Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3136302e32302e3139362e302f32322d3332203d3e20323636313839.roa
File: 3136302e32302e3139362e302f32322d3332203d3e20323636313839.roa (raw, json)
Hash identifier: Uaop/8NfeHznS56OuHnKhemBEtlhOc1Z2GvP80PYzyA=
Subject key identifier: 1A:29:17:E3:4A:3B:B1:76:65:CC:19:86:1A:AE:DF:B6:D7:9F:B1:DE
Certificate issuer: /CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Certificate serial: 7E55A5D79859FFAA46728B6CBC2A51D637993D9E
Authority key identifier: 29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3136302e32302e3139362e302f32322d3332203d3e20323636313839.roa
Signing time: Wed 21 Aug 2024 15:01:27 +0000
ROA not before: Wed 21 Aug 2024 14:56:27 +0000
ROA not after: Wed 20 Aug 2025 15:01:27 +0000
asID: 266189
IP address blocks: 160.20.196.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:55:a5:d7:98:59:ff:aa:46:72:8b:6c:bc:2a:51:d6:37:99:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Validity
Not Before: Aug 21 14:56:27 2024 GMT
Not After : Aug 20 15:01:27 2025 GMT
Subject: CN=1A2917E34A3BB17665CC19861AAEDFB6D79FB1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:6f:02:52:50:44:fc:00:12:10:81:cb:53:
e1:e6:12:b4:3b:cb:5e:98:c0:13:03:7e:45:ac:2e:
77:79:2f:b5:6c:db:ef:3f:e3:7b:9a:7c:bc:ea:73:
af:2f:3d:25:f1:43:1b:c1:a1:44:4a:21:e4:28:f8:
8f:e5:92:5c:ed:04:7f:c6:18:b5:26:c8:8b:15:50:
96:0a:55:02:6a:81:48:2b:57:70:8a:4d:03:2a:2c:
c3:7f:aa:9b:cb:72:08:5a:d2:09:ec:12:a5:7b:cb:
bd:d8:20:a3:53:aa:7d:c1:ad:3a:ac:86:f8:7c:4d:
e6:04:e2:44:ff:a2:d5:f3:6f:69:b0:78:11:96:99:
78:11:a1:53:cf:80:53:bb:5b:5f:f3:ea:fa:f1:56:
4c:fa:33:c3:b8:56:a0:9a:71:05:58:ec:1c:6e:a0:
d3:a7:77:7b:81:77:9d:1d:c7:39:e8:b4:60:04:ae:
09:97:c6:15:ba:ca:e4:d6:55:b1:9b:d4:1a:c0:98:
48:61:30:90:d9:85:ab:9f:9a:47:41:69:8b:e5:9a:
c1:15:30:63:15:2f:c4:e2:92:6b:90:5c:7f:03:a3:
c6:6b:04:ba:a3:9d:a6:bf:0f:3c:d5:5e:b7:55:ad:
09:1e:00:c4:41:9b:5f:40:a4:f6:4b:9c:20:77:73:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:29:17:E3:4A:3B:B1:76:65:CC:19:86:1A:AE:DF:B6:D7:9F:B1:DE
X509v3 Authority Key Identifier:
keyid:29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3136302e32302e3139362e302f32322d3332203d3e20323636313839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:8f:4d:17:78:6d:00:d9:4a:91:e5:e7:a5:fe:53:80:68:17:
38:3b:4b:fe:47:6c:1b:10:86:0a:bf:c3:a8:4d:d4:1c:fe:2d:
de:01:b4:bf:77:e0:73:07:7a:7f:99:6d:bf:fa:e1:18:35:d9:
e4:a7:73:d5:41:c0:5a:40:ee:97:65:e2:ca:31:fb:10:52:37:
c2:60:b6:af:9a:66:e4:a8:eb:be:df:5a:f2:7e:bb:5f:e8:d4:
2c:3d:cf:b1:54:bc:e6:33:63:a6:97:b5:9e:fb:c6:78:a7:b6:
13:dc:65:e6:f5:3d:1b:fd:89:50:7a:0e:36:c5:94:5f:4a:a3:
f2:a5:9d:d0:28:a9:7f:9b:23:ba:69:c9:f2:73:67:ca:94:97:
3a:72:09:1d:54:b3:41:e4:33:ac:9a:d4:3c:4e:63:94:84:27:
ca:f4:f7:44:fa:a7:33:75:2a:af:9a:27:b9:34:75:7a:cc:6f:
9c:9d:7f:a8:c0:f1:f3:89:b3:bc:56:e7:14:ae:5f:ef:9a:36:
e2:fc:45:ab:7d:14:9a:01:c4:36:46:06:de:eb:2b:6a:d5:82:
de:7a:d6:cc:96:52:22:7a:dd:f8:98:6f:6e:6c:6f:26:8b:44:
03:ef:7a:6a:d1:8e:94:be:7e:3b:56:d2:b3:d0:cd:4d:ac:6f:
93:32:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:42 2025 by rpki-client