Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
File: 3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier: rTEPkLtsMnsLzQ7Ge7fnJYoLXMXjUKdr3Dge0E6IjM0=
Subject key identifier: 9F:21:B9:4C:D7:97:66:11:67:BF:14:E1:50:F4:C6:FB:69:9F:69:EF
Certificate issuer: /CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
Certificate serial: 1AF3D27A8C60C407630084B18A168A554AC3D779
Authority key identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
Signing time: Thu 04 Apr 2024 05:45:36 +0000
ROA not before: Thu 04 Apr 2024 05:40:36 +0000
ROA not after: Thu 03 Apr 2025 05:45:36 +0000
asID: 262777
IP address blocks: 168.121.188.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f3:d2:7a:8c:60:c4:07:63:00:84:b1:8a:16:8a:55:4a:c3:d7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
Validity
Not Before: Apr 4 05:40:36 2024 GMT
Not After : Apr 3 05:45:36 2025 GMT
Subject: CN=9F21B94CD797661167BF14E150F4C6FB699F69EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:41:0e:c5:1c:e2:26:03:a7:86:6c:9c:e8:
4d:c1:c5:b6:a5:e5:48:4d:ae:7d:bb:40:8c:ec:04:
92:45:9f:a3:8c:3c:84:85:be:e6:e7:f7:4a:dd:ee:
1d:b7:bb:da:51:f8:7f:14:46:00:d3:a1:74:51:3e:
ad:fa:d1:bc:40:14:94:50:52:e6:81:9d:db:68:13:
eb:46:6f:25:93:da:07:a9:fa:db:c2:12:0e:9e:7c:
28:1f:d4:15:0c:4c:9d:ed:cb:07:50:de:41:6a:b2:
f1:7c:e9:24:72:bf:2a:d2:2a:c9:b4:0b:3b:0f:a6:
5d:40:7e:e8:8a:db:07:a0:3a:16:40:60:ff:84:83:
31:29:45:9f:05:59:3e:68:ef:89:02:90:25:f6:c4:
a3:95:53:cb:bf:ee:af:84:dc:c4:24:21:bd:ad:f2:
22:8b:b1:5f:5a:36:70:d7:00:a5:5e:a8:4b:cb:4a:
80:e7:8d:df:d9:1a:a7:f4:5d:1a:5b:35:45:92:f5:
3b:f1:6f:8a:40:0d:f2:2d:43:9b:fc:cd:34:46:23:
0d:11:21:ac:d8:42:32:a2:b7:c2:71:8a:a8:36:64:
95:b7:3b:9e:96:a6:78:4b:40:f6:61:44:78:67:0e:
38:93:2f:cb:4b:c2:55:93:09:d6:a3:17:19:01:a6:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:B9:4C:D7:97:66:11:67:BF:14:E1:50:F4:C6:FB:69:9F:69:EF
X509v3 Authority Key Identifier:
keyid:47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.188.0/22
Signature Algorithm: sha256WithRSAEncryption
69:c2:a5:3f:1d:bd:59:0a:bb:64:ef:aa:cb:5c:43:c0:bb:d9:
3b:bc:4d:2b:1d:62:01:1b:4a:3e:17:ff:66:6e:c7:19:3f:f2:
49:a4:a7:70:73:e3:6b:5c:d6:63:95:8d:21:cc:7d:e6:b4:2b:
0d:5b:26:25:6e:47:21:ee:e7:96:b3:a9:2a:23:29:b7:a5:e9:
26:c9:a9:69:42:01:63:37:61:28:d7:6b:22:ac:19:5a:7a:31:
c5:44:33:d1:f5:fc:cd:e9:ed:9f:b0:8d:1e:32:fd:24:af:47:
49:6e:75:36:bc:80:5b:af:6b:25:b8:33:e9:85:c1:46:b1:87:
5d:a3:86:19:fa:93:3b:7f:11:5b:ce:d4:d0:02:54:cf:50:be:
c2:7b:4f:36:ff:94:b0:a0:20:0d:27:3d:18:08:1f:b3:b2:ea:
65:3b:b4:b9:5c:fd:83:d1:39:8b:57:64:0f:86:ca:02:33:cb:
61:01:2e:80:14:c3:66:ef:79:1e:19:f8:4d:44:9a:fa:e0:02:
0f:a3:77:83:90:3c:e2:07:c1:f7:a6:a8:5b:99:ea:18:0f:68:
52:1c:72:7d:7e:33:60:bc:ab:b0:cc:ac:5c:bb:ad:d2:f8:dc:
d3:0b:79:79:08:b2:68:89:8d:59:a5:9e:0f:6c:89:fb:4c:43:
5d:fb:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:11:53 2025 by rpki-client