Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e33322e302f32332d3234203d3e203233303734.roa
File: 3136342e38352e33322e302f32332d3234203d3e203233303734.roa (raw, json)
Hash identifier: XqfrHnXOklAsALqzU8bWfmw8XRVc4z0YPFq7m34azAg=
Subject key identifier: 00:D7:A4:96:4E:03:99:38:96:62:3B:20:C4:18:B6:68:B9:3A:33:04
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 58C301F683541BD5CBFD87DF12069A4C76062974
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e33322e302f32332d3234203d3e203233303734.roa
Signing time: Fri 07 Feb 2025 12:34:39 +0000
ROA not before: Fri 07 Feb 2025 12:29:39 +0000
ROA not after: Fri 06 Feb 2026 12:34:39 +0000
asID: 23074
IP address blocks: 164.85.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c3:01:f6:83:54:1b:d5:cb:fd:87:df:12:06:9a:4c:76:06:29:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Feb 7 12:29:39 2025 GMT
Not After : Feb 6 12:34:39 2026 GMT
Subject: CN=00D7A4964E03993896623B20C418B668B93A3304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:59:52:d5:15:be:fb:81:7c:8e:26:0f:86:
63:7f:3f:f1:1f:47:f0:d1:83:27:35:ce:17:4f:e4:
2e:63:3d:76:3d:f4:52:4b:99:41:dc:34:4d:95:83:
8a:a5:6d:5c:6f:35:15:97:4d:40:ca:7b:8d:72:da:
0e:bd:84:3c:14:38:19:40:fc:85:36:09:21:bd:8e:
61:de:58:1b:18:41:99:14:65:b6:82:14:7a:7e:80:
05:22:f4:86:f3:0f:27:f3:e8:7c:a5:f6:30:92:a3:
7f:b1:d7:33:ce:da:c9:cb:e4:76:55:ce:22:21:8a:
70:5a:5c:81:44:1a:08:f6:ab:a1:82:36:71:98:38:
5d:63:08:c9:41:09:e5:85:e9:a7:56:09:6a:bb:5a:
70:64:8b:30:c5:28:47:92:a9:1f:46:a9:6c:12:ab:
04:17:90:77:20:e4:30:81:d5:de:ea:b2:9a:9d:71:
47:da:ad:6c:f4:aa:13:2e:5c:0b:7b:eb:72:9d:05:
79:7f:b5:7f:4e:30:0e:2f:e6:ab:09:c9:d6:5c:77:
8f:7f:44:38:00:41:1e:ce:c1:7d:82:8d:77:15:b0:
d8:2a:67:c5:3a:b8:01:a7:7f:18:f5:c4:09:4c:f7:
8b:87:35:50:9f:c7:24:db:ac:90:13:bd:a1:10:3d:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D7:A4:96:4E:03:99:38:96:62:3B:20:C4:18:B6:68:B9:3A:33:04
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e33322e302f32332d3234203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.85.32.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:97:8b:89:11:93:12:75:7b:fe:a0:44:09:a0:14:d4:d4:04:
68:54:5d:e6:79:85:42:5c:94:65:38:9a:ef:cb:71:e6:d5:d2:
db:35:0d:fe:aa:59:88:81:d6:b3:c7:af:14:bb:6e:32:43:20:
19:a9:a1:f7:0f:ae:3b:3f:cd:5a:81:40:59:2f:23:6e:02:cd:
f4:49:d5:db:b4:57:0e:e5:51:66:4e:0a:4c:7d:8a:9f:82:6f:
b2:b7:03:f7:40:ad:da:d0:d9:c2:6e:0a:b8:e9:2d:fb:21:13:
9f:f7:e7:16:f3:25:3e:b1:71:95:19:3a:cf:8f:3e:e7:39:07:
e6:5d:db:72:19:3b:ad:58:bb:6f:14:02:56:4c:00:3b:2e:24:
3e:16:a0:78:73:c6:c2:a9:0f:c4:d3:c9:79:1f:c4:64:6e:ee:
43:ba:09:b5:8a:ed:a1:7e:09:0d:79:6f:c3:72:f5:12:fb:29:
b9:d9:aa:16:12:1e:5f:ec:63:83:c9:7d:7f:a4:ae:d5:24:38:
70:01:8b:0b:a1:f6:0a:88:b5:26:33:09:26:35:4a:e6:91:03:
0e:05:51:a8:af:4a:99:aa:23:cd:37:0d:7e:bc:48:25:b5:3c:
6e:13:65:e3:2a:f7:04:0e:6f:5a:12:4e:8e:b6:7b:dd:84:16:
39:a6:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:50:12 2025 by rpki-client