Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
File: 3136382e3232382e36382e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier: JsPei5vgSiYWGrrBKte/DA/tHNcWfIQ78ytw/aFKG6k=
Subject key identifier: 00:FB:5A:DC:9A:BA:9A:7A:B2:C2:BC:5B:05:F6:50:17:01:B8:E2:16
Certificate issuer: /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial: 1C747177B7C6F1788974472837776F8D54F65639
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
Signing time: Mon 23 Jan 2023 21:36:18 +0000
ROA not before: Mon 23 Jan 2023 21:31:18 +0000
ROA not after: Mon 22 Jan 2024 21:36:18 +0000
asID: 53059
IP address blocks: 168.228.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:74:71:77:b7:c6:f1:78:89:74:47:28:37:77:6f:8d:54:f6:56:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Validity
Not Before: Jan 23 21:31:18 2023 GMT
Not After : Jan 22 21:36:18 2024 GMT
Subject: CN=00FB5ADC9ABA9A7AB2C2BC5B05F6501701B8E216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:83:2b:92:d5:65:8e:57:95:be:bd:48:1b:
1b:1c:28:b4:ee:d6:ec:cb:ae:62:68:1f:89:73:92:
cd:b7:29:21:a7:e0:90:bd:e5:96:4f:f9:25:6d:38:
88:e5:a9:5e:85:99:25:c4:b1:fc:5d:9e:62:55:28:
0f:99:d3:9d:90:65:c9:51:66:2c:e1:84:2e:e1:c9:
7b:55:67:f6:b5:c2:5f:4d:28:f9:47:9d:de:89:01:
7e:a5:3a:f2:37:02:38:9c:73:6c:ba:c4:19:54:f9:
ea:de:bc:a2:77:85:c4:76:9e:f2:00:6c:26:7c:2a:
4f:d1:4a:07:19:f3:c1:58:d2:2e:7d:5d:36:f6:7e:
b4:26:ad:9c:bb:49:08:21:c2:2a:ae:41:b3:08:79:
6b:9b:fb:3f:50:77:79:ff:e9:26:17:fe:25:13:b2:
f2:a3:88:50:aa:10:87:b9:c2:0e:01:f3:59:f2:9b:
8d:fe:4d:65:ea:32:9c:9b:cc:4c:9d:7f:b7:91:c2:
74:de:05:71:16:ae:f3:13:e4:96:8e:dc:88:8e:b7:
c8:5d:56:23:04:b2:4c:3c:84:b9:87:e1:00:d6:6f:
ee:a9:da:3b:64:55:64:f2:5f:95:2a:b7:e3:76:d0:
31:df:73:2e:4b:72:64:db:b4:f3:90:7c:f8:da:6b:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:5A:DC:9A:BA:9A:7A:B2:C2:BC:5B:05:F6:50:17:01:B8:E2:16
X509v3 Authority Key Identifier:
keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3136382e3232382e36382e302f32322d3232203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:23:42:91:4c:5c:0c:26:ac:cc:93:b7:39:08:87:27:69:30:
e8:e7:6b:9b:2f:d2:06:f9:a2:a0:b6:12:89:27:ee:47:9d:a8:
e6:57:5e:34:aa:2f:98:09:7b:75:81:7c:23:83:5b:d1:cf:fa:
0c:68:44:20:92:7b:24:4e:d8:e0:f2:7b:57:4b:4e:76:82:e2:
10:a3:cb:fa:c2:6d:80:b1:b5:30:4c:f3:1e:a7:7b:52:c3:af:
ab:14:e4:ba:61:bf:e4:b4:5a:2a:0f:bc:ae:0d:f0:b7:da:d3:
36:cd:a8:18:98:97:7d:54:b2:51:d3:61:e3:44:95:28:4a:c4:
a9:71:bf:5d:ba:4a:66:b5:36:59:2b:cb:12:14:80:6f:1a:4d:
2e:cc:46:57:55:02:d4:4e:1d:17:ca:c9:67:a1:05:b9:db:7c:
70:e5:2e:fb:a8:13:c0:4a:9b:44:3d:f9:96:23:55:a1:09:72:
03:19:08:e6:10:ca:a5:83:09:9f:d4:63:9c:07:97:a1:56:25:
30:8a:a0:15:38:e4:b1:19:56:dc:33:a3:4b:fc:74:d4:84:e3:
a2:2f:47:45:e1:0c:76:57:40:e7:10:2b:a7:53:d5:de:4d:67:
5a:40:cf:8d:8e:46:09:16:46:c8:9a:f5:53:7d:fd:12:a8:65:
f2:b9:95:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:27:01 2025 by rpki-client