Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
File: 3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa (raw, json)
Hash identifier: SjQN7IzbS+nMZwOZ5htRf6EjUN3Gap8k2UPbN1rtCP8=
Subject key identifier: 9D:95:08:C3:89:D9:B9:BA:F8:28:E3:5C:6B:FD:69:8B:F5:10:17:F5
Certificate issuer: /CN=44B5BBA0335229473521F3DA7C0E55975284FD42
Certificate serial: 60B72095FEC56E5B9D8513B0E94CAF1EA1AE2568
Authority key identifier: 44:B5:BB:A0:33:52:29:47:35:21:F3:DA:7C:0E:55:97:52:84:FD:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44B5BBA0335229473521F3DA7C0E55975284FD42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
Signing time: Mon 25 Mar 2024 15:41:28 +0000
ROA not before: Mon 25 Mar 2024 15:36:28 +0000
ROA not after: Mon 24 Mar 2025 15:41:28 +0000
asID: 266553
IP address blocks: 160.238.148.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:20:95:fe:c5:6e:5b:9d:85:13:b0:e9:4c:af:1e:a1:ae:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44B5BBA0335229473521F3DA7C0E55975284FD42
Validity
Not Before: Mar 25 15:36:28 2024 GMT
Not After : Mar 24 15:41:28 2025 GMT
Subject: CN=9D9508C389D9B9BAF828E35C6BFD698BF51017F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:38:1d:9e:3a:7e:f5:e2:e2:f1:ec:42:c6:
c3:ef:35:2d:1c:70:3c:51:bf:c3:11:4f:f3:02:78:
bb:82:22:11:f6:c5:97:ea:92:15:94:04:f9:00:0a:
7c:b8:c6:e3:39:e7:75:2a:72:6b:e3:eb:6e:05:68:
7e:d3:92:2b:46:eb:9d:b9:71:d0:70:8c:80:5c:e4:
b2:5f:25:83:be:1d:db:7b:a0:5a:06:ba:f3:f7:03:
f9:17:e6:1e:8e:c6:32:f1:5f:ac:81:b3:34:e6:10:
43:9d:ac:1d:8e:20:1b:86:ae:45:db:f4:a3:26:25:
bc:9f:06:55:cd:75:e8:eb:a4:3e:53:65:5a:e9:6c:
20:11:2e:9c:24:d9:cd:fb:6f:96:90:3e:a2:00:f4:
95:e3:8d:6e:29:86:e2:7f:32:aa:ae:fc:32:2d:62:
3e:84:38:7a:71:da:84:51:d2:ab:c1:69:f4:a2:fc:
ac:6d:a4:29:7f:15:cb:c5:7d:c1:fb:03:d2:e6:41:
c7:a4:f6:8e:f2:49:7a:20:f6:f7:ca:cf:d6:91:2c:
43:24:43:83:4b:c6:cd:2d:66:2b:aa:d6:5b:d7:b0:
ad:8b:55:ea:19:f7:d0:6e:01:26:1f:7c:14:7d:27:
17:db:56:5c:88:b6:f7:93:b7:a3:e2:06:14:42:3a:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:08:C3:89:D9:B9:BA:F8:28:E3:5C:6B:FD:69:8B:F5:10:17:F5
X509v3 Authority Key Identifier:
keyid:44:B5:BB:A0:33:52:29:47:35:21:F3:DA:7C:0E:55:97:52:84:FD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/44B5BBA0335229473521F3DA7C0E55975284FD42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44B5BBA0335229473521F3DA7C0E55975284FD42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.148.0/22
Signature Algorithm: sha256WithRSAEncryption
36:8c:69:f4:31:16:06:f6:3a:8e:6f:62:2a:75:5a:10:cb:2c:
1a:ab:32:c0:86:4b:14:21:c8:66:a3:dc:7a:e4:4e:1e:f9:bb:
bc:d8:4b:0d:19:86:95:b0:11:59:9e:e8:c1:99:b6:74:3f:0c:
da:0d:bc:00:27:12:f9:99:e2:63:28:f8:6c:6a:d6:09:2d:fb:
6c:4f:69:e9:8d:ba:c0:6f:b9:22:0c:63:ee:09:76:1d:a5:ea:
0b:b7:d1:e7:0f:74:cc:54:1a:61:0d:91:52:13:86:59:ad:af:
09:7b:29:ea:cb:ff:54:07:3f:3e:0f:f1:01:6c:85:d0:6e:ea:
2b:ba:18:3c:89:30:91:2d:8a:cf:ea:ba:eb:19:d6:be:b2:f3:
0f:06:ec:0c:7f:c0:e7:55:1b:53:83:ba:5c:9f:6b:5b:2f:70:
02:3f:91:1a:3c:69:cb:e1:d3:69:17:4c:c1:f3:5e:4a:26:5e:
53:27:4b:28:e0:07:d4:bc:c4:9e:3c:aa:d7:cc:f5:eb:73:29:
f7:7c:74:f0:e1:fb:96:ac:88:e1:96:a4:8c:9e:f6:8a:69:c5:
3f:24:9c:2f:98:81:2a:c4:2e:55:be:b6:85:f1:c0:62:33:99:
d4:c2:6f:ae:e4:f0:6a:d3:f2:f0:f0:51:c4:0e:16:ed:62:08:
2d:9a:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:32 2025 by rpki-client