Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa
File: 3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa (raw, json)
Hash identifier: ML78teISbpESNV4kVZUjFjfESuRn96q4FakSWAAPBkE=
Subject key identifier: CB:F2:B0:E3:71:52:43:6A:C3:60:47:6D:0B:BA:9D:77:5F:E2:AF:15
Certificate issuer: /CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Certificate serial: 6B7CF15CCEAA5D4B4412073B3791DF58B7C29E55
Authority key identifier: 32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa
Signing time: Tue 07 Jan 2025 20:03:02 +0000
ROA not before: Tue 07 Jan 2025 19:58:02 +0000
ROA not after: Tue 06 Jan 2026 20:03:02 +0000
asID: 262460
IP address blocks: 143.255.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7c:f1:5c:ce:aa:5d:4b:44:12:07:3b:37:91:df:58:b7:c2:9e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Validity
Not Before: Jan 7 19:58:02 2025 GMT
Not After : Jan 6 20:03:02 2026 GMT
Subject: CN=CBF2B0E37152436AC360476D0BBA9D775FE2AF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:78:89:d6:dc:e3:2b:7e:26:c7:df:5f:e1:
5f:a4:6d:9e:03:71:dc:92:de:92:73:f4:72:17:7d:
25:35:0a:bf:62:77:51:73:8f:b8:a5:e3:1d:86:6f:
35:11:10:35:c7:9d:7b:54:f7:f1:07:75:36:41:db:
fa:f2:2f:5c:48:63:77:50:d0:6a:52:7d:22:b0:5d:
0a:9b:d1:a4:08:be:40:f8:eb:9d:f5:e1:40:2b:23:
0b:1d:a3:11:1e:e1:b3:81:83:d0:63:ba:76:4d:4a:
89:f2:75:4b:13:4d:9d:62:f9:15:a2:82:3a:ef:a4:
93:30:66:dd:95:4f:32:b2:c2:49:c9:24:e4:a5:08:
02:ff:20:63:23:c6:13:12:17:44:c1:e8:4b:f3:15:
9e:b3:e3:16:fb:4c:ae:06:1e:3c:8b:2b:4a:2b:cb:
ef:21:66:41:21:46:e6:7e:26:1c:fa:3a:88:7a:a1:
34:ba:05:65:61:c7:a5:dd:a9:2d:9e:2d:92:fb:f1:
b9:43:c2:14:4b:d8:64:ef:7b:62:85:28:a9:64:73:
58:99:88:b4:13:78:05:2b:66:86:56:3e:03:bb:b9:
bd:46:c8:41:87:18:05:c1:f9:12:ff:a3:79:3d:0a:
d9:3c:5b:e5:69:d3:9e:50:af:d2:16:e0:71:de:d8:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F2:B0:E3:71:52:43:6A:C3:60:47:6D:0B:BA:9D:77:5F:E2:AF:15
X509v3 Authority Key Identifier:
keyid:32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ca:a8:77:e3:e0:d9:c8:bb:32:04:c3:19:6d:e6:75:82:d1:
a2:91:a7:25:c8:62:7a:f8:9f:d4:8a:a1:2b:3c:d4:61:09:20:
70:4a:81:e7:53:69:6d:a1:b2:23:4c:71:e1:56:3f:79:c0:a4:
5c:0e:f4:fc:20:58:00:68:98:00:b1:61:80:ef:f8:1b:7a:22:
3b:1e:df:f1:2b:18:a2:12:89:a9:ea:e1:13:d5:2b:4e:e0:30:
71:fa:a9:3c:78:a7:f5:4d:ed:8a:2f:8d:e1:b3:ba:a1:f8:76:
e6:5f:1e:32:c9:e2:5a:d4:a7:00:65:31:f7:e9:75:14:85:f9:
ef:4c:fa:47:21:eb:67:e5:96:b3:01:63:26:ea:fe:aa:4a:a5:
68:7b:52:3e:85:7f:07:d0:89:8e:ba:e8:5d:5b:59:fb:11:bf:
47:91:c2:e7:b4:30:29:57:2f:4a:db:fc:e4:2d:fd:7a:4b:de:
5a:f4:98:94:a5:45:6b:31:16:0f:e3:c7:0f:39:36:8f:c3:06:
1b:6e:fe:19:c7:a7:a4:bc:d5:47:f1:45:6f:d1:a7:1d:ec:5b:
b4:85:80:06:36:94:ed:f5:03:c8:d7:b4:38:0d:a7:d0:d1:6e:
ab:56:09:df:33:dc:e6:7f:38:9c:05:12:75:d3:51:7e:ce:65:
68:ae:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:48 2025 by rpki-client