Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/3136382e302e33362e302f32322d3234203d3e20323635323434.roa
File: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (raw, json)
Hash identifier: x5WhdzmXZPx6WYJNADD+ey0LE9HHI6mxdq+6M833JYQ=
Subject key identifier: 9B:A3:30:53:0D:0F:A6:32:23:92:BA:69:9B:59:B8:D2:4F:9D:05:E4
Certificate issuer: /CN=DF45F3BB0F8ED9426CD418F08B572024F3B57C47
Certificate serial: 3BCAC5D1599D4856A3A3B8883DCA7B652CCEA729
Authority key identifier: DF:45:F3:BB:0F:8E:D9:42:6C:D4:18:F0:8B:57:20:24:F3:B5:7C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/3136382e302e33362e302f32322d3234203d3e20323635323434.roa
Signing time: Fri 31 Jan 2025 00:25:08 +0000
ROA not before: Fri 31 Jan 2025 00:20:08 +0000
ROA not after: Fri 30 Jan 2026 00:25:08 +0000
asID: 265244
IP address blocks: 168.0.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ca:c5:d1:59:9d:48:56:a3:a3:b8:88:3d:ca:7b:65:2c:ce:a7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF45F3BB0F8ED9426CD418F08B572024F3B57C47
Validity
Not Before: Jan 31 00:20:08 2025 GMT
Not After : Jan 30 00:25:08 2026 GMT
Subject: CN=9BA330530D0FA6322392BA699B59B8D24F9D05E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:28:47:b9:01:2c:c9:08:2c:79:e8:f2:c8:
c6:aa:de:81:97:84:f8:f0:f2:e8:66:88:f4:57:76:
6b:83:be:13:8b:24:77:42:69:82:9d:31:84:59:95:
84:99:51:5f:ad:93:7f:27:b5:08:bc:3b:21:6e:62:
ef:87:94:8c:bb:af:60:04:91:d2:fd:ae:5c:6f:cc:
15:c8:94:e8:32:71:7e:5a:11:dc:4c:62:92:dc:43:
71:69:6e:6e:21:e2:19:fe:6c:23:37:83:15:d4:32:
ce:52:e5:f0:01:5b:40:18:7c:80:ee:d9:76:96:27:
7f:44:ae:60:ae:2e:10:cd:f7:dd:95:9c:96:b9:6a:
94:33:be:3c:dd:ce:bb:60:bb:80:01:3d:bb:48:ab:
29:a4:8a:1c:d5:f0:17:a2:e5:56:ec:0b:0a:af:ef:
e8:95:32:12:bb:ea:3b:c7:22:d8:d3:6f:4a:5e:42:
da:02:01:25:d5:ea:82:92:5b:1a:8d:ed:71:71:6f:
31:4c:b0:b0:e3:f0:07:22:0a:e9:68:10:78:36:b9:
19:96:15:6c:6c:b2:78:2b:f9:d8:99:d0:f2:16:e2:
b2:68:e1:25:08:52:ae:b7:c1:6c:e6:e5:a6:25:ac:
cb:9a:22:58:19:b2:b8:4d:e4:ce:05:40:90:b5:3b:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:30:53:0D:0F:A6:32:23:92:BA:69:9B:59:B8:D2:4F:9D:05:E4
X509v3 Authority Key Identifier:
keyid:DF:45:F3:BB:0F:8E:D9:42:6C:D4:18:F0:8B:57:20:24:F3:B5:7C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/3136382e302e33362e302f32322d3234203d3e20323635323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d1:6a:95:0c:0e:59:13:cd:91:f2:11:30:38:9c:5c:c5:d9:
f5:88:11:90:df:35:12:ff:04:c5:30:ab:60:dc:aa:be:27:04:
68:90:1e:35:8f:b4:95:85:bc:de:85:16:0e:2f:1b:52:3d:94:
77:22:48:07:b5:40:3e:c1:5b:3c:74:ab:b1:23:62:60:8f:e4:
c5:b6:b3:ed:07:f3:11:2a:e1:bf:88:27:84:bd:5c:8c:ca:e7:
fb:e7:99:bc:32:05:74:21:e8:74:5d:66:91:76:77:5d:6a:91:
7d:56:b4:02:b8:4e:13:4f:80:f8:17:66:af:61:ee:f7:81:9c:
16:0b:03:87:eb:94:54:71:5d:96:69:3a:d6:3d:5d:13:66:b1:
98:a3:38:52:c9:70:51:fc:8b:07:b6:cd:e0:d1:13:e1:3d:de:
5c:19:40:d9:ce:d3:e8:c3:40:fb:bd:0b:10:cc:41:82:d7:00:
e2:ea:42:40:e6:33:8c:a5:ce:f5:8e:ce:5a:b8:70:b7:78:0b:
4a:1f:20:af:24:ac:df:39:59:df:48:c1:3d:2b:c2:95:30:4b:
66:23:a5:d4:32:28:51:b4:8b:14:5f:62:d9:ce:10:e0:e8:ea:
96:bf:2d:69:01:e1:d8:00:0e:f5:25:0d:bd:a8:e2:ef:5f:3b:
03:e0:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:02 2025 by rpki-client