Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139392e302f32342d3234203d3e20323634393438.roa
File: 3136382e3233322e3139392e302f32342d3234203d3e20323634393438.roa (raw, json)
Hash identifier: U57xENTKrQG2HPq+NKAokZOxqRU08xuf9osMYg1ieV8=
Subject key identifier: F0:49:51:BD:B8:D1:12:57:98:5A:C9:10:81:C0:8C:CB:61:B1:5E:42
Certificate issuer: /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial: 2E32A4A52162B833D54C3307DC95E3A8E014B9DF
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139392e302f32342d3234203d3e20323634393438.roa
Signing time: Wed 15 Jan 2025 20:05:54 +0000
ROA not before: Wed 15 Jan 2025 20:00:54 +0000
ROA not after: Wed 14 Jan 2026 20:05:54 +0000
asID: 264948
IP address blocks: 168.232.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:32:a4:a5:21:62:b8:33:d5:4c:33:07:dc:95:e3:a8:e0:14:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Validity
Not Before: Jan 15 20:00:54 2025 GMT
Not After : Jan 14 20:05:54 2026 GMT
Subject: CN=F04951BDB8D11257985AC91081C08CCB61B15E42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:5b:c3:d5:2a:ec:2c:c9:4b:3d:2c:09:0c:
3d:05:cd:b6:67:4a:3e:a8:73:5b:f2:ce:26:a8:4c:
67:cd:d7:52:ab:f3:28:73:73:4a:86:d7:7c:f1:8c:
7e:30:f1:3d:ca:4c:57:ac:4f:1c:d2:f5:dc:31:20:
85:ba:3d:64:46:c9:87:3e:7f:1b:df:d8:ec:d1:e7:
ac:93:67:f0:3c:5f:57:79:a0:fb:34:3f:bd:1d:e5:
54:b4:22:d2:1a:3d:ed:b8:8c:f7:fa:e6:26:d1:63:
e1:19:83:0d:f7:5e:54:f0:51:88:1d:a3:ed:3f:70:
94:ef:6a:79:8c:43:e4:8f:20:e1:d8:66:a5:af:6c:
4e:ca:59:c6:fd:43:d9:1e:75:5e:29:37:5d:f0:92:
62:39:2f:03:03:89:b0:ce:12:36:6c:33:fb:d0:ca:
14:40:cc:08:5e:5c:99:4d:f1:6d:9a:ac:c2:83:52:
97:de:b8:7e:b9:8b:0a:75:41:00:6c:25:4d:15:80:
de:69:f3:d9:5b:c0:fa:9e:e2:ee:07:16:99:0e:d5:
bb:d4:23:4b:b8:0e:24:e4:e8:5f:de:ab:11:65:39:
6b:8b:09:09:21:31:a2:9e:67:ec:39:4a:5a:36:fe:
14:5b:2c:96:53:88:51:0e:51:9a:05:18:5c:e2:4e:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:49:51:BD:B8:D1:12:57:98:5A:C9:10:81:C0:8C:CB:61:B1:5E:42
X509v3 Authority Key Identifier:
keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139392e302f32342d3234203d3e20323634393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:39:86:5a:07:cd:52:27:e6:a5:f4:5a:80:7a:d7:f9:da:f9:
be:d7:63:7c:10:50:02:ba:62:99:08:59:39:a5:fd:13:e9:17:
10:04:35:c3:96:65:44:c9:e5:ea:a8:52:fd:bc:1c:6a:b6:04:
dc:00:af:3c:d0:06:24:76:21:3a:4f:20:54:2a:4c:2f:93:3a:
14:e2:79:83:90:40:20:d6:e0:36:82:8f:7a:1e:91:66:07:a0:
a0:5b:68:ee:1e:9b:48:66:37:d9:12:a5:40:28:0e:e2:46:b9:
78:b4:97:c0:9e:37:18:94:bc:b5:49:43:97:5a:c2:2e:09:e4:
42:e7:44:26:f0:04:1f:f4:d6:b7:03:8e:e1:71:fd:ad:e7:19:
b7:3f:22:3a:18:be:5b:30:d9:76:73:0a:0b:88:d8:5c:b1:94:
11:90:59:a4:8d:ba:bd:70:79:4a:dc:5b:cb:3d:6d:71:b7:60:
c5:cd:36:2f:ad:ed:22:09:62:56:3d:bd:fb:a8:01:89:dc:97:
45:29:a6:33:cd:d2:2b:57:85:44:a0:ad:1c:ee:2f:fb:4b:f4:
35:36:75:17:0c:36:1a:a8:f9:e9:7f:b8:fb:82:bc:ab:e5:0b:
08:12:77:76:0e:8e:b7:e0:8f:13:27:d7:2b:15:c0:ab:5c:50:
60:2b:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:41:33 2025 by rpki-client