Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
File: 3136382e3232382e36382e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier: U98mXdfl1PHrk7NJpJv+aGm6QaD211IYJfrRR+3k9ak=
Subject key identifier: EB:DE:F4:99:F8:49:24:FD:D1:70:4A:2D:F0:24:7F:76:11:60:46:F6
Certificate issuer: /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial: 482660C79E079C9F34B684D09BE6BAD286233C0E
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
Signing time: Tue 13 Sep 2022 09:05:27 +0000
ROA not before: Tue 13 Sep 2022 09:00:27 +0000
ROA not after: Tue 12 Sep 2023 09:05:27 +0000
asID: 53059
IP address blocks: 168.228.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:26:60:c7:9e:07:9c:9f:34:b6:84:d0:9b:e6:ba:d2:86:23:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Validity
Not Before: Sep 13 09:00:27 2022 GMT
Not After : Sep 12 09:05:27 2023 GMT
Subject: CN=EBDEF499F84924FDD1704A2DF0247F76116046F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:0c:a0:73:14:af:7e:22:33:82:0a:65:72:
6d:30:b5:f4:55:ac:20:d3:dd:5c:a2:03:d8:a2:a4:
df:1f:1b:b1:28:d5:a6:7f:c1:86:5f:45:79:df:e3:
21:79:45:77:de:48:d6:60:03:bb:c3:d1:51:1b:49:
31:ae:f9:f5:5f:3c:98:df:50:91:81:9e:bb:78:27:
2f:5c:c3:bd:f5:eb:b4:18:72:33:bb:34:a6:3f:ea:
2f:5b:d6:8d:a1:d2:e9:57:6d:ec:82:5e:49:b9:33:
11:98:eb:28:b3:64:12:d0:34:06:2c:0d:e9:24:7d:
31:be:8b:b1:b7:aa:da:05:4c:95:d5:fb:69:c4:88:
bd:47:37:f0:43:32:04:8e:27:a7:59:ab:72:f2:fb:
2c:e0:71:fb:07:0b:7e:a0:ca:96:75:5b:b8:d4:20:
7f:2e:1c:e7:f7:e3:70:25:88:04:99:7e:cb:e9:08:
c9:93:e4:a7:40:37:ca:b8:ab:5c:db:b6:ef:ae:60:
30:9c:0c:b5:9b:95:a8:56:64:75:3e:15:e7:45:aa:
60:96:94:a1:25:44:fc:cb:c0:34:07:29:bf:a5:36:
3b:84:44:0c:5e:18:8b:ca:b4:ac:30:d7:b1:b1:6b:
d3:58:93:1c:d0:10:a4:33:74:4a:c5:73:de:5c:f8:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:F4:99:F8:49:24:FD:D1:70:4A:2D:F0:24:7F:76:11:60:46:F6
X509v3 Authority Key Identifier:
keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:a2:a0:7f:e1:55:28:54:77:1f:85:17:2d:d0:20:1e:c5:7a:
f9:33:51:90:90:1b:bb:ee:01:b0:90:8b:5f:de:40:d3:11:ee:
fb:69:c6:34:86:bc:1f:2f:70:6d:d1:23:5d:30:9d:a7:2b:ad:
d9:e5:d8:dd:38:d8:e1:b4:70:ac:ca:fe:87:06:0f:1d:77:15:
7f:53:14:50:af:23:01:ed:df:22:80:bd:a0:8e:53:ef:0a:13:
75:5c:9b:c3:85:74:5a:a2:d0:1b:20:b2:f5:78:04:c5:9e:8c:
5e:d4:de:4b:88:17:04:bd:04:3a:c1:9d:d8:fc:7a:9a:95:f2:
bf:32:f5:ec:28:53:e0:5e:cc:1b:87:b4:c5:f2:62:63:d3:70:
25:37:08:b8:6b:da:97:bb:17:ca:f2:a7:29:72:dd:6a:cc:34:
5a:42:a6:8e:4e:0e:39:b8:48:56:80:9b:96:50:9a:62:0e:03:
f9:da:ac:bc:47:5f:d8:f3:cf:c8:21:db:e3:71:69:62:6a:ac:
8c:93:14:1d:d7:c6:d6:05:94:46:f5:d6:87:1a:90:75:61:d5:
2a:f3:09:6a:5c:31:61:50:25:a4:c0:14:bd:7e:1c:cd:1b:83:
a7:31:39:a6:92:14:14:55:b5:ab:22:b1:b7:59:d1:8b:7e:1c:
db:3d:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:21:46 2025 by rpki-client