Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
File: 3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa (raw, json)
Hash identifier: bNC7hLxSy94tr1Jt4RYMulobon8N53RVDHKAHijX/iU=
Subject key identifier: 8E:CE:84:B6:49:38:0B:E0:9A:E2:BC:D6:18:90:25:21:F0:C9:83:17
Certificate issuer: /CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Certificate serial: 6159CF9650E83E35715CB88509098CC1D6927179
Authority key identifier: 83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
Signing time: Sat 16 Mar 2024 12:12:48 +0000
ROA not before: Sat 16 Mar 2024 12:07:48 +0000
ROA not after: Sat 15 Mar 2025 12:12:48 +0000
asID: 267501
IP address blocks: 201.182.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:59:cf:96:50:e8:3e:35:71:5c:b8:85:09:09:8c:c1:d6:92:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Validity
Not Before: Mar 16 12:07:48 2024 GMT
Not After : Mar 15 12:12:48 2025 GMT
Subject: CN=8ECE84B649380BE09AE2BCD618902521F0C98317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:35:ac:ea:cc:d3:8c:fe:84:6c:1e:ba:62:
7d:4e:40:8d:d6:f9:2d:59:cf:9c:ee:f3:95:9d:7e:
1f:76:48:61:ac:ab:a3:9b:6d:ad:ea:e2:83:7f:ae:
23:eb:cd:94:77:92:25:6b:d4:30:aa:b7:d2:ab:85:
73:ad:89:f7:f4:d3:d7:b5:00:ca:38:1b:e3:c0:4e:
72:3b:45:8f:3d:7d:1d:fb:b2:fb:ba:88:d3:9b:12:
3d:05:36:2a:fc:81:4f:60:29:fe:3c:ea:73:6b:e7:
2d:21:af:5a:df:c7:9f:be:b4:be:ac:7b:36:5c:ce:
64:73:da:cc:b9:e3:03:d1:7b:cb:6d:1e:38:de:9d:
2a:6c:36:87:bd:19:8f:7f:31:08:09:b4:ff:76:ba:
2d:cf:da:1c:78:0f:1e:2d:a9:6c:62:05:63:d1:5f:
54:7d:f3:72:55:55:cf:71:7f:bf:ec:ab:2d:51:af:
06:ea:4b:45:b8:77:6f:97:bb:27:b2:f0:18:5c:9f:
73:5b:38:03:66:c3:4b:49:29:ad:ef:4a:6d:46:4e:
ae:fc:1b:cd:da:03:25:b2:24:f9:2f:71:d7:da:b2:
0f:91:89:d5:0c:a7:f1:30:01:22:a2:6d:b1:ca:78:
8c:d4:91:57:ca:8d:62:5d:bf:05:95:5e:13:b0:7c:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:84:B6:49:38:0B:E0:9A:E2:BC:D6:18:90:25:21:F0:C9:83:17
X509v3 Authority Key Identifier:
keyid:83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36342e302f32322d3232203d3e20323637353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.64.0/22
Signature Algorithm: sha256WithRSAEncryption
08:b9:c9:8b:a3:e0:24:01:d9:27:95:09:e5:7f:75:9d:7f:e9:
31:56:75:ab:5c:5e:5d:ed:6f:45:0c:c3:e2:04:d7:09:82:30:
e5:fd:bc:eb:02:4b:91:d3:87:85:e8:b3:7f:b5:0b:02:a9:84:
a9:20:f3:4b:c7:4d:ef:52:4d:6c:4a:6c:e5:e9:0b:f8:a7:17:
97:90:43:11:5b:9f:11:50:de:c6:d7:e1:c1:46:36:85:a8:a5:
35:75:12:aa:59:a0:61:3b:42:fa:88:14:64:06:94:c0:2b:80:
c0:85:de:d7:7b:53:cd:56:db:e5:78:2a:e7:ec:b3:6f:23:30:
91:9e:62:76:82:72:c4:c2:9c:ce:e5:50:88:17:d0:b7:5a:9f:
48:bf:15:84:00:29:2f:21:1f:46:9c:40:20:f1:d7:95:1b:d0:
f8:3e:2b:61:d0:27:bb:20:64:4e:fd:c4:65:05:f9:79:29:92:
94:74:28:86:a7:c4:55:d5:cb:31:b2:cc:69:08:8d:e8:e6:a1:
da:72:b2:7d:75:5d:0b:a4:b6:3f:6a:cf:b0:0b:43:a9:f6:43:
24:80:24:32:26:83:56:d4:14:c3:58:e2:ee:83:16:e0:0f:2c:
f1:66:dc:1a:41:12:c3:dd:1b:21:b4:3f:ea:31:f7:c0:8f:a8:
5a:b5:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:53 2025 by rpki-client