Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
File: 3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (raw, json)
Hash identifier: /ES1nlpEiGFm1KUV7rGnWlKMt18tPx5dBlIN6oa/7MY=
Subject key identifier: D7:6D:42:53:DC:58:9E:FA:58:12:25:62:F2:3F:7F:A1:23:26:F2:78
Certificate issuer: /CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
Certificate serial: 2C374DCB34395EB08861EEC2622E68F5FBB4EBB9
Authority key identifier: D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
Signing time: Tue 20 Feb 2024 14:34:08 +0000
ROA not before: Tue 20 Feb 2024 14:29:08 +0000
ROA not after: Tue 18 Feb 2025 14:34:08 +0000
asID: 264878
IP address blocks: 168.227.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:37:4d:cb:34:39:5e:b0:88:61:ee:c2:62:2e:68:f5:fb:b4:eb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4C8F646F1ADB9F0D84282A75C65B603DDDE8365
Validity
Not Before: Feb 20 14:29:08 2024 GMT
Not After : Feb 18 14:34:08 2025 GMT
Subject: CN=D76D4253DC589EFA58122562F23F7FA12326F278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:78:76:82:6e:91:b4:c6:c7:50:cf:af:a7:
14:35:9b:37:d0:ae:1f:10:17:b4:fe:7d:40:34:45:
15:42:29:59:6d:a4:df:64:e3:5c:fa:5c:12:ce:cc:
48:e2:20:02:a1:9d:28:82:0b:c1:2b:27:71:76:44:
a1:ea:db:34:6d:61:87:ed:00:9f:a5:63:25:d3:e6:
6d:00:e5:88:bc:c8:4c:11:e3:cc:40:07:d0:2c:11:
af:ec:e1:5d:e2:2c:51:fa:a4:41:32:a1:d7:17:f1:
5c:b5:52:37:cb:99:a4:a7:fa:0b:96:2b:41:58:c4:
68:86:f9:23:fc:79:f0:1a:9d:54:d8:a9:63:0a:b2:
44:0d:2c:ce:ac:d8:f8:77:09:b3:70:c3:85:0c:5a:
5f:cc:34:9f:1b:aa:02:a4:c0:8b:92:d8:4d:d3:aa:
1d:b2:cf:0b:80:7f:be:9e:29:69:0b:3c:b2:5b:fd:
7a:48:c5:93:1e:b7:c0:c2:7f:cf:87:bb:df:5d:b5:
db:e8:10:3c:92:a9:bb:e9:ff:3f:ed:77:2a:26:ec:
77:0e:59:18:bb:9a:d8:9e:ec:24:cc:60:4d:f7:52:
39:55:17:b3:6c:5d:f0:8d:0f:1d:29:92:48:93:e7:
4e:1a:08:36:eb:e1:3d:24:e6:c9:27:ea:f1:4a:5c:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:42:53:DC:58:9E:FA:58:12:25:62:F2:3F:7F:A1:23:26:F2:78
X509v3 Authority Key Identifier:
keyid:D4:C8:F6:46:F1:AD:B9:F0:D8:42:82:A7:5C:65:B6:03:DD:DE:83:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4C8F646F1ADB9F0D84282A75C65B603DDDE8365.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8JZbs1V7f3pQmhZnjs3nfZqZp3ZeHtYtQiDToyF16qR/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:26:c0:a2:e9:21:5d:5b:b2:0d:14:97:ad:98:aa:fa:a3:4f:
13:fd:0c:1c:f9:8f:8b:5d:15:b7:1f:fc:9b:b8:65:69:bb:c5:
3c:c8:16:bd:c8:fa:c2:cd:82:b0:b4:a2:1c:86:45:5e:c6:ac:
67:67:9e:3b:7d:09:1a:67:cf:a2:f4:0a:8e:03:fe:85:f6:e9:
75:ef:a1:a1:a8:e2:70:c4:ea:df:99:d5:46:39:b9:ff:94:cc:
04:55:99:d9:1c:79:ca:59:2a:c9:9e:8e:6c:3c:4a:7b:4d:18:
7e:ba:26:80:8a:d0:f9:44:25:a8:5f:bc:db:88:c1:fe:0f:a6:
81:94:c0:d1:4d:c8:26:84:4d:10:e6:f5:41:11:52:8c:58:bd:
01:14:5e:30:f6:a6:da:29:86:44:3b:cc:13:98:ea:2b:75:14:
3b:b8:12:45:d4:97:a3:3a:8c:fc:4f:25:29:8f:c3:73:cb:9e:
bb:5e:bf:09:d8:ea:8a:f4:47:ce:10:49:cf:95:ed:2c:73:1a:
9e:89:ce:eb:2b:f6:6a:6b:67:80:e0:35:90:0b:2c:55:01:04:
cd:88:73:a9:56:8d:79:ac:89:56:e0:97:1a:83:e0:be:48:d7:
ed:c9:8b:11:1e:9b:8b:58:2d:a7:25:2e:a9:ab:6c:fe:f9:c8:
51:7d:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:14 2025 by rpki-client