Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa
File: 3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier: euXUYTf+c3qtsgbxkw91M+3/U14y7r+mnqFo8UqJG0w=
Subject key identifier: 2E:51:FB:E0:AF:75:AE:5E:35:63:72:8B:5D:B9:CF:E9:74:6C:F4:6C
Certificate issuer: /CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Certificate serial: 66B1879D50C5A33C0798F1694CE704D28BEE8336
Authority key identifier: 3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa
Signing time: Fri 22 Dec 2023 20:25:05 +0000
ROA not before: Fri 22 Dec 2023 20:20:05 +0000
ROA not after: Fri 20 Dec 2024 20:25:05 +0000
asID: 263073
IP address blocks: 168.121.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b1:87:9d:50:c5:a3:3c:07:98:f1:69:4c:e7:04:d2:8b:ee:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4
Validity
Not Before: Dec 22 20:20:05 2023 GMT
Not After : Dec 20 20:25:05 2024 GMT
Subject: CN=2E51FBE0AF75AE5E3563728B5DB9CFE9746CF46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:36:fa:ad:5f:b6:2f:81:1d:bc:83:63:24:
a9:e4:c9:b5:ce:73:d1:0f:bb:82:c4:07:1c:b6:fb:
ab:f3:95:14:3c:9f:cf:08:ff:d3:18:64:9d:62:b9:
b1:74:36:a2:f5:8e:32:09:ce:35:fc:9d:55:41:60:
74:31:4f:61:dd:bc:c8:9f:43:2e:0f:83:f1:ea:33:
27:4d:41:4c:f2:a7:15:62:ca:d7:54:9c:db:94:18:
0f:4f:d0:25:f6:3b:b2:82:d6:69:6e:f7:99:ad:85:
39:6c:bf:d6:4c:c7:32:82:5d:22:f3:14:1a:14:4b:
ef:3f:90:6d:b9:16:a4:8a:59:ad:5a:db:a1:4d:80:
9d:50:99:23:ba:46:f7:61:36:e3:b3:57:2a:ef:3e:
73:9c:a1:7c:f9:be:9a:1f:7f:a2:6f:69:5a:10:8e:
97:1c:54:94:fd:65:ae:dd:8f:7a:af:fc:dc:04:d4:
c0:00:c5:3c:06:06:c7:84:55:5f:07:1e:68:5c:1a:
3f:15:81:72:55:22:74:31:5e:5a:44:b4:d7:ee:43:
fd:50:da:cb:04:2c:56:42:54:73:8a:a1:e2:fe:bc:
17:18:b1:7c:60:cf:42:35:32:cf:88:53:5f:f5:a9:
e5:c5:0f:b9:3d:0b:a4:aa:c4:77:f2:e8:3d:a7:0e:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:51:FB:E0:AF:75:AE:5E:35:63:72:8B:5D:B9:CF:E9:74:6C:F4:6C
X509v3 Authority Key Identifier:
keyid:3F:F3:BE:1A:88:50:C1:5A:8E:5C:2C:A6:4D:7D:6B:AF:1D:CC:9C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF3BE1A8850C15A8E5C2CA64D7D6BAF1DCC9CC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3136382e3132312e3139342e302f32342d3234203d3e20323633303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.194.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4c:d8:23:42:9e:62:a2:92:49:77:c4:0a:24:9c:b2:5c:11:
57:90:19:b5:06:a9:05:74:21:77:13:2e:fc:7e:96:0c:02:bf:
fe:37:fb:6e:d4:f5:45:60:e6:af:cf:db:37:8f:1c:39:ad:8b:
66:ab:f6:84:c4:e3:5f:39:d2:a4:5d:85:9b:50:3d:f7:bb:9a:
a6:92:07:11:93:9a:85:53:2d:db:8d:22:09:5b:a6:35:0d:54:
81:ba:8c:db:44:fa:e4:9c:53:e6:6f:ea:91:83:97:0c:70:dd:
b0:b6:be:12:80:40:97:1f:c2:39:47:ec:c3:dc:d5:69:d0:45:
99:af:70:3d:74:62:69:df:6e:f4:f0:7d:96:20:94:e9:bd:cf:
a2:15:75:5c:dc:86:07:8b:0e:91:6e:34:b7:5a:e8:74:d3:9b:
f0:6a:e2:b5:a1:f1:d9:a6:33:f9:15:33:63:82:f5:57:1d:ec:
7f:76:39:4f:37:5c:47:64:17:a8:ac:db:fa:83:76:8e:9b:f0:
3d:4b:89:62:53:8c:31:51:3b:60:ac:6f:17:c2:de:eb:21:f2:
75:57:00:73:08:10:b0:06:dc:af:d4:85:e2:f1:19:e0:84:54:
bb:39:c8:b2:ed:a6:c2:f9:82:9e:c8:bd:af:84:9c:b2:74:cc:
65:95:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:44:16 2025 by rpki-client