Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa
File: 3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa (raw, json)
Hash identifier: sBnlGXortoru0NW7TlEKn/4mGDfvfFkfGp1aVyKLS24=
Subject key identifier: 12:7F:78:C1:20:0E:99:3C:FE:36:1D:A5:E9:FF:E9:F4:34:F0:CC:30
Certificate issuer: /CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
Certificate serial: 68A560B68E43FE841B18D8D084CC0DB67DD806A9
Authority key identifier: 32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa
Signing time: Wed 12 Mar 2025 13:14:02 +0000
ROA not before: Wed 12 Mar 2025 13:09:02 +0000
ROA not after: Wed 11 Mar 2026 13:14:02 +0000
asID: 263089
IP address blocks: 168.195.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a5:60:b6:8e:43:fe:84:1b:18:d8:d0:84:cc:0d:b6:7d:d8:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
Validity
Not Before: Mar 12 13:09:02 2025 GMT
Not After : Mar 11 13:14:02 2026 GMT
Subject: CN=127F78C1200E993CFE361DA5E9FFE9F434F0CC30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:70:55:51:57:2e:31:86:cf:65:5e:53:48:
5f:4d:73:3f:76:a2:32:4d:9c:c7:a9:20:a6:66:3b:
e0:42:fe:43:b9:e9:ee:03:9c:48:1f:f4:b5:41:06:
ae:e1:3d:4e:a0:1f:b3:bd:de:cf:d4:d4:10:db:27:
bd:3b:38:6d:ad:1e:af:15:f8:cc:76:51:5d:1e:b6:
77:21:e2:95:fd:63:56:a9:02:67:ed:0f:fb:d7:45:
10:1b:72:85:36:33:a2:16:dd:24:31:c0:90:04:a7:
20:69:72:e5:1e:44:40:aa:c2:10:59:02:76:f3:3d:
ee:3f:68:9c:c7:29:8e:0c:77:bc:a1:51:3d:ce:13:
64:a3:d0:b7:fb:88:dd:67:d0:82:ed:4b:24:71:9d:
f1:94:36:7c:cd:2c:aa:71:ba:6c:a4:82:ad:fd:3f:
98:35:51:8e:9b:01:a1:5a:75:e4:c0:0c:6b:8e:0a:
d9:6c:14:cd:c4:69:54:13:c3:e6:9b:7e:68:93:f1:
f1:08:2a:2a:33:e4:45:71:a4:47:95:3b:b7:94:90:
a7:3e:7b:36:37:e1:9d:5b:35:8d:0f:f3:4a:7c:64:
d8:d3:b0:c5:9d:67:07:a3:3a:de:62:b4:0d:4d:e5:
f2:b2:04:7c:27:29:4b:1f:45:25:bb:69:c2:76:e7:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:78:C1:20:0E:99:3C:FE:36:1D:A5:E9:FF:E9:F4:34:F0:CC:30
X509v3 Authority Key Identifier:
keyid:32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
55:4f:81:cd:9c:66:46:55:a8:e6:dd:8c:46:fc:80:4f:95:45:
d6:47:94:59:85:69:8c:ab:32:c1:c6:10:aa:62:28:cb:d1:da:
6d:b9:05:e1:b1:58:9e:76:51:b4:ce:fb:57:48:df:81:07:86:
78:2a:50:9f:d2:f8:f7:ec:f1:ef:b3:60:ea:ba:23:2c:b5:ea:
7e:d2:1c:1e:34:0b:50:01:58:ad:ac:89:d4:eb:ec:4b:fa:49:
9e:5a:ae:5c:05:1d:b9:e5:10:92:10:d5:60:8d:65:b0:f8:10:
98:9b:30:3d:4c:11:f9:7f:a1:9a:9a:a0:13:cf:a1:ec:06:a1:
2f:0d:60:6d:46:ad:ef:a2:07:65:4d:b2:38:f5:40:4a:6a:6c:
18:0a:f1:40:39:ae:10:5b:19:15:52:08:13:db:4d:d4:30:fd:
ba:77:43:d0:84:bd:5e:46:1c:98:ee:3b:b6:c7:ec:ea:b4:e1:
94:e9:9e:f7:bc:ac:d1:d3:76:a9:87:33:a3:50:de:9f:ee:1b:
1f:dc:74:63:06:d4:cc:f2:fc:6e:85:2d:61:ed:bc:25:0f:e6:
01:b6:72:65:ac:66:04:f9:8d:f2:1e:91:d7:34:d5:1b:2f:3b:
d1:1d:3a:70:57:7b:a0:fd:4b:5d:95:23:57:e3:fc:2d:ff:52:
9e:1e:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:32:03 2025 by rpki-client