Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232362e302f32342d3234203d3e20323635343031.roa
File: 3136382e3139342e3232362e302f32342d3234203d3e20323635343031.roa (raw, json)
Hash identifier: owhCaCuPptOCP5JsaqrWnTYvubYFnMS/qc7mCMpukKs=
Subject key identifier: 34:54:38:0C:90:86:B7:99:1C:0B:4B:77:A0:6E:BB:1C:01:42:8B:5B
Certificate issuer: /CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Certificate serial: 5D319AB8F65DB9E5F71B25A2CAE780BFA3C9B887
Authority key identifier: E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232362e302f32342d3234203d3e20323635343031.roa
Signing time: Mon 21 Nov 2022 16:29:50 +0000
ROA not before: Mon 21 Nov 2022 16:24:50 +0000
ROA not after: Mon 20 Nov 2023 16:29:50 +0000
asID: 265401
IP address blocks: 168.194.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:31:9a:b8:f6:5d:b9:e5:f7:1b:25:a2:ca:e7:80:bf:a3:c9:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Validity
Not Before: Nov 21 16:24:50 2022 GMT
Not After : Nov 20 16:29:50 2023 GMT
Subject: CN=3454380C9086B7991C0B4B77A06EBB1C01428B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:e1:d2:56:76:93:1b:ca:29:87:89:86:e3:
fa:87:fc:fe:05:af:1b:cd:1f:c0:26:80:ab:78:c1:
36:5f:d1:b5:f6:1b:8e:c9:36:43:f4:09:09:00:63:
6a:69:a9:94:ca:74:a1:fa:95:a9:d2:c0:83:19:6d:
53:39:33:9c:50:46:85:03:b3:9d:2a:32:9a:11:28:
82:3c:24:5f:40:ef:cf:e5:0d:2d:2b:e8:8f:78:f8:
35:32:3a:2b:ae:55:fd:b2:28:81:07:33:bf:cc:1e:
20:7a:96:8e:2f:5f:2b:39:43:f3:cc:ef:4b:23:ef:
f6:4c:21:8a:51:ad:ca:b2:a8:cb:5a:94:a6:89:8e:
55:1e:7f:c8:f3:62:3c:9c:39:bd:df:96:e2:3e:fb:
92:ae:a4:3f:b4:fd:6f:18:52:5c:77:c4:16:e6:7a:
07:86:9d:d3:b9:9f:a6:c8:6c:56:67:e1:8d:39:2a:
fd:fa:dc:a5:94:28:c2:47:f4:af:85:f6:b3:c6:cf:
cd:5c:f6:3d:dd:d8:a2:88:2d:05:0a:7c:3d:a8:93:
a0:42:b9:33:b2:6e:bc:b0:6f:a9:84:20:13:9b:c5:
0e:71:bb:1f:bb:db:f5:a3:c8:2e:69:6a:47:fb:6b:
81:9d:d2:04:0b:58:46:71:ff:3b:7e:b4:c8:9d:e5:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:54:38:0C:90:86:B7:99:1C:0B:4B:77:A0:6E:BB:1C:01:42:8B:5B
X509v3 Authority Key Identifier:
keyid:E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/3136382e3139342e3232362e302f32342d3234203d3e20323635343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.226.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0e:ff:78:47:0c:1f:e1:3f:71:45:5c:e3:ca:93:88:a7:bf:
61:ef:ef:bd:b2:d8:0b:52:ec:f7:87:5e:43:37:37:0b:83:cd:
20:49:08:e1:6a:f5:13:11:5a:1e:c6:68:99:4f:a0:f8:19:7e:
ac:2c:47:2f:83:f1:4a:6a:9a:10:83:07:2a:3b:0c:a8:3c:86:
12:e4:01:cf:14:ef:b8:f7:82:80:0c:da:01:70:d2:fc:79:36:
8d:0d:5d:8a:00:2d:19:b7:ca:df:60:f7:6e:71:ec:28:a4:5f:
4c:07:bc:02:ad:29:67:00:c9:04:0a:a7:7b:08:93:bc:ff:70:
e0:88:03:30:77:5e:e4:a5:b6:06:0b:ad:99:be:30:e2:aa:44:
ff:4f:de:bd:81:7e:cc:1e:e2:6f:1f:8b:fc:2f:5d:a7:6d:c6:
1d:a7:44:25:17:e3:25:ed:0d:af:d1:ed:65:fb:b5:76:69:26:
f7:61:af:3b:7e:ac:69:5b:78:69:b3:69:fc:e8:e7:ea:e2:81:
f1:61:6b:23:88:a3:cd:74:b3:be:8d:61:2d:0e:ae:52:b1:1d:
fe:0b:2e:7e:04:3a:7b:45:29:34:42:3e:61:60:79:96:8f:38:
ac:2f:14:59:9f:85:c2:4d:1f:c3:b6:27:df:aa:81:1d:7b:d3:
db:72:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:11 2025 by rpki-client