Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
File: 3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa (raw, json)
Hash identifier: pRAF7yPJZgZLEqQxvsm3bEW5XFSXMIAstRQL0UXteTw=
Subject key identifier: AF:E0:01:A0:35:67:A2:EE:03:0B:E5:D3:38:59:14:F6:77:40:EE:B2
Certificate issuer: /CN=4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC
Certificate serial: 18257FB90FEE11DC2FDB0E731FF106534F3556D0
Authority key identifier: 4C:8E:FB:21:04:E4:A0:33:66:00:AE:0D:7F:B9:6B:6C:2B:1B:04:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
Signing time: Fri 12 Apr 2024 01:53:43 +0000
ROA not before: Fri 12 Apr 2024 01:48:43 +0000
ROA not after: Fri 11 Apr 2025 01:53:43 +0000
asID: 271448
IP address blocks: 181.174.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:25:7f:b9:0f:ee:11:dc:2f:db:0e:73:1f:f1:06:53:4f:35:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC
Validity
Not Before: Apr 12 01:48:43 2024 GMT
Not After : Apr 11 01:53:43 2025 GMT
Subject: CN=AFE001A03567A2EE030BE5D3385914F67740EEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:f6:b6:e9:a7:2d:be:55:25:96:95:9f:97:
cf:07:8e:d7:d8:dc:11:37:c8:e7:96:15:34:25:cf:
a9:4c:c2:c0:66:80:33:1e:f1:20:a5:3f:f5:18:26:
da:aa:26:c0:db:7b:85:21:9d:4c:93:6c:6e:51:2b:
be:0e:5c:c9:ff:cc:bc:09:1b:54:ef:7a:ce:4a:4c:
2f:24:ff:f6:94:60:81:ef:b2:42:81:09:84:02:1a:
f2:2e:05:35:8d:3a:c9:0b:f4:7d:2b:c8:77:a2:fe:
6b:fc:5e:f9:d1:11:43:c4:7d:e7:7d:74:15:1e:a7:
03:3c:e6:c9:3f:26:30:7f:41:06:0b:60:6b:28:37:
a1:c2:67:68:67:79:fb:65:b0:fe:7c:47:ba:d3:18:
e9:34:ef:c1:e6:36:26:1d:ea:d3:38:56:f6:80:4f:
2e:de:3a:21:b4:c8:9d:25:b0:3c:85:c6:60:86:1c:
11:41:ee:4d:68:81:71:6d:77:bf:21:50:0d:c7:fa:
37:bd:7b:42:e8:e4:7a:e0:98:50:13:c7:c7:1d:4d:
a2:a9:97:d2:94:75:4e:c6:d5:9c:c6:90:04:19:a0:
5a:c5:1c:5a:51:94:13:d0:68:de:80:e1:30:04:2a:
7c:80:cd:cc:3d:4d:61:25:62:2b:cc:f3:c0:f5:f4:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:01:A0:35:67:A2:EE:03:0B:E5:D3:38:59:14:F6:77:40:EE:B2
X509v3 Authority Key Identifier:
keyid:4C:8E:FB:21:04:E4:A0:33:66:00:AE:0D:7F:B9:6B:6C:2B:1B:04:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8EFB2104E4A0336600AE0D7FB96B6C2B1B04EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/0/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:eb:94:b8:59:67:6c:5a:bd:80:84:b5:e0:26:53:1c:1b:18:
9c:fc:f4:21:95:b1:b0:05:28:e2:1e:c0:55:94:fb:e5:a9:fb:
04:f1:07:b1:61:af:8d:d6:42:93:82:5b:1f:78:2d:5c:24:b1:
fe:91:18:02:95:dc:43:1a:ed:22:98:06:b6:38:50:1f:7c:57:
20:7b:02:72:51:b5:d7:c2:ae:e4:e4:0f:af:47:fa:98:80:11:
61:7b:ab:4f:54:88:ed:51:eb:e9:e1:41:12:fb:42:49:f7:de:
39:98:da:46:fe:16:98:35:ea:70:09:99:d0:b5:1d:74:1d:98:
19:02:15:ff:bc:c5:80:aa:69:37:7e:2f:60:bb:d0:81:65:a5:
62:b3:de:a7:f1:d1:00:d5:45:77:dc:b7:e1:af:64:c7:8f:02:
1c:7e:b4:a5:7b:72:f0:38:94:0a:ac:6c:04:77:3a:8a:a8:cb:
3f:15:fa:86:da:83:15:93:75:4e:bf:cf:bd:bd:8e:ef:8a:28:
44:70:26:a3:52:54:05:f5:df:d7:15:57:c4:0f:fa:69:80:0b:
32:a2:96:1d:00:a3:66:4e:2d:e7:56:21:09:cf:59:2a:60:73:
46:c3:27:8d:cb:23:95:9c:1b:1e:02:13:7b:84:ee:0e:c3:8a:
8f:3b:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:33 2025 by rpki-client