Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32322d3232203d3e20323635323633.roa
File: 3136382e39302e33322e302f32322d3232203d3e20323635323633.roa (raw, json)
Hash identifier: 44WgfsfYsGYKYppDfijt9BN3Gu595pTtcOLlrNxuDZI=
Subject key identifier: 8D:BE:5A:B0:FB:70:CA:ED:80:4C:B4:7D:30:9F:4F:42:86:32:30:42
Certificate issuer: /CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Certificate serial: 725674264B78D10790299265FD22F440D985C8C0
Authority key identifier: 1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32322d3232203d3e20323635323633.roa
Signing time: Thu 08 Jun 2023 12:51:26 +0000
ROA not before: Thu 08 Jun 2023 12:46:26 +0000
ROA not after: Thu 06 Jun 2024 12:51:26 +0000
asID: 265263
IP address blocks: 168.90.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:56:74:26:4b:78:d1:07:90:29:92:65:fd:22:f4:40:d9:85:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Validity
Not Before: Jun 8 12:46:26 2023 GMT
Not After : Jun 6 12:51:26 2024 GMT
Subject: CN=8DBE5AB0FB70CAED804CB47D309F4F4286323042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:22:00:b2:61:41:cb:28:9b:e3:f4:19:98:
dd:1e:c8:b7:5d:9c:17:21:ce:93:f1:f0:cb:66:ac:
ef:5b:31:d5:6f:a2:3c:1a:a4:be:0d:04:fa:e3:9f:
14:d9:53:d7:fb:2f:2a:e7:e5:ef:1b:6a:3f:c8:44:
2d:2f:df:c5:92:32:54:91:2f:1d:7d:a9:ab:0f:a6:
18:94:09:5b:f6:05:96:90:f6:2d:04:97:c6:84:89:
15:98:be:b3:f9:a8:7f:46:1a:9e:ba:81:c7:95:68:
e2:64:ca:3b:48:11:65:9b:44:ad:3a:15:5e:ec:6b:
f8:86:5f:f4:03:28:4a:42:29:0e:3d:d3:fe:61:55:
3f:cc:a8:92:19:8c:14:7f:27:9b:11:98:d1:c0:15:
c4:23:2c:f4:98:69:da:c3:e5:b2:b3:4f:13:5f:e9:
ae:dd:c2:40:4e:6a:5a:5b:19:53:00:51:a3:45:50:
3e:10:14:2e:c3:a6:28:23:63:16:cc:98:bc:27:8a:
be:94:67:7d:f3:10:fe:df:8d:8b:15:7a:0c:0f:e3:
cb:f4:84:be:c1:ef:db:4e:93:56:5d:58:6a:4f:2e:
a4:45:a5:d2:2a:c0:3d:28:31:61:29:ff:72:90:44:
4d:49:f1:43:02:98:b7:63:69:81:d3:03:8f:50:64:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BE:5A:B0:FB:70:CA:ED:80:4C:B4:7D:30:9F:4F:42:86:32:30:42
X509v3 Authority Key Identifier:
keyid:1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32322d3232203d3e20323635323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.32.0/22
Signature Algorithm: sha256WithRSAEncryption
10:57:44:82:36:4c:b1:ca:45:c9:18:ba:f7:20:58:fe:d9:f6:
ad:3f:3f:fe:5c:b0:cb:bf:c4:13:4c:6b:45:74:df:b0:1f:ba:
fd:68:80:ee:79:69:91:43:e2:d6:b6:48:12:5a:61:6b:bc:21:
0d:91:e0:72:4a:f8:3a:bd:34:c0:fd:85:4d:d3:6a:70:8d:9e:
44:c8:fc:20:8f:97:8a:ab:f3:ce:84:3b:eb:70:cc:47:ec:21:
7e:6d:67:a2:21:30:e1:23:39:5b:71:0d:59:59:a5:bc:2f:cb:
80:38:03:75:64:d9:ac:77:54:ef:47:65:de:53:ce:23:60:3b:
6b:90:5e:9e:8c:e7:3e:50:9b:96:67:42:46:25:8f:f1:70:75:
a8:67:24:ed:69:b4:ff:31:16:11:06:05:3e:ee:86:4d:98:5c:
d8:64:31:4c:d2:61:e7:f6:55:6c:22:0c:50:a7:67:d0:aa:e4:
f8:5e:14:9b:c5:b8:6a:ae:eb:1d:94:79:82:39:a9:cc:8e:ce:
2c:af:8d:25:d9:0b:6d:c7:41:bd:19:34:10:e5:c4:c1:cf:e6:
a4:8f:36:13:f4:2d:bf:21:13:96:c1:4c:80:b3:8b:d1:60:75:
5d:36:19:63:0d:71:00:c1:ff:dd:01:b4:de:47:f6:50:cc:84:
a3:32:cc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:33:42 2025 by rpki-client