Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File: 3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: jLLsTlGFtARdL0MYzzyLJT7ZTOkI7+LggZCsutoIbbk=
Subject key identifier: D3:17:49:D0:04:2C:FC:8F:67:1D:9F:30:85:FC:15:FC:CC:1B:C3:E5
Certificate issuer: /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial: 24067FA0E86897B0DEDC83E6CC312A381680D7AD
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time: Mon 10 Feb 2025 19:10:08 +0000
ROA not before: Mon 10 Feb 2025 19:05:08 +0000
ROA not after: Mon 09 Feb 2026 19:10:08 +0000
asID: 53062
IP address blocks: 168.90.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:06:7f:a0:e8:68:97:b0:de:dc:83:e6:cc:31:2a:38:16:80:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
Validity
Not Before: Feb 10 19:05:08 2025 GMT
Not After : Feb 9 19:10:08 2026 GMT
Subject: CN=D31749D0042CFC8F671D9F3085FC15FCCC1BC3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:fd:f7:fe:81:e4:50:d6:44:90:ab:00:26:
97:32:53:33:c0:33:ee:e8:3e:6d:aa:78:9b:bf:6e:
71:b9:b5:df:e0:4e:3b:36:56:1b:70:a3:a9:00:4c:
04:96:eb:65:17:65:34:e1:e3:79:54:6e:a8:2f:9f:
12:3a:d3:15:32:c3:aa:03:81:f6:5e:4b:b5:49:96:
ff:64:e2:8b:e9:45:6d:5d:e1:b2:2a:da:7f:bd:d5:
ff:81:78:eb:ff:2e:cc:0e:e0:7b:04:60:53:0c:16:
3d:34:f3:d3:0c:39:1a:4d:8c:ce:64:98:dc:99:1b:
38:4d:05:2d:21:f2:12:89:5e:2a:81:07:9f:b9:08:
f3:d5:e9:e9:e3:78:06:63:8c:f9:b4:8b:f3:ef:ef:
05:f5:85:42:bb:ac:5d:dc:36:91:f5:f7:ad:a1:78:
4b:b9:9a:5a:63:e8:84:d9:6c:86:e4:43:f2:ca:6a:
35:33:23:a2:89:17:12:35:f8:db:4d:e3:12:7a:24:
2d:03:04:ef:0b:45:4f:4c:45:66:7b:ec:45:f2:84:
1d:9e:c9:c2:f6:23:f2:de:7a:9b:05:4e:7e:ca:e8:
5b:4d:95:fc:2d:c0:4e:28:65:9e:46:da:88:05:6a:
a5:ca:91:80:00:c7:99:8a:5c:24:a4:7b:75:f8:18:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:49:D0:04:2C:FC:8F:67:1D:9F:30:85:FC:15:FC:CC:1B:C3:E5
X509v3 Authority Key Identifier:
keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
36:12:f4:45:10:66:f9:f6:bb:3b:e8:02:d0:26:ad:79:4b:b9:
12:f9:92:ab:fe:99:17:15:bd:8f:ed:65:ed:fe:98:2e:4b:eb:
c2:f1:fd:e2:9a:59:1a:03:6d:1f:ca:a4:1f:59:c2:92:b9:05:
dd:a6:27:0c:2f:10:8d:cc:9a:ae:15:ff:ff:2e:b1:5e:fb:eb:
78:2d:3f:73:04:77:8b:06:b5:a5:04:af:ec:97:78:45:f0:ba:
a8:5e:6d:e0:47:4b:74:b6:aa:3c:0e:ce:d4:5b:8f:e0:00:7a:
47:ea:38:01:b1:b1:47:42:e1:5a:f0:5f:a7:75:d3:3c:2a:b7:
3b:22:ff:b7:41:6e:aa:af:b0:b5:aa:3c:45:b1:0c:55:e3:ea:
46:49:e3:cd:33:60:96:e2:a2:65:c5:2a:85:dc:7e:c8:46:3e:
80:e9:90:3c:63:e2:cf:0f:be:a2:81:20:f9:99:e7:1d:87:59:
86:85:68:e1:5d:8f:2c:90:67:8c:13:e4:07:f4:13:35:d9:7d:
67:0d:88:9d:2a:2f:07:86:57:3c:9f:59:11:26:03:99:da:37:
da:a5:dd:43:75:0f:39:5e:5a:b8:0a:68:4f:97:a4:dc:1d:0d:
75:73:74:f0:9c:2e:da:25:6d:49:18:60:cb:a8:e8:65:f0:42:
f8:e7:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:09:48 2025 by rpki-client