:f1:6b:41:a1:46:
17:de:ea:0b:9c:77:cd:9f:40:f8:14:1c:fb:5f:86:e7:af:33:
36:75:aa:cd:65:3b:57:38:5e:2e:a1:8f:a0:84:30:50:ee:c0:
e3:86:95:2f:05:83:08:01:09:4b:59:c1:bc:ea:be:f1:22:80:
0d:d6:71:c5:8d:06:a2:fc:7f:cb:8a:a4:2b:70:52:68:79:86:
2e:80:de:4c:4f:47:c0:43:bb:85:f3:26:44:45:7c:08:81:5d:
13:e8:93:e8:4d:f6:22:f4:af:b8:d0:94:9f:70:74:53:38:12:
e4:f5:26:d0:7f:db:43:50:f8:1a:93:3e:62:2d:b3:a7:f7:c5:
09:7e:3d:8b:5c:1c:85:d4:7b:03:a8:ff:da:7c:60:09:25:af:
b2:b2:fd:bd:15:5d:94:18:4b:dc:6d:61:9a:04:d0:49:ab:c2:
a3:ac:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:07 2025 by rpki-client