Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
File: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (raw, json)
Hash identifier: PBAVWDEZ/8URUjnI7xWp37tBWzT+HtUN4BzJA9/c93Q=
Subject key identifier: 28:03:8F:07:8C:4B:00:50:E5:DF:07:4F:10:E7:73:A0:C8:B1:0B:FE
Certificate issuer: /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial: 522976CF11BEE24BBDFB9BD18C92676B468E2354
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
Signing time: Mon 14 Oct 2024 13:21:06 +0000
ROA not before: Mon 14 Oct 2024 13:16:06 +0000
ROA not after: Mon 13 Oct 2025 13:21:06 +0000
asID: 265282
IP address blocks: 168.90.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:29:76:cf:11:be:e2:4b:bd:fb:9b:d1:8c:92:67:6b:46:8e:23:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Validity
Not Before: Oct 14 13:16:06 2024 GMT
Not After : Oct 13 13:21:06 2025 GMT
Subject: CN=28038F078C4B0050E5DF074F10E773A0C8B10BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:b9:d8:2f:8a:58:7a:59:58:ce:5d:3b:91:
a6:a0:f0:65:c9:e0:fd:66:0a:5b:06:e9:1c:9f:c8:
70:1c:b9:bb:a7:66:0c:62:e0:0f:c6:88:09:4e:5c:
61:e3:9a:2d:16:46:cf:a1:13:da:b0:cf:8f:5e:77:
da:ca:4a:b3:76:fb:4a:de:42:0c:2d:30:58:30:ba:
83:3a:cd:b2:45:3b:36:e8:e0:c4:86:27:53:3e:b8:
d3:a1:33:d2:fc:37:00:ba:00:53:0d:7f:de:40:2a:
bd:80:82:fb:5c:e3:bf:b5:0c:65:67:03:03:9d:30:
ac:4f:57:a3:e6:bb:2f:1c:e2:70:23:b9:d8:80:52:
2a:0f:a6:45:b5:12:31:50:08:50:17:91:7f:73:47:
80:b2:79:6e:1d:69:81:04:66:54:fa:4f:5a:be:35:
f3:21:76:55:fc:dc:c5:cc:5d:2d:84:a2:a9:ca:fe:
d0:04:c3:7a:18:1c:88:94:1e:2a:4d:c8:6b:8c:3b:
96:86:ec:fc:fd:13:64:de:52:69:43:7a:8d:20:80:
e7:68:4e:64:4c:78:65:06:0e:6c:93:04:d7:9b:5c:
90:78:52:df:57:30:f5:8e:1b:27:f4:9e:85:e2:26:
fc:d9:84:c9:5a:d9:8b:05:77:67:58:97:2d:44:ed:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:8F:07:8C:4B:00:50:E5:DF:07:4F:10:E7:73:A0:C8:B1:0B:FE
X509v3 Authority Key Identifier:
keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.208.0/22
Signature Algorithm: sha256WithRSAEncryption
11:08:7a:43:cd:c5:e5:a1:65:3d:1a:13:53:7c:bd:b8:f9:ca:
a5:01:47:5f:23:9b:02:81:62:13:50:66:02:75:bd:f5:fc:a3:
de:4e:fd:44:f1:ce:13:c2:7a:f3:73:02:54:17:cd:40:5c:c0:
9a:7a:87:ef:6e:0c:97:85:03:e3:d2:84:3f:a8:65:7f:34:b9:
d4:b8:cd:e9:76:71:a6:6d:22:56:eb:d9:ce:22:64:7e:54:dd:
e1:a7:9f:e4:e0:b1:96:61:ab:0e:ea:32:bd:f1:79:9c:7a:ac:
e5:d5:60:71:ca:97:e6:c5:7f:e3:e0:e8:e0:35:ac:1b:fa:3c:
ad:1a:44:5c:e5:b5:ea:5b:68:c1:26:ad:b5:92:13:42:c6:65:
e9:26:a0:fa:83:05:a1:9f:7a:e8:bb:e3:d3:26:5e:cb:62:17:
c8:21:5f:4e:db:a8:f0:60:cb:01:17:e3:b9:0f:01:aa:a9:e4:
02:45:46:65:37:18:3f:c4:7a:12:4f:4a:f3:59:b9:79:be:95:
87:37:ba:64:96:4a:3c:41:44:c3:b4:0b:75:ee:96:e9:cc:d3:
36:79:fa:e5:14:ed:51:4e:87:21:33:9c:e4:0d:dd:1c:83:1a:
15:53:2c:55:8c:f0:3b:2a:bb:7f:87:69:ea:33:b6:6c:ae:75:
a5:25:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:29:38 2025 by rpki-client