Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
File: 3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa (raw, json)
Hash identifier: D/ao9+LhkLOFX0EY1nFdqxg5+2fNlSmj/ONwQq4X+Fw=
Subject key identifier: 5B:64:FB:E8:B4:1A:76:76:D5:FD:8B:E3:BF:CF:16:C4:5B:17:A8:14
Certificate issuer: /CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Certificate serial: 1589F71A7B171BB6193F640DA7DB6298CA8F87A5
Authority key identifier: 83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
Signing time: Sat 16 Mar 2024 12:12:57 +0000
ROA not before: Sat 16 Mar 2024 12:07:57 +0000
ROA not after: Sat 15 Mar 2025 12:12:57 +0000
asID: 267501
IP address blocks: 201.182.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:89:f7:1a:7b:17:1b:b6:19:3f:64:0d:a7:db:62:98:ca:8f:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Validity
Not Before: Mar 16 12:07:57 2024 GMT
Not After : Mar 15 12:12:57 2025 GMT
Subject: CN=5B64FBE8B41A7676D5FD8BE3BFCF16C45B17A814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:44:f6:46:39:2f:71:25:2a:0c:e6:a4:81:
20:7d:44:0a:5a:3f:8a:54:85:7e:c0:ab:ce:39:35:
c4:33:03:7c:0c:c6:fa:7e:6a:a8:42:c0:4f:fc:4f:
7d:26:de:a9:37:29:43:40:c0:80:47:88:91:d7:75:
38:80:8a:5c:91:27:fd:56:65:36:76:5a:ae:7a:58:
0c:3a:8e:62:fa:0b:fc:e6:e0:df:4c:a6:16:91:de:
e7:65:d3:37:ad:88:02:63:09:5d:32:55:58:11:53:
4e:77:ea:41:df:53:9a:47:db:b4:30:75:32:a7:4c:
8f:db:79:b2:6a:8d:4c:56:a4:0d:9e:96:fa:6a:31:
6b:a1:f2:35:3c:e6:eb:32:0b:0c:66:77:8a:4b:c6:
af:e6:9d:18:31:4f:31:8c:7c:c1:90:5e:7f:56:30:
1d:c7:86:04:30:0c:d7:20:54:af:2d:0e:2a:75:9f:
32:1a:c4:9c:60:c0:3d:18:5b:f3:bc:e6:8a:40:cb:
bc:67:c6:81:ce:1e:15:00:78:90:b7:64:f8:67:02:
de:70:9c:95:da:1e:90:4e:04:84:12:bd:c8:c2:08:
26:44:e0:04:12:48:22:c7:ed:c0:56:53:d6:20:91:
8c:98:63:11:89:f8:be:d8:9c:d4:01:b0:ee:d1:0d:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:FB:E8:B4:1A:76:76:D5:FD:8B:E3:BF:CF:16:C4:5B:17:A8:14
X509v3 Authority Key Identifier:
keyid:83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.66.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e6:61:fe:bf:5f:98:ea:b8:36:fc:63:99:92:59:b1:1b:c9:
d2:ad:e8:c1:bb:be:1e:20:89:81:bf:49:e5:bf:5a:ac:27:ee:
0e:b0:b6:d6:22:5a:0f:19:e6:be:89:40:06:da:b8:4c:ae:ec:
ee:8a:f1:a3:93:24:2b:62:23:9d:3f:1e:71:87:3d:ea:84:9a:
e7:d8:c1:d6:7e:f3:4f:4e:10:13:74:bb:64:73:75:3b:8f:e5:
c7:66:55:58:4d:ec:9a:43:3e:ba:41:d2:3f:25:6a:39:77:93:
73:e0:51:d7:72:43:b7:ca:0a:8a:2f:60:b7:fc:6d:50:cf:99:
a0:40:aa:5f:8b:13:5d:4b:68:49:54:19:ae:ba:0c:4c:7f:24:
08:d8:91:a4:0d:4b:67:3f:d8:30:c7:e7:20:05:aa:99:32:ac:
29:a8:1e:fc:60:55:76:a4:62:1b:45:91:03:1b:7c:3d:36:7e:
0b:eb:6d:6e:80:d8:78:4c:24:12:ae:bb:47:5b:53:19:ee:15:
4b:d7:09:38:da:b0:e1:15:4a:89:7e:3f:85:bc:e6:b8:d4:14:
22:98:fe:cf:35:7d:61:02:0e:44:28:3e:4d:0b:d2:d0:56:22:
b5:fe:e7:63:23:de:72:cf:11:ca:24:ef:20:6c:1c:16:f5:02:
96:1d:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:29 2025 by rpki-client