Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33352e302f32342d3234203d3e20323635323633.roa
File: 3136382e39302e33352e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier: r+Utv9Urbm3hd688MpYaAM4fyujfarcbFGXMkp1/43A=
Subject key identifier: 91:9C:0D:65:D5:D1:E9:89:CB:5E:62:FB:14:B2:93:13:D1:B1:91:8D
Certificate issuer: /CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
Certificate serial: 08C33E8AE66F4B9F248D52B35955BAC1ACD8B435
Authority key identifier: C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33352e302f32342d3234203d3e20323635323633.roa
Signing time: Sat 23 Nov 2024 14:57:37 +0000
ROA not before: Sat 23 Nov 2024 14:52:37 +0000
ROA not after: Sat 22 Nov 2025 14:57:37 +0000
asID: 265263
IP address blocks: 168.90.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c3:3e:8a:e6:6f:4b:9f:24:8d:52:b3:59:55:ba:c1:ac:d8:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA
Validity
Not Before: Nov 23 14:52:37 2024 GMT
Not After : Nov 22 14:57:37 2025 GMT
Subject: CN=919C0D65D5D1E989CB5E62FB14B29313D1B1918D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:b6:a2:46:1e:f7:4b:37:76:ce:21:be:b6:
10:77:77:26:4d:7e:e4:a9:7b:ce:11:6a:54:4a:01:
19:c2:cc:d7:03:73:e6:47:a8:b0:b3:1d:05:19:7f:
a8:1e:df:d2:e5:14:90:9f:99:bd:cc:02:d7:2e:cc:
b2:cc:3e:45:95:e9:0a:8e:57:ad:e7:8a:88:2c:40:
49:50:77:50:74:ef:6d:64:65:78:40:99:85:11:e8:
5b:6b:db:62:a7:22:33:e4:4b:33:c6:da:62:86:01:
54:af:7f:8d:a5:9e:16:de:78:67:ec:81:ab:d0:7a:
58:a4:a5:7c:75:f9:49:18:7b:dc:b4:86:81:5f:7f:
00:70:d1:2d:08:d4:02:8f:e8:ea:9d:7f:a8:cd:8d:
bb:75:d6:8c:88:75:cb:87:3a:f6:d0:0f:be:69:c6:
c4:65:76:8d:2e:ff:cb:36:6e:95:13:ff:40:15:84:
a7:93:25:fb:42:a0:73:42:c3:34:49:9d:79:5d:c6:
04:2b:ac:94:ef:53:77:7e:25:34:ba:32:e3:c2:00:
29:48:72:34:3c:01:bb:60:65:24:cf:06:fa:a1:44:
ab:bf:10:33:cf:86:81:e9:57:f0:f4:74:28:6a:aa:
99:c1:a2:f1:73:1a:d8:36:c0:9a:49:3b:4d:97:b8:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:0D:65:D5:D1:E9:89:CB:5E:62:FB:14:B2:93:13:D1:B1:91:8D
X509v3 Authority Key Identifier:
keyid:C6:F9:63:BA:A2:6E:CF:F8:F7:5C:C0:0D:1B:D9:9E:96:1D:63:14:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6F963BAA26ECFF8F75CC00D1BD99E961D6314FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/3136382e39302e33352e302f32342d3234203d3e20323635323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0f:cb:6c:bd:83:b4:ba:ea:4a:67:39:e8:74:93:f4:fa:63:
c0:28:a3:42:ef:ec:9c:66:37:6d:f9:20:bf:f1:d4:d4:e0:c8:
b2:5d:af:2f:ab:27:1a:83:52:ef:35:aa:b0:f1:3c:6f:19:3a:
8e:9d:57:d5:27:7d:29:1c:a1:f1:31:41:6d:92:45:e1:f2:1b:
ac:13:ee:ed:8d:6f:db:75:2c:cd:1e:00:5a:77:47:0a:d9:ad:
8d:5b:4c:1b:74:3c:32:d8:b6:e0:d9:bf:03:f0:fc:75:d9:e4:
e2:da:55:19:f7:d1:a5:23:ac:dc:89:38:8f:41:7f:52:81:6a:
cf:24:63:5b:81:88:08:4e:b9:38:49:79:5e:4c:f9:f0:67:19:
95:ca:fd:fe:bb:64:70:e7:f1:e9:77:9e:e6:74:85:26:84:12:
95:ec:4b:84:bc:de:68:3c:5a:95:3a:d0:a1:d3:78:cc:a9:fc:
09:44:0c:cd:5a:5e:71:85:66:23:3c:59:56:12:68:20:ba:1c:
65:a3:fc:13:19:4f:f2:e3:ef:72:04:b0:e1:3b:d6:0a:7a:8b:
5b:db:30:c6:4c:84:dc:e3:7e:48:d6:a5:dd:db:5b:a4:ed:c5:
13:0f:2c:76:c5:ee:b5:3b:d6:51:a4:f4:f0:fe:0f:53:67:70:
8f:20:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:28 2025 by rpki-client