Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
File: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (raw, json)
Hash identifier: MeqRuYDa1FamiFLsc2+xlsUrfHdrLE40JI7lhsltVbc=
Subject key identifier: 54:C8:FD:58:2C:96:D3:30:14:08:FF:67:02:CA:DD:4E:4E:AA:98:6C
Certificate issuer: /CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Certificate serial: 5D8344D7564E273DCFB3D535F2A9821ACD424A57
Authority key identifier: 8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
Signing time: Thu 20 Mar 2025 16:55:04 +0000
ROA not before: Thu 20 Mar 2025 16:50:04 +0000
ROA not after: Thu 19 Mar 2026 16:55:04 +0000
asID: 264316
IP address blocks: 168.121.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:83:44:d7:56:4e:27:3d:cf:b3:d5:35:f2:a9:82:1a:cd:42:4a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Validity
Not Before: Mar 20 16:50:04 2025 GMT
Not After : Mar 19 16:55:04 2026 GMT
Subject: CN=54C8FD582C96D3301408FF6702CADD4E4EAA986C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:39:7f:4d:2b:34:dc:9c:dc:9e:34:4b:66:
20:a2:a6:c8:64:af:df:7a:11:ac:c1:c6:d7:bc:d5:
32:82:67:87:3c:93:43:8d:99:05:9a:03:d4:90:49:
9d:39:e4:65:19:0c:1e:47:47:ec:b3:5b:1d:c5:8d:
a2:be:25:63:90:00:60:bd:77:b5:0c:4f:be:a5:b5:
17:46:a9:c5:c4:0c:6d:27:2c:30:9b:f1:11:b6:e1:
82:6a:9b:da:31:36:f1:60:80:86:81:f7:b8:66:9c:
cd:4f:48:b2:eb:7f:1b:3c:00:37:ed:39:5c:ce:df:
22:91:62:c1:09:0f:2d:5a:61:90:78:9d:ad:58:ee:
31:d7:b3:50:91:0c:17:01:6f:6c:c3:79:c5:08:09:
02:59:7e:e0:68:e3:69:a0:f9:21:a0:e9:b9:f4:b2:
a7:ee:f2:4a:52:54:2c:2b:c6:43:97:31:21:c4:2a:
b3:62:ff:b0:35:38:3c:bf:21:5b:0a:4b:d4:70:64:
cb:9d:c9:ec:24:37:0d:93:67:58:54:e4:09:4f:18:
74:60:be:d9:05:e1:fe:e9:72:09:7b:c6:1e:90:25:
94:aa:be:70:65:6f:bb:82:f7:52:18:ce:a6:cd:c3:
7d:e4:24:8a:db:91:23:dd:ec:77:c2:16:1e:bc:b3:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:FD:58:2C:96:D3:30:14:08:FF:67:02:CA:DD:4E:4E:AA:98:6C
X509v3 Authority Key Identifier:
keyid:8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.216.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f3:e9:03:55:14:3b:c5:f4:6c:df:4d:fb:08:a6:9b:6f:e0:
62:08:7d:b1:d4:55:5f:af:ca:51:cb:49:13:b2:de:ce:39:51:
cf:06:28:cf:84:8f:d2:5b:1e:28:35:55:18:b7:9a:b0:e0:10:
c6:40:e3:12:c5:d3:9b:72:be:39:8e:fe:2b:3f:c3:fc:5e:64:
bd:1f:95:b9:7b:fc:aa:16:55:de:59:55:94:c9:33:5a:d1:d6:
4e:30:b7:85:48:37:27:f4:13:a5:11:ba:8d:31:ac:5c:6c:02:
dc:64:13:2d:c3:ba:7a:c6:c1:11:e1:ee:51:4d:a8:3a:82:c2:
ed:c9:ae:48:0a:29:f2:82:3d:1a:63:be:37:ba:fd:aa:b5:ce:
00:12:8a:a5:14:66:ee:35:de:aa:2c:30:77:e2:25:18:16:94:
3e:29:c2:95:cb:d1:14:0c:df:8b:4c:60:1a:6d:41:71:99:4e:
03:a0:f3:bd:92:3e:0f:89:b1:67:00:0f:d2:5f:dc:2c:61:ff:
83:06:d7:97:9b:23:e6:d5:3e:d0:e6:c1:1f:03:3e:5e:7e:18:
8f:b1:a3:a9:7e:88:69:cc:31:fa:29:1e:7f:a9:85:18:33:27:
47:ac:01:4e:ca:e2:8a:6b:19:74:43:7b:d3:30:b8:9e:42:63:
91:bb:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:52 2025 by rpki-client