Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
File: 3136382e39302e31362e302f32322d3234203d3e20323635323731.roa (raw, json)
Hash identifier: dHy9mFPm5rttlCqVmlrxWWXOksJvpP8rfUfIfQVUw8o=
Subject key identifier: 97:70:B9:28:CA:17:FB:31:62:4F:95:44:81:5A:08:3B:9D:10:6C:FF
Certificate issuer: /CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Certificate serial: 29F565E741AE521DC1701BEDC65BF6B78208B8C5
Authority key identifier: 13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
Signing time: Tue 12 Mar 2024 12:37:55 +0000
ROA not before: Tue 12 Mar 2024 12:32:55 +0000
ROA not after: Tue 11 Mar 2025 12:37:55 +0000
asID: 265271
IP address blocks: 168.90.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f5:65:e7:41:ae:52:1d:c1:70:1b:ed:c6:5b:f6:b7:82:08:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130159CF4FA60D26A7D1BD0FA88516733B676D6A
Validity
Not Before: Mar 12 12:32:55 2024 GMT
Not After : Mar 11 12:37:55 2025 GMT
Subject: CN=9770B928CA17FB31624F9544815A083B9D106CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:61:94:c0:f9:ed:8a:c0:53:10:37:98:61:
fa:89:17:86:17:d9:21:a6:b8:16:26:20:cc:38:a3:
d8:c0:87:de:d5:c1:26:ed:0b:b7:5d:c8:e6:05:34:
a3:13:2e:3c:e6:23:e8:65:11:74:33:16:b4:39:41:
28:45:fc:4a:7b:7b:3f:08:ac:fd:98:c4:cb:ea:09:
c7:66:76:cd:f8:3a:3f:51:1c:fe:9b:a2:89:25:29:
c5:1e:88:67:90:7a:a5:64:12:53:88:b3:1a:29:47:
77:ce:6a:6f:59:b3:e5:cf:e2:ed:ae:52:eb:da:55:
cd:c7:b2:08:92:1c:b2:9a:6a:38:15:6e:c6:64:09:
0d:7f:70:ec:26:44:9d:c5:cc:7f:eb:3f:5d:c9:7a:
fb:d5:d9:0f:10:c0:b9:bd:02:90:b6:90:d3:1e:30:
cd:31:52:ff:aa:17:9a:63:e2:fd:32:ea:af:cb:2f:
fb:dc:ce:01:cf:8e:ad:2e:72:47:be:20:df:02:5d:
d6:55:d1:2d:a1:e1:d8:41:db:17:3b:c9:23:06:d3:
f9:7c:29:88:cb:76:6b:98:76:1b:61:74:39:ff:c6:
4d:43:48:2d:f1:cb:74:86:3f:27:2d:2e:d6:8f:ad:
73:48:df:5f:d0:6a:37:0d:de:91:32:c7:04:a1:69:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:B9:28:CA:17:FB:31:62:4F:95:44:81:5A:08:3B:9D:10:6C:FF
X509v3 Authority Key Identifier:
keyid:13:01:59:CF:4F:A6:0D:26:A7:D1:BD:0F:A8:85:16:73:3B:67:6D:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/130159CF4FA60D26A7D1BD0FA88516733B676D6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/3136382e39302e31362e302f32322d3234203d3e20323635323731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.16.0/22
Signature Algorithm: sha256WithRSAEncryption
21:4f:43:9e:5e:8e:dc:11:19:35:a7:9b:17:dc:08:a5:61:30:
74:d7:95:da:62:1d:6c:6d:87:b3:d1:52:6c:67:88:6c:82:97:
b5:19:27:b6:5e:2b:00:8f:c3:20:a8:5a:dd:8a:0a:86:2d:dd:
11:dc:59:35:08:5f:db:d5:db:dc:9a:93:c7:ec:10:03:6f:c7:
38:84:45:c3:e7:fc:bb:94:b8:71:0c:e6:88:92:4e:e5:d7:08:
38:b6:16:7d:25:2e:7d:88:50:5d:31:40:ad:5c:ab:84:27:b9:
bc:ca:b5:38:ae:b6:c3:ed:7e:84:76:32:09:13:81:d7:b8:31:
c6:27:97:5e:7a:13:ee:c9:f5:7d:42:1e:4c:f1:3b:45:e4:45:
42:e2:38:2d:da:d4:b4:e9:24:e3:6d:62:38:db:4e:09:79:9f:
fc:e1:24:c0:6b:d9:71:4a:bd:83:71:8a:ee:1f:88:b9:30:72:
7a:c4:8c:5d:5b:7e:9b:f5:71:b5:a2:b0:98:48:c8:99:86:0f:
1c:70:b9:12:9f:07:09:0c:85:0c:5e:bd:6c:dc:fa:da:ee:6b:
d1:7e:d7:84:44:06:97:05:f3:4b:e6:d7:96:61:9b:7b:2a:c3:
d2:e1:69:c5:99:38:b3:da:a0:d5:f7:13:3f:0e:bd:e8:39:cb:
8f:9c:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:55 2025 by rpki-client