Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
File: 3136382e3232372e382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: 9dmgBHg8B8LU8LaoQ2ELTnHAoAJI00mNvgLCjWzxi/Q=
Subject key identifier: EF:7B:31:12:BB:81:3A:96:80:41:84:87:16:73:7E:CB:C1:5C:74:53
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 7E5106AC9D31EDE4BCE526597FA32DF7A4598768
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
Signing time: Wed 12 Mar 2025 12:33:13 +0000
ROA not before: Wed 12 Mar 2025 12:28:13 +0000
ROA not after: Wed 11 Mar 2026 12:33:13 +0000
asID: 28201
IP address blocks: 168.227.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:51:06:ac:9d:31:ed:e4:bc:e5:26:59:7f:a3:2d:f7:a4:59:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Mar 12 12:28:13 2025 GMT
Not After : Mar 11 12:33:13 2026 GMT
Subject: CN=EF7B3112BB813A968041848716737ECBC15C7453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:dc:9a:ef:9f:65:ae:56:16:23:19:fc:0a:
e5:91:09:7a:56:77:0e:f0:81:ac:fc:d5:af:b3:87:
f8:46:24:e8:94:83:4e:57:71:80:f4:68:6c:c6:9a:
18:24:a3:c4:20:ba:07:66:8f:d1:ba:62:c7:12:ba:
d0:bd:24:fd:53:4d:76:e1:77:86:38:2f:7e:3e:ea:
d7:57:eb:35:a8:d8:6e:0f:da:b2:fe:6c:34:c1:00:
37:96:ed:bb:bd:b2:d4:91:5b:52:d9:c3:8e:3e:47:
f3:da:07:be:f4:25:da:2e:3a:53:e0:a4:89:0c:77:
ef:59:ab:b2:49:c2:ce:70:be:76:b5:8e:cb:25:17:
6b:bf:bc:7f:cb:8a:6c:d4:f5:cc:5c:80:e1:91:f7:
9d:ba:08:40:dd:23:dd:6a:be:c9:68:62:5c:88:b2:
24:00:9d:f9:80:95:71:0f:3c:74:1d:54:c9:56:e3:
93:ea:22:6d:80:7b:df:64:1a:46:1b:d3:48:dc:4c:
41:09:78:f7:7f:a6:fa:e8:df:e7:2d:51:ab:9d:a6:
a9:ee:be:2c:e8:21:6c:58:ee:f2:c0:71:71:66:91:
58:01:22:10:49:64:f4:10:0d:7b:74:d1:9f:6a:21:
55:d7:0a:e7:70:83:f7:16:97:cd:9d:24:1f:54:d0:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:31:12:BB:81:3A:96:80:41:84:87:16:73:7E:CB:C1:5C:74:53
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:cf:c9:4c:7e:e2:35:9f:88:1b:e2:7d:e3:f0:df:4f:5b:44:
d1:d0:76:8d:77:87:30:a0:18:12:42:c9:ec:ed:6e:5f:9b:bd:
1f:9e:00:1c:3d:c8:46:43:be:3b:c5:a4:1e:50:b0:2f:e5:c9:
9c:36:11:16:74:21:2e:d9:3c:bb:c3:58:ed:93:7d:40:d0:87:
a9:f9:a8:ee:9e:b2:32:48:49:58:e0:0a:eb:e3:b5:df:7b:2c:
00:ce:29:b4:08:33:4a:7d:11:1b:e3:78:34:44:86:3d:df:de:
a2:fc:e1:95:d8:22:07:57:7b:d5:b5:87:ef:35:7c:6c:cf:29:
d0:4b:ae:2e:ed:59:a9:59:19:5d:cf:72:bf:ae:39:53:f1:d0:
d6:f3:d1:1b:04:d0:fd:64:8b:d0:2c:a4:80:f0:2f:94:87:10:
03:5b:34:c2:5e:e6:fa:d8:39:22:07:bd:38:10:75:c6:79:6e:
81:3d:ea:b8:9a:cb:f9:ed:67:e1:66:3a:c7:dc:db:80:34:45:
81:f9:6e:0c:0c:de:1f:e4:4d:49:53:9b:bf:87:eb:a5:c3:d7:
60:1b:4c:db:c5:37:13:55:e7:0e:af:2d:7c:a8:71:31:fa:d3:
f0:a6:9d:87:a7:13:f2:bf:88:54:8f:77:10:d4:37:f2:7f:3e:
23:22:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:45 2025 by rpki-client