Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136372e302f32342d3234203d3e203238353837.roa
File: 3136382e302e3136372e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier: BrQuVwkuhn3c6uza9yzr3g1h8IDjcVtpZAcw0MqPBTg=
Subject key identifier: 98:A3:B9:63:35:B7:1C:45:7B:03:12:1D:DB:C4:AF:56:E0:2E:CD:BC
Certificate issuer: /CN=B247D821CF7E23F1D0A7C3F26BAF138B54FA26C5
Certificate serial: 66F20D8B98429A1F4E92F3DE6AB257E62B051E20
Authority key identifier: B2:47:D8:21:CF:7E:23:F1:D0:A7:C3:F2:6B:AF:13:8B:54:FA:26:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B247D821CF7E23F1D0A7C3F26BAF138B54FA26C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136372e302f32342d3234203d3e203238353837.roa
Signing time: Mon 01 Jul 2024 17:51:45 +0000
ROA not before: Mon 01 Jul 2024 17:46:45 +0000
ROA not after: Mon 30 Jun 2025 17:51:45 +0000
asID: 28587
IP address blocks: 168.0.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f2:0d:8b:98:42:9a:1f:4e:92:f3:de:6a:b2:57:e6:2b:05:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B247D821CF7E23F1D0A7C3F26BAF138B54FA26C5
Validity
Not Before: Jul 1 17:46:45 2024 GMT
Not After : Jun 30 17:51:45 2025 GMT
Subject: CN=98A3B96335B71C457B03121DDBC4AF56E02ECDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:ab:c8:3e:78:c6:90:23:bc:e1:00:d2:fb:
ea:e6:a2:3e:85:9e:a8:0c:09:85:4e:ed:38:85:af:
a6:c8:4a:b4:6d:9e:4c:89:02:0e:8a:22:03:3e:1b:
62:1f:66:b4:e0:aa:ed:18:a3:62:f8:ca:b7:9d:f2:
09:8c:6d:5f:59:ed:4e:2b:49:7d:54:eb:60:ac:af:
87:40:41:df:60:c0:17:f4:56:21:4d:46:1a:5d:72:
0a:31:b8:ef:d1:63:c1:8c:d2:bc:44:24:b7:d5:08:
9e:f1:48:e9:45:a0:1e:d2:7f:d8:00:16:31:a8:62:
4c:f7:3e:33:e0:91:2f:57:80:a6:5d:05:21:87:bf:
c1:34:1f:54:d6:23:8c:5b:c8:2f:cb:c5:9d:2f:a9:
4d:55:6d:14:48:3c:db:bf:6a:f3:38:ff:6b:cf:d7:
f8:48:e8:7b:4e:79:d7:3f:7c:a1:dc:d8:68:1f:8a:
67:33:b0:67:df:14:5d:d7:a2:3f:b9:8a:c6:40:5e:
28:fe:aa:1c:f1:07:0f:73:0e:f0:ee:62:ef:a5:87:
aa:46:88:0b:ef:2f:10:27:59:99:85:49:5a:36:6c:
86:d0:7a:d6:ed:86:b5:a9:de:88:98:26:16:7a:8d:
32:5f:70:de:f5:20:b2:c3:cd:c2:1a:11:26:18:77:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:B9:63:35:B7:1C:45:7B:03:12:1D:DB:C4:AF:56:E0:2E:CD:BC
X509v3 Authority Key Identifier:
keyid:B2:47:D8:21:CF:7E:23:F1:D0:A7:C3:F2:6B:AF:13:8B:54:FA:26:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/B247D821CF7E23F1D0A7C3F26BAF138B54FA26C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B247D821CF7E23F1D0A7C3F26BAF138B54FA26C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136372e302f32342d3234203d3e203238353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.167.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e9:0a:63:b9:77:13:44:85:22:6a:92:5b:f2:fd:04:67:68:
1b:33:44:26:22:9b:83:1b:f6:7e:a7:01:ef:0b:78:69:5a:7a:
a1:54:0c:14:e6:6e:fa:e5:14:82:ec:ae:17:68:83:5e:a7:31:
aa:55:dd:07:cf:23:81:1a:3d:82:3e:f3:13:37:15:6d:76:6b:
b7:d4:76:94:5b:84:42:ca:e8:9b:59:dd:be:e3:58:08:96:0f:
e9:fd:e7:15:f1:10:e6:1b:cd:42:be:54:92:16:5b:6f:71:8f:
ef:da:97:0d:78:f2:95:e1:ed:d1:de:ac:f5:a4:84:6c:cb:41:
59:4d:ee:a1:2b:be:f9:8e:7a:37:1d:28:43:f6:3c:2c:ee:fa:
fa:21:14:b3:03:43:0d:0d:6f:67:9a:2e:bc:39:2d:8f:6d:9c:
2a:9a:2d:92:a5:1b:f1:60:30:44:d7:9f:f8:38:bf:b6:bf:10:
cc:28:2b:1f:e3:0f:c8:1b:03:49:91:ab:10:ee:10:86:e1:a8:
42:30:f6:44:da:54:b7:b0:2f:ea:c3:e4:a5:73:8e:5f:72:f6:
32:fa:fb:67:f6:06:8c:27:2b:73:45:27:bb:d7:4d:de:4c:4e:
33:a7:ad:87:ba:c1:dd:f9:05:18:5d:70:7e:4c:66:90:8c:03:
8d:e8:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:25 2025 by rpki-client