Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
File: 3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa (raw, json)
Hash identifier: aY7d/3II/u6pQgmL+lBM77U4ux1yWaUQWqjku+ZtQ1s=
Subject key identifier: DD:62:C3:8A:FF:46:57:A4:72:D6:39:13:1E:88:0F:31:C1:10:25:FA
Certificate issuer: /CN=BAA18970CC079B92BECD7E6D383312166C09CD3E
Certificate serial: 0CCF55C56C056503D8EF02FE48ED6A7F805AB8ED
Authority key identifier: BA:A1:89:70:CC:07:9B:92:BE:CD:7E:6D:38:33:12:16:6C:09:CD:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA18970CC079B92BECD7E6D383312166C09CD3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
Signing time: Thu 04 Apr 2024 13:30:20 +0000
ROA not before: Thu 04 Apr 2024 13:25:20 +0000
ROA not after: Thu 03 Apr 2025 13:30:20 +0000
asID: 266252
IP address blocks: 192.140.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cf:55:c5:6c:05:65:03:d8:ef:02:fe:48:ed:6a:7f:80:5a:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA18970CC079B92BECD7E6D383312166C09CD3E
Validity
Not Before: Apr 4 13:25:20 2024 GMT
Not After : Apr 3 13:30:20 2025 GMT
Subject: CN=DD62C38AFF4657A472D639131E880F31C11025FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:21:d5:c3:57:1a:d3:db:c4:5b:66:3a:32:
72:bb:ed:95:bf:76:d8:5c:bc:36:33:28:9d:80:b3:
0f:de:f1:08:bb:cd:17:91:a1:47:70:06:1e:13:2a:
5e:4c:b9:31:fe:ed:79:15:b3:36:c7:08:c0:c4:ef:
d5:de:df:e7:c9:14:ac:bb:76:34:3d:48:94:62:4b:
00:0f:53:50:f6:1c:0b:99:52:8d:30:45:9c:2e:17:
62:0f:f6:71:58:97:85:16:29:9b:b1:c5:b4:5f:7b:
d6:99:4e:86:e9:26:c2:46:3f:47:01:85:ba:ed:09:
85:60:fc:5b:23:18:4f:92:96:6a:47:ef:4a:7e:a3:
ae:e5:29:08:37:5e:bf:fa:51:cf:7c:9a:38:b7:7d:
63:f8:65:e8:88:1a:01:dc:4f:09:48:ea:2f:c8:54:
9c:d9:67:00:06:91:5f:49:6a:74:58:d5:d6:c5:bb:
59:33:69:be:1d:fe:62:b0:ee:f4:1b:d8:3f:d3:66:
fe:93:67:de:be:30:57:57:17:8e:8f:e3:ee:90:06:
67:7b:7e:4a:2e:71:2c:c9:f3:70:47:02:8f:2d:3d:
83:05:7c:bc:fe:ed:34:fc:39:02:f0:82:c1:19:37:
c3:3f:85:66:6e:80:00:8d:a7:d4:4c:c0:93:5e:98:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:C3:8A:FF:46:57:A4:72:D6:39:13:1E:88:0F:31:C1:10:25:FA
X509v3 Authority Key Identifier:
keyid:BA:A1:89:70:CC:07:9B:92:BE:CD:7E:6D:38:33:12:16:6C:09:CD:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/BAA18970CC079B92BECD7E6D383312166C09CD3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA18970CC079B92BECD7E6D383312166C09CD3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/2/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:2a:63:a6:b4:4a:a9:16:f9:86:c1:ac:04:56:ca:30:8c:e5:
9f:f9:5b:ca:53:43:3f:16:37:d4:08:ec:48:61:c4:5a:c9:09:
6c:8e:e5:49:b6:2b:9e:9a:fd:9d:c8:9a:19:e4:ac:94:e2:7c:
b1:3e:29:db:3c:b9:58:ba:48:0a:08:80:14:c1:61:fd:9d:33:
41:8a:15:eb:cb:1d:03:15:8a:69:31:fc:84:ed:d3:26:9d:59:
03:be:14:37:3d:e4:d3:66:da:88:84:20:6b:d9:5f:ec:e5:35:
bc:22:13:04:da:5b:fa:12:6a:48:e8:b9:cd:e8:1a:88:b1:99:
86:9d:71:2f:e4:13:3a:9b:5a:9f:e0:55:ea:42:98:94:64:5b:
7d:18:b6:0f:38:0a:43:cd:ed:f8:81:5e:56:f1:ba:63:70:fa:
7f:ee:2f:d9:f1:96:90:aa:35:b5:48:cb:9f:3b:94:72:c9:42:
8e:28:c5:5b:28:81:1c:68:21:01:e1:3e:c0:e4:0e:af:5c:33:
08:d6:ec:bf:62:0c:72:90:4a:6c:eb:03:3f:37:82:aa:40:b1:
94:dc:2f:b7:6a:f5:2d:27:c9:b5:81:b6:ee:12:3e:68:10:fc:
59:76:6f:64:13:e4:43:49:0d:07:a6:ce:c7:ab:ad:76:ef:1a:
c7:e0:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:54:33 2025 by rpki-client