Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa
File: 3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa (raw, json)
Hash identifier: iRv7edNy0OuqElysFp60XwwPKk5elTYo88jheIv4IRs=
Subject key identifier: 88:45:F1:DB:E1:04:4B:19:C3:28:D1:FE:CC:41:93:97:2D:2D:85:77
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 3C40E33337BD0D90FF393CB801CBE55F39B4F818
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 18:29:11 +0000
ROA not before: Mon 16 Dec 2024 18:24:11 +0000
ROA not after: Mon 15 Dec 2025 18:29:11 +0000
asID: 264397
IP address blocks: 164.163.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:40:e3:33:37:bd:0d:90:ff:39:3c:b8:01:cb:e5:5f:39:b4:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 18:24:11 2024 GMT
Not After : Dec 15 18:29:11 2025 GMT
Subject: CN=8845F1DBE1044B19C328D1FECC4193972D2D8577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:b3:1e:12:bb:04:81:31:ec:8d:a7:ed:c5:
9d:be:b5:69:18:47:49:dc:12:2d:1a:d5:18:66:1a:
6a:ec:c0:34:5e:31:ba:5d:a4:55:73:cf:f3:d6:14:
7d:8b:05:d4:ab:02:02:37:b1:87:a1:50:ae:6a:fc:
57:1d:b6:30:08:52:76:18:4b:68:aa:22:9b:00:d9:
e4:9a:33:75:28:fc:84:d0:c1:af:85:b9:e7:a7:10:
b2:f7:98:00:e7:99:f7:af:19:55:58:75:62:65:2f:
53:74:e6:3e:d2:bd:a5:22:d8:6b:3a:23:92:8f:ca:
5b:bc:e7:cd:33:a0:36:74:37:07:a6:e7:b3:0c:6e:
ec:68:d6:93:01:e8:6f:65:24:5f:3a:d5:64:03:64:
ea:98:0e:07:c1:02:21:ed:a4:18:6a:f8:90:5d:2b:
c3:bf:95:a1:7e:bf:9f:54:5f:8d:1b:8a:57:6b:0d:
9e:26:bf:3a:48:92:ea:8d:dd:c2:36:b4:7e:2f:12:
d2:e1:ed:d9:54:ff:59:32:40:67:3f:7f:15:ee:6b:
b4:d9:a1:52:21:60:70:bb:a7:2b:c4:bd:10:71:9a:
b3:bd:46:06:e1:7a:2c:36:34:3c:23:19:a5:65:45:
e2:b1:3e:0e:e5:7e:9b:1f:51:9c:37:e7:46:00:21:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:F1:DB:E1:04:4B:19:C3:28:D1:FE:CC:41:93:97:2D:2D:85:77
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.36.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:bb:3f:cf:a8:9b:af:88:1f:12:b1:0f:26:f0:8c:2f:c3:6a:
4a:5a:62:dc:45:71:db:77:48:79:48:71:bf:b8:5f:d3:ca:5a:
f4:d2:bc:89:bd:f6:a9:1a:de:16:c2:51:41:df:ef:7e:5d:69:
ed:24:df:c4:c0:eb:b3:7d:e5:1b:93:1c:f6:05:34:a1:97:cf:
03:eb:71:58:96:dc:eb:58:3e:07:6e:09:ee:1a:e7:b5:bd:d3:
8a:aa:17:b9:fe:f3:8e:c0:55:da:d6:fe:7a:28:ae:e7:0a:2b:
3f:c4:6d:f7:3c:5e:82:62:e8:05:4a:8e:29:6a:4d:cf:ee:16:
90:06:9a:85:43:e2:de:c4:c1:7a:90:38:15:c3:87:77:05:c9:
8b:01:b9:bf:13:da:56:1a:ad:c2:c2:ec:46:ac:66:fa:b9:34:
98:d7:b9:ec:27:28:45:57:94:b5:1d:52:9e:5b:59:4f:04:0e:
4f:d1:c2:03:3f:3f:ec:30:ae:70:f7:74:ab:1c:c8:16:8a:48:
b7:ce:09:c3:6c:a6:ac:bf:89:f5:de:e7:6b:38:b2:bb:e9:a2:
4e:20:16:25:b1:0d:98:77:c7:36:79:05:47:e8:8b:3d:7b:d5:
29:ed:4b:50:2e:b2:39:9b:fc:00:f0:34:8a:45:f5:38:f7:01:
05:34:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:47 2025 by rpki-client