Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa
File: 3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa (raw, json)
Hash identifier: NrdkmJxu9DMQHbT0lZUBMb+Lor0wHY15YUEBbRpEyxM=
Subject key identifier: CB:A9:B2:22:02:68:01:35:56:C5:39:AF:A0:C0:85:BF:43:34:C2:7E
Certificate issuer: /CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
Certificate serial: 07C91419A3CD1B5104C7ED958C9CB9EB354A6C45
Authority key identifier: 92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa
Signing time: Thu 06 Mar 2025 11:07:25 +0000
ROA not before: Thu 06 Mar 2025 11:02:25 +0000
ROA not after: Thu 05 Mar 2026 11:07:25 +0000
asID: 263592
IP address blocks: 168.121.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c9:14:19:a3:cd:1b:51:04:c7:ed:95:8c:9c:b9:eb:35:4a:6c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
Validity
Not Before: Mar 6 11:02:25 2025 GMT
Not After : Mar 5 11:07:25 2026 GMT
Subject: CN=CBA9B2220268013556C539AFA0C085BF4334C27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:89:dc:eb:ec:cb:d6:cf:d5:6b:30:69:90:
fa:96:7e:cb:7d:f8:b0:ea:7a:ec:a6:96:cc:e9:42:
18:42:fd:6b:f4:e6:c8:40:dd:8d:c2:73:99:5e:9e:
a9:75:34:6f:56:74:82:c0:68:6c:c4:29:65:e1:20:
22:a9:08:c6:58:8d:78:90:9e:a9:e2:73:ab:eb:2d:
b1:15:a9:b1:e6:73:2f:68:d0:32:e9:1a:9c:72:1a:
85:df:88:0f:c3:8d:44:c1:b3:10:c5:89:e8:88:16:
79:83:cb:3d:a7:ef:86:50:15:41:f1:bc:b2:64:50:
66:ac:31:18:31:c3:0a:49:a2:97:30:72:5c:16:7e:
ee:2d:0c:b5:1f:af:df:ef:5f:ba:e5:a0:ab:52:d3:
cc:4f:03:03:84:36:9d:2d:fb:06:9d:fa:66:f1:0a:
3f:08:4a:49:97:61:e7:28:52:00:45:97:ef:10:53:
ed:ec:44:7c:ab:31:ee:2c:58:fe:d8:2d:e7:40:0b:
b8:31:4c:c3:58:e1:6c:b9:62:ac:c6:77:ed:ce:84:
81:91:1d:dd:a7:b0:1f:e9:13:39:19:2d:c1:61:d7:
2a:4f:1e:8c:30:fb:0e:cd:26:47:30:5e:77:12:48:
81:7e:19:6f:24:b3:8f:9e:73:21:d9:34:eb:7b:24:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:B2:22:02:68:01:35:56:C5:39:AF:A0:C0:85:BF:43:34:C2:7E
X509v3 Authority Key Identifier:
keyid:92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:5d:fb:ff:6f:8e:ae:0d:02:ee:a1:20:b4:9c:5b:9e:dd:69:
fc:c6:01:12:4e:eb:95:11:af:0f:48:34:9d:84:ea:7b:01:67:
e0:28:4d:85:26:a2:7d:a7:fe:9d:ac:ba:75:50:88:17:20:30:
25:ef:c2:b5:d3:3f:7a:3b:12:09:39:23:4e:d3:1a:0f:13:1a:
86:dd:5c:76:22:66:36:75:bf:f1:d7:c4:29:7c:92:eb:e3:15:
2c:a3:df:5f:62:d3:80:48:a3:84:78:d0:45:cd:c7:9b:0a:8f:
4b:74:b7:1a:c1:d2:ff:bd:5d:2c:44:7d:96:3a:20:d1:ae:15:
8e:c0:52:3b:1f:ec:8c:46:db:54:b5:27:73:3e:61:a9:3a:04:
11:c7:18:8f:e3:57:34:36:43:54:59:aa:26:6e:4c:78:e4:78:
3e:92:ac:06:5b:bc:73:74:7d:d3:6a:f7:96:c3:7f:25:55:2f:
af:c0:77:95:14:bc:a6:73:54:ca:09:3c:ff:64:df:5d:c3:7a:
3b:65:ed:84:31:83:d5:37:2f:ab:18:3a:23:ff:19:b8:c1:42:
67:a9:91:3b:43:54:c2:3a:39:50:4e:09:72:85:19:ef:06:d5:
84:60:ed:68:27:b3:17:48:d7:aa:05:f5:89:db:f9:bc:17:b2:
ce:27:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:44 2025 by rpki-client