Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33382e302f32342d3234203d3e20323638313932.roa
File: 3136382e3138312e33382e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier: KS21uU3Jo/Dtj/j7unFaJCxFNZPUDatxCleTESF908k=
Subject key identifier: DD:B1:74:60:9F:28:E1:FA:36:53:26:93:71:1B:3A:79:2D:F1:4F:FF
Certificate issuer: /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial: 02A3E983BDC0182B68EC5D319AB25EED26CFD1DC
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33382e302f32342d3234203d3e20323638313932.roa
Signing time: Mon 14 Aug 2023 15:58:35 +0000
ROA not before: Mon 14 Aug 2023 15:53:35 +0000
ROA not after: Mon 12 Aug 2024 15:58:35 +0000
asID: 268192
IP address blocks: 168.181.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a3:e9:83:bd:c0:18:2b:68:ec:5d:31:9a:b2:5e:ed:26:cf:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Validity
Not Before: Aug 14 15:53:35 2023 GMT
Not After : Aug 12 15:58:35 2024 GMT
Subject: CN=DDB174609F28E1FA36532693711B3A792DF14FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:0b:54:b1:7e:b2:24:fa:f2:9d:f1:ce:a5:
74:5d:e0:d6:92:64:d4:e8:26:fe:c4:d5:d1:6e:87:
e9:0c:d2:1a:6e:d1:d5:6b:b5:41:80:7b:65:a4:fd:
c4:57:15:8c:36:e9:ce:ea:87:80:af:ac:00:74:81:
dc:4b:54:3b:5d:dc:c5:f3:d1:8e:a2:4b:6a:f0:d9:
63:e7:9a:9c:0b:da:68:2d:9c:2f:ae:af:50:a1:fb:
1a:be:36:75:18:c0:57:e0:39:de:20:3d:ba:a0:7e:
28:89:ae:be:26:3a:b1:2e:11:71:06:85:4b:03:51:
ea:da:61:ee:7f:76:6f:36:3a:7a:23:5d:c8:bf:95:
7b:c5:91:29:46:d3:e0:67:7c:6a:38:97:89:87:51:
99:c9:8c:6e:dc:fa:7d:23:99:19:9a:2b:1a:29:d1:
dd:c8:1e:4f:56:07:50:1a:87:50:71:8a:08:81:51:
34:de:18:e2:7f:63:9d:5e:3a:f9:dd:8e:a5:11:e8:
42:ef:eb:9c:e2:0c:65:c0:c5:fe:f3:fe:c5:88:0d:
ae:2a:e2:c5:5f:a0:13:aa:cf:3b:44:46:32:3d:9a:
c0:10:d3:0b:25:db:01:3c:c1:2d:e9:59:4e:19:34:
30:6a:f4:14:eb:76:8d:d9:08:87:0b:44:0b:74:6d:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:74:60:9F:28:E1:FA:36:53:26:93:71:1B:3A:79:2D:F1:4F:FF
X509v3 Authority Key Identifier:
keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/3136382e3138312e33382e302f32342d3234203d3e20323638313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c6:dd:38:ee:db:6a:10:1e:e8:ae:8f:67:df:18:ec:5e:16:
af:07:1b:d2:b3:18:4a:60:e0:be:de:d4:df:3c:a0:08:4b:8b:
a4:88:a0:74:06:49:93:74:df:43:73:e3:59:fb:41:d3:68:e5:
4d:cb:16:70:bf:97:55:e8:19:72:4e:b3:80:5a:5e:e6:d9:01:
6e:fa:eb:b8:75:a9:82:78:e1:91:9a:b7:72:22:82:5a:db:e0:
9b:ff:4d:c3:85:d2:db:26:df:40:d2:3d:c6:37:75:08:cf:1f:
31:e9:50:87:0f:f3:72:a6:0b:de:12:44:b1:98:b6:6a:a8:88:
10:e5:90:b4:7d:aa:c2:8c:65:22:c0:1b:d2:5e:de:f3:4a:1c:
b8:f6:b6:5d:d6:cf:69:32:92:ec:ca:f5:ee:4a:be:40:f5:d4:
e0:1d:71:ab:b0:e2:88:1d:f8:4e:69:1a:20:e5:2d:ee:4a:c7:
ff:e1:92:bc:74:96:a8:6c:2c:44:f8:c1:52:98:64:98:51:da:
41:03:f6:2a:e2:b6:5c:12:53:f6:77:e6:d5:bc:7c:e3:f1:46:
1c:aa:61:14:8b:8e:c1:be:77:af:eb:1c:98:a8:1c:71:93:80:
d6:35:b9:07:2c:62:a8:61:24:7f:f9:6f:75:10:71:f5:28:a5:
52:d0:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:47 2025 by rpki-client