Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
File: 3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (raw, json)
Hash identifier: ++6D9p5e2bAvr8bdBnmFrtwQsAnPXHS9a7ZLOY2gfic=
Subject key identifier: 0E:9D:40:3F:E3:58:F4:6E:61:F7:41:28:D2:28:E0:87:04:5E:9C:03
Certificate issuer: /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial: 473502281969FF87EAD79EC3638AD392ACCC7AEA
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
Signing time: Thu 06 Mar 2025 12:03:24 +0000
ROA not before: Thu 06 Mar 2025 11:58:24 +0000
ROA not after: Thu 05 Mar 2026 12:03:24 +0000
asID: 263582
IP address blocks: 168.196.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:35:02:28:19:69:ff:87:ea:d7:9e:c3:63:8a:d3:92:ac:cc:7a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Validity
Not Before: Mar 6 11:58:24 2025 GMT
Not After : Mar 5 12:03:24 2026 GMT
Subject: CN=0E9D403FE358F46E61F74128D228E087045E9C03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:20:10:39:d0:ab:0a:87:20:65:ac:6c:ac:
fa:60:bf:02:b6:96:2c:c2:09:d5:08:0d:34:14:88:
d3:01:24:45:c7:0a:43:98:a4:fa:3d:84:a0:c2:74:
d8:bb:4a:63:78:a3:f5:be:23:77:5e:0e:ee:fc:50:
bf:07:c1:c1:cb:9c:d8:b8:f8:b0:86:2f:70:a1:18:
fc:ee:4b:a8:82:02:59:87:d2:d6:30:e9:57:68:c3:
d9:80:9f:54:98:54:e5:d5:c2:46:49:58:e7:04:d7:
4a:6c:90:e2:2e:38:89:3d:31:8f:c8:de:4b:0b:fa:
de:b7:68:58:0a:bf:12:a7:23:57:88:99:a4:54:00:
64:7c:cf:39:23:c1:23:e5:9d:e1:ee:25:fa:e1:42:
d5:c3:82:ad:7b:93:fc:34:18:50:56:bb:93:60:ff:
5b:6a:71:fd:1f:fc:2f:da:dc:f7:03:6e:41:fa:60:
b3:10:7f:fc:b8:1c:8d:a3:eb:8b:9c:0d:5d:0d:33:
db:dd:29:c4:ef:51:a8:1d:3f:4c:7c:ad:01:af:3e:
1f:1d:a5:3f:35:7e:32:f0:ae:6e:1a:4f:68:52:40:
80:10:5b:59:35:da:6a:55:9e:fa:30:fc:7c:1c:e3:
32:4d:7f:23:b5:0f:09:c8:c6:ee:9a:53:92:a2:3b:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:40:3F:E3:58:F4:6E:61:F7:41:28:D2:28:E0:87:04:5E:9C:03
X509v3 Authority Key Identifier:
keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d6:1a:87:b9:d6:28:13:27:08:e7:08:ac:83:f5:fd:55:ac:
99:b0:4d:5f:cb:12:2f:72:9d:58:dc:c4:b2:64:db:12:0c:8d:
6c:da:d5:ed:c6:23:07:f7:aa:33:df:e9:1f:dc:98:ab:b9:2e:
66:36:20:eb:b4:02:92:6b:e3:d1:ec:3d:04:d7:38:b7:24:08:
bd:79:2b:a5:e8:3e:80:e5:83:d7:53:f6:27:a8:da:c2:aa:c0:
b9:d8:49:12:da:0b:e8:d4:66:a8:a0:75:f8:ec:f0:d4:3e:1b:
12:97:78:5d:51:f9:6f:fd:d4:b4:76:7e:44:4c:62:05:b2:b5:
8b:16:f1:b4:aa:22:f3:9a:54:2e:b3:28:5b:5a:58:86:83:44:
1d:74:ad:ff:34:db:3e:c0:38:2d:ac:f8:71:5b:74:f8:e3:62:
fd:da:d1:95:ac:df:40:e1:50:c4:5b:31:c4:e3:22:76:ca:61:
4c:f6:67:eb:1a:2a:66:bd:21:0a:36:3f:aa:ab:c9:e2:df:fd:
e5:20:f9:f2:5d:18:08:84:75:8d:42:76:e3:49:2f:b6:5b:72:
27:a9:1d:60:47:d1:89:1b:3b:f0:dc:42:67:8b:dd:9b:85:63:
19:0e:ac:cd:4a:a4:68:aa:e7:b7:e9:73:e9:d2:90:b4:95:d5:
c2:0b:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:07 2025 by rpki-client