Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa
File: 3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa (raw, json)
Hash identifier: r7n+PUe3E04IYF6bB/iDFr6AqmMisa5E3a5xlC+ellI=
Subject key identifier: 87:32:48:7D:C8:5E:36:A4:39:65:9A:00:3E:2C:F3:9E:60:AB:D9:EF
Certificate issuer: /CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Certificate serial: 61A482CCF513BF01C02162B6EF8473E98F0703C9
Authority key identifier: 21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa
Signing time: Tue 20 Feb 2024 13:52:14 +0000
ROA not before: Tue 20 Feb 2024 13:47:14 +0000
ROA not after: Tue 18 Feb 2025 13:52:14 +0000
asID: 263860
IP address blocks: 168.227.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a4:82:cc:f5:13:bf:01:c0:21:62:b6:ef:84:73:e9:8f:07:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21D786A9E3E9F6FD8067630222961B177E0DA001
Validity
Not Before: Feb 20 13:47:14 2024 GMT
Not After : Feb 18 13:52:14 2025 GMT
Subject: CN=8732487DC85E36A439659A003E2CF39E60ABD9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:9f:d3:07:e8:eb:1f:9d:c1:40:fb:b1:a9:
89:b6:fd:02:ce:18:75:20:d1:5c:d4:62:20:25:17:
09:23:45:0a:f2:5f:20:41:84:70:79:d6:8d:cc:15:
b4:8a:ed:67:ce:fc:2d:34:a7:be:b6:12:8a:a3:01:
82:47:e3:90:a3:79:c5:f2:4e:17:d7:5a:b2:43:06:
38:af:66:27:da:6c:72:a1:ab:8c:9f:e1:44:04:31:
c9:50:c0:5e:b9:0d:bb:98:0e:eb:5a:a2:27:92:cf:
25:0d:65:ae:a3:9d:0d:99:89:bf:6c:96:71:fe:76:
11:08:e3:75:9e:4a:80:b3:22:2c:93:a8:da:28:a2:
82:fc:de:2c:22:71:3f:c4:fd:d7:23:e1:44:61:a8:
7f:9a:b2:e6:95:47:c5:94:08:43:9d:cb:0f:a1:e6:
1b:64:00:c0:87:6e:31:13:e2:c1:21:31:f4:ea:c0:
bc:4a:84:2d:8f:47:2a:32:31:ea:42:be:c0:06:b7:
8b:ec:fb:66:a2:a6:03:76:1a:8b:8b:87:c2:51:74:
32:e9:fb:5d:68:08:35:aa:c4:7e:e9:1c:38:a0:c1:
0c:9e:de:35:08:c8:bd:8e:17:61:0d:3f:45:8d:45:
ec:19:48:12:a3:d8:91:f0:83:54:03:66:90:54:c1:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:48:7D:C8:5E:36:A4:39:65:9A:00:3E:2C:F3:9E:60:AB:D9:EF
X509v3 Authority Key Identifier:
keyid:21:D7:86:A9:E3:E9:F6:FD:80:67:63:02:22:96:1B:17:7E:0D:A0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/21D786A9E3E9F6FD8067630222961B177E0DA001.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D786A9E3E9F6FD8067630222961B177E0DA001.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/0/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.160.0/22
Signature Algorithm: sha256WithRSAEncryption
25:c4:82:9b:67:19:2e:3d:fc:a7:2b:0a:4f:4b:61:d3:89:a4:
85:4f:18:f0:c5:03:cd:c2:35:93:f6:27:23:7f:39:0d:db:db:
03:a3:23:b5:8b:8c:01:2e:2f:44:04:3d:05:62:d3:bb:09:81:
bd:a4:3c:36:38:1a:b7:a7:c9:6b:6d:0a:e7:18:25:30:24:1a:
72:7b:70:10:40:78:a2:a4:2a:d7:45:9e:20:71:a9:21:53:d5:
89:81:8d:60:37:f2:df:db:bd:91:0d:5d:2b:fd:ce:10:92:ba:
a1:0e:57:0b:ae:6f:3b:40:ee:79:a0:43:6e:26:d4:9b:f2:09:
45:03:ef:52:be:2e:e6:44:32:bc:51:ed:fd:cf:3c:67:88:3a:
3f:14:c4:ee:ba:6b:22:16:d8:d2:a0:3e:e6:b6:b8:56:86:60:
ce:4e:dd:72:8a:55:ec:2a:4b:70:a0:1d:98:71:18:65:54:65:
ef:a5:23:89:d3:d2:ba:20:e2:dc:46:e3:f0:e4:b5:18:89:6e:
b1:39:fe:8e:e0:df:9d:de:2d:eb:22:33:0a:39:6d:ac:37:be:
6e:15:92:e1:75:77:19:86:a7:97:db:f2:6b:23:ec:9d:87:2e:
45:a3:69:b6:fd:dd:97:0d:77:27:18:9f:95:c9:ac:93:e0:5d:
9a:14:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:48:58 2025 by rpki-client