Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3234203d3e203233303734.roa
File: 3136342e38352e39382e302f32332d3234203d3e203233303734.roa (raw, json)
Hash identifier: DdS/tV291E0s9Vdks+9uVSkIbk9c09ZLIxkXVQhpks8=
Subject key identifier: 17:31:0C:97:17:F2:3C:9F:4F:A7:0F:60:7C:CE:5D:53:6F:D5:C8:9D
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 3928F8513CD4E0C1BDBA5AF28CC705E9F9A3D048
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3234203d3e203233303734.roa
Signing time: Fri 07 Feb 2025 12:32:52 +0000
ROA not before: Fri 07 Feb 2025 12:27:52 +0000
ROA not after: Fri 06 Feb 2026 12:32:52 +0000
asID: 23074
IP address blocks: 164.85.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:28:f8:51:3c:d4:e0:c1:bd:ba:5a:f2:8c:c7:05:e9:f9:a3:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Feb 7 12:27:52 2025 GMT
Not After : Feb 6 12:32:52 2026 GMT
Subject: CN=17310C9717F23C9F4FA70F607CCE5D536FD5C89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:5c:48:8f:8a:74:b8:6b:a8:c1:49:ab:82:
78:d3:29:b8:f3:59:90:e2:ce:ee:3c:13:eb:0f:2c:
45:e2:ba:3c:16:1e:cf:2f:24:0b:e7:ec:de:9a:15:
8b:a8:7d:7f:8f:fe:52:51:79:1e:b9:fc:36:97:27:
c4:91:42:f3:4a:d4:3c:86:db:08:ed:fb:af:17:a5:
85:0e:c2:ef:0c:65:b0:45:b0:46:89:d4:f7:75:d9:
f6:96:7d:db:8f:7f:8c:d7:cf:cd:d1:d3:18:22:f3:
61:d2:92:29:88:ed:5d:97:e5:c3:cf:ae:40:20:6e:
14:0f:95:30:18:ea:e7:c7:99:b7:bd:07:75:5e:93:
e3:8e:b9:17:a1:8b:4b:a7:71:8b:00:af:1b:97:84:
5d:b1:1f:7f:a2:ca:80:78:e7:fc:9c:8d:0f:ee:34:
c7:24:2a:35:f7:c2:cf:ab:ed:64:1b:d2:4e:6b:bd:
e2:b8:78:25:05:c6:93:3b:75:7d:57:22:54:2b:ca:
49:a9:67:a8:e2:b4:a6:af:65:e2:ee:b3:71:ae:bd:
fe:b1:1c:06:04:ad:01:2f:2c:58:7c:65:c4:0d:cb:
b1:19:a2:6e:28:5d:9c:a0:0a:06:f8:6c:5f:f5:75:
02:c1:fc:6d:8e:b7:01:d6:70:38:09:3c:ce:31:d2:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:0C:97:17:F2:3C:9F:4F:A7:0F:60:7C:CE:5D:53:6F:D5:C8:9D
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3234203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.85.98.0/23
Signature Algorithm: sha256WithRSAEncryption
12:e2:30:61:4e:af:6a:62:6d:d0:a0:60:02:33:a8:62:17:c6:
5a:0c:50:81:1d:a8:d9:8a:8d:1c:a2:cb:09:f3:1a:ac:8d:d6:
00:c0:71:f5:80:22:75:a3:7b:b4:3d:32:ea:62:9b:a9:04:8b:
57:29:15:9f:08:a8:38:75:8b:b4:7f:22:eb:3f:c0:97:76:3d:
f1:16:62:55:1a:7d:38:3b:54:c9:b5:a7:5c:53:44:3a:72:f1:
31:0a:cb:2c:b4:a0:84:e6:79:14:05:87:c7:49:47:e8:9e:16:
49:34:4c:fe:b0:2a:6d:8e:1d:ac:4e:6d:a5:49:8b:86:e3:d6:
52:b8:d0:5d:dc:e6:18:67:54:84:0c:37:74:e5:67:be:48:30:
0f:68:56:7f:1d:29:46:36:81:28:da:f7:e3:74:f6:df:04:17:
a2:58:95:48:03:54:9c:f2:16:2f:fc:2f:f2:29:5a:e2:ae:96:
2e:4b:7f:ff:e8:c1:a8:5f:c0:3c:1c:6b:91:45:8b:38:3d:1a:
57:2a:6f:6c:f1:ff:b0:fb:00:19:cb:24:c8:a7:9b:fa:63:49:
70:c1:95:24:87:80:cc:30:39:51:37:46:96:e8:e3:cd:1d:e9:
a3:3f:c1:ed:7b:b9:23:4c:05:c1:dd:70:41:d8:fa:06:a1:ce:
71:ea:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:41:47 2025 by rpki-client