Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230322e302f32342d3234203d3e203238323130.roa
File: 3136382e3232382e3230322e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: eGIo/EHBJnykegLvIqcUmoU+T5MnGB+0DbuoVy60VMc=
Subject key identifier: 10:FA:25:7B:6C:CB:A4:56:11:20:62:C8:8D:80:5E:3C:5E:6F:64:F2
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 60950ABF54BF9F4C54B1FE1773A68B85C88B67E3
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230322e302f32342d3234203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:23 +0000
ROA not before: Wed 28 Feb 2024 13:58:23 +0000
ROA not after: Wed 26 Feb 2025 14:03:23 +0000
asID: 28210
IP address blocks: 168.228.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:95:0a:bf:54:bf:9f:4c:54:b1:fe:17:73:a6:8b:85:c8:8b:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:23 2024 GMT
Not After : Feb 26 14:03:23 2025 GMT
Subject: CN=10FA257B6CCBA456112062C88D805E3C5E6F64F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:a7:c9:95:a6:61:08:00:f4:7e:16:39:3b:
e1:19:f2:dc:72:d7:4a:d0:90:23:99:7b:2f:58:21:
6d:c5:e3:78:fd:78:f6:71:80:18:d5:1e:48:67:9f:
c2:ee:e4:58:94:69:0a:dc:30:bf:c6:b4:5c:65:d9:
c1:a3:aa:50:c8:f1:96:91:b3:8b:4e:bd:ff:2f:7b:
43:20:10:3f:04:17:31:6f:12:ca:8b:bd:85:2f:a4:
82:f0:cd:33:8d:bc:61:69:ea:96:84:39:27:47:20:
bb:b9:1b:19:71:fc:d8:cf:5c:c5:8a:68:ee:e0:25:
ee:cc:68:89:c1:c3:c4:63:fe:84:38:51:44:fc:da:
ae:93:0d:bb:76:84:16:02:cf:3a:19:52:9f:44:3b:
ad:25:a8:0c:b8:1f:06:2f:0b:19:d6:0a:ec:54:67:
e8:19:45:13:9b:89:9b:9c:3d:4c:c7:07:71:ec:cf:
4e:b8:32:7b:29:87:a7:7f:94:91:8c:e5:92:e7:ba:
e4:33:79:b2:00:45:f3:43:9f:6f:69:14:d3:38:66:
b1:dd:60:fa:73:f6:5f:08:82:82:6a:61:3f:e6:8a:
d2:43:cc:67:29:13:eb:60:30:50:ad:c9:2e:da:7c:
11:39:6f:9f:54:39:58:86:65:fa:42:f2:8d:15:26:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:25:7B:6C:CB:A4:56:11:20:62:C8:8D:80:5E:3C:5E:6F:64:F2
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3136382e3232382e3230322e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:49:61:04:92:02:22:cc:b8:3a:43:37:7e:ad:18:59:4a:ea:
73:ba:d4:13:c7:13:39:ef:1a:0d:17:6c:13:64:74:1c:25:86:
ff:4a:57:db:85:80:9b:54:fb:a4:e6:49:34:49:ae:cb:b3:c7:
60:aa:81:8e:0d:29:cf:aa:b7:71:b6:b3:48:4f:49:7c:de:e3:
dd:2f:6f:3e:11:f9:76:52:b1:72:b3:da:f0:3c:9a:22:8a:20:
9d:f0:16:94:09:c2:29:cf:35:3b:0d:43:31:b8:0c:5a:1f:49:
6e:75:a6:d7:d6:1b:b2:64:15:39:3a:0c:af:18:36:5d:39:b2:
d9:97:43:94:ac:a9:07:95:2f:2a:eb:96:0f:78:6c:a0:ef:c4:
76:59:9c:60:cf:c8:3f:1c:a4:d2:9e:56:39:2c:c6:3a:26:91:
15:ba:45:fa:1e:d6:37:c8:4a:88:8f:08:34:24:61:b7:98:f8:
c7:bb:f4:68:ae:8c:75:41:e3:d5:08:b2:14:0d:b5:57:2a:4b:
4c:c7:4c:94:bb:0e:ab:26:5f:47:f6:95:ac:94:5a:d0:d9:31:
2c:65:67:d7:23:33:47:47:19:d7:9a:63:89:d5:2f:8d:41:15:
3e:b9:82:30:e0:80:00:d0:9a:23:f3:86:86:31:d7:72:d3:c8:
d9:f0:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:03 2025 by rpki-client