Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
File: 3136382e3232382e33362e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier: MTdIp0J3QZ1hQgwyI7INACxqsEDVHFPklvQFVnWuvyg=
Subject key identifier: 4D:21:5E:AA:B4:62:9F:DC:B9:FD:F4:5D:B2:D8:4A:7F:82:C3:76:4A
Certificate issuer: /CN=DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496
Certificate serial: 6FF3BF1DF6BCE7049D724180AA414D854E230D84
Authority key identifier: DA:0F:D3:FE:50:2E:3E:A1:9C:7F:7A:BF:80:BA:C7:B3:94:CD:F4:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
Signing time: Mon 16 Oct 2023 11:14:37 +0000
ROA not before: Mon 16 Oct 2023 11:09:37 +0000
ROA not after: Mon 14 Oct 2024 11:14:37 +0000
asID: 61794
IP address blocks: 168.228.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f3:bf:1d:f6:bc:e7:04:9d:72:41:80:aa:41:4d:85:4e:23:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496
Validity
Not Before: Oct 16 11:09:37 2023 GMT
Not After : Oct 14 11:14:37 2024 GMT
Subject: CN=4D215EAAB4629FDCB9FDF45DB2D84A7F82C3764A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:15:a8:31:ee:f1:e7:55:96:24:e7:6b:69:
52:57:1a:30:71:0f:04:55:11:e3:e5:55:2a:d4:b6:
85:d5:c5:81:f6:c0:1c:76:fa:1f:1e:b0:66:15:94:
6f:0f:56:ad:7f:16:7b:53:9b:29:41:00:f3:e8:7a:
d3:69:8b:6d:4b:3a:95:b1:01:93:cc:64:97:e7:34:
16:c3:3e:74:0e:8a:19:50:97:10:54:16:59:b8:c0:
80:3b:79:b9:94:95:f5:17:46:d6:2d:ce:e7:c2:4b:
a5:01:66:5c:d5:ed:27:cb:f2:17:79:16:d3:0e:27:
a1:21:4b:10:ef:85:15:b3:6c:e9:d5:0a:8d:4c:93:
b7:e0:c2:13:09:14:76:4f:67:83:94:26:8a:59:fe:
50:89:32:3d:4d:06:48:f4:aa:ef:ec:0a:11:b8:eb:
2c:6a:bd:30:b3:af:5c:78:e6:d6:d2:6a:22:9b:a7:
1b:2d:3b:24:e5:e8:b6:3d:44:8f:54:99:88:b1:5f:
a3:ba:f3:ec:0d:14:bb:52:a6:bb:3d:f7:e3:98:1a:
85:16:af:7c:22:c2:07:5b:7c:ce:19:39:47:57:30:
16:ec:d9:a6:03:3f:89:df:61:01:8a:0d:5e:76:d8:
80:a3:ed:15:0a:8f:d8:ed:fb:64:fc:9a:fb:1f:01:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:5E:AA:B4:62:9F:DC:B9:FD:F4:5D:B2:D8:4A:7F:82:C3:76:4A
X509v3 Authority Key Identifier:
keyid:DA:0F:D3:FE:50:2E:3E:A1:9C:7F:7A:BF:80:BA:C7:B3:94:CD:F4:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:f0:5b:44:fd:b5:eb:80:3c:0a:19:77:5b:30:b4:8a:7f:17:
d5:73:c3:72:11:6f:24:4b:e4:92:99:f6:41:84:2e:a5:24:d7:
49:74:c4:c8:83:d5:bd:b6:d8:57:20:92:b4:64:db:51:04:48:
c8:22:e7:48:c7:c4:ff:54:b2:77:5a:99:a8:58:01:98:1d:e4:
94:21:8d:68:4b:96:1f:b6:5d:eb:72:86:87:9b:2e:49:68:ee:
b1:12:ad:1d:96:12:86:fc:96:28:89:8e:64:b3:ad:9e:88:94:
33:4a:19:39:d2:6b:c2:53:82:ec:23:ba:e3:31:e9:e5:d9:5d:
71:91:51:d9:5e:ff:eb:32:ad:4b:03:ee:1a:8e:1f:71:eb:97:
fb:49:c1:44:03:f3:20:51:53:32:d0:03:72:d8:f7:59:c9:eb:
cd:88:58:f5:13:43:68:86:fc:1c:e8:a9:45:96:12:a2:58:5c:
af:ec:bd:a0:e1:93:b2:4d:40:86:5b:c9:87:a3:65:d3:7a:53:
a9:20:8d:00:71:6a:ad:40:81:08:36:16:d8:5e:10:66:d8:40:
9f:34:b7:70:f0:19:97:96:e4:5a:29:cd:53:08:d7:50:64:73:
a0:20:2b:9d:02:1f:58:37:3a:dc:aa:da:08:5d:90:a2:39:a0:
f9:39:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:32 2025 by rpki-client