Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
File: 3136382e39302e33322e302f32342d3234203d3e20323635323633.roa (raw, json)
Hash identifier: UKtBLkDzuFL8RKmp2fw88zJJb2qbZUvaVvixCAZtJaw=
Subject key identifier: BC:46:8C:9B:B2:63:8F:7A:04:4B:F7:3E:B9:7B:C7:AF:9B:5D:64:37
Certificate issuer: /CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Certificate serial: 1516DE94072B85C6A8B8FFCB644A7FA58FD18D95
Authority key identifier: 1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
Signing time: Wed 07 Jun 2023 16:28:45 +0000
ROA not before: Wed 07 Jun 2023 16:23:45 +0000
ROA not after: Wed 05 Jun 2024 16:28:45 +0000
asID: 265263
IP address blocks: 168.90.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:16:de:94:07:2b:85:c6:a8:b8:ff:cb:64:4a:7f:a5:8f:d1:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Validity
Not Before: Jun 7 16:23:45 2023 GMT
Not After : Jun 5 16:28:45 2024 GMT
Subject: CN=BC468C9BB2638F7A044BF73EB97BC7AF9B5D6437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:05:80:ee:43:04:c3:95:25:b1:c6:b3:78:
aa:47:a7:e7:f6:67:9c:0b:2f:14:4b:d3:aa:87:04:
7a:63:11:ee:0f:49:03:db:9a:25:bd:e7:10:a3:4e:
3b:97:36:20:7b:a6:55:a4:8b:d6:7a:72:b5:ff:7e:
b8:55:20:e9:cb:b7:d9:49:20:47:a5:fd:6e:0b:e7:
e8:10:69:5e:f6:02:63:ee:8f:0e:c6:f8:dd:72:40:
c9:5e:71:69:db:58:d3:98:52:b4:24:6d:0f:d9:f5:
57:f9:84:b1:47:c6:16:43:72:7c:1a:79:00:96:20:
e3:51:2a:c9:b1:b3:b6:42:40:52:cf:b8:67:48:a7:
f3:ce:29:a5:de:18:00:66:7c:38:e1:48:3b:fb:e2:
65:62:32:ac:5f:ab:13:e4:26:53:f8:8a:3b:2d:ed:
6f:34:e9:13:3d:4f:e6:9b:3e:d3:aa:fd:6a:93:ab:
23:de:53:4c:7c:5d:c2:d9:13:c3:44:8a:e8:4e:e0:
de:92:59:f8:49:de:62:45:69:e7:45:e8:32:46:99:
3d:26:19:7d:c4:10:d4:ac:f5:2a:87:0d:a3:c0:e4:
17:fe:a5:31:f6:68:15:5b:c5:fa:7b:4f:e3:e0:4a:
d8:69:7a:d9:c6:e3:fb:62:06:e7:b4:18:f5:4f:8e:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:8C:9B:B2:63:8F:7A:04:4B:F7:3E:B9:7B:C7:AF:9B:5D:64:37
X509v3 Authority Key Identifier:
keyid:1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33322e302f32342d3234203d3e20323635323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.32.0/24
Signature Algorithm: sha256WithRSAEncryption
24:23:0f:9b:ec:ea:9d:48:be:8b:5d:5e:80:0a:b6:7e:0b:bb:
c9:51:ef:f5:94:ed:96:34:f0:86:0a:54:7d:c4:0d:bd:28:3d:
0f:cd:ef:0b:8e:43:cb:03:aa:d9:6c:b0:84:c0:a2:1e:25:27:
5a:7f:e1:c6:cc:ac:56:7b:ec:24:45:52:9d:77:d6:0b:6f:0b:
fd:aa:22:60:7d:44:7c:cb:a2:3b:2a:58:f3:79:6c:f9:bf:72:
51:c9:9a:84:d9:e5:85:49:a9:ea:a8:ff:9c:36:73:29:07:3b:
af:96:8d:f1:97:26:b4:98:5f:e7:31:ab:67:62:1b:78:dd:53:
91:c4:5c:e0:52:b5:de:18:40:8e:a6:88:a1:13:07:94:df:19:
81:a4:b2:24:38:a3:bc:6c:78:9b:8a:01:5b:79:10:6a:f6:5b:
d9:a2:ee:ce:a8:4e:c7:12:c0:35:37:f6:78:41:24:23:19:73:
cd:9a:35:0f:49:29:0a:ed:d7:5a:b3:6b:66:d0:28:2d:fc:d9:
89:6d:61:65:fa:ac:18:12:db:67:70:33:a4:c9:47:dc:66:4d:
f7:45:89:66:c4:4f:86:26:90:9f:94:d7:05:2b:9a:24:cf:17:
e5:bb:3a:ed:c6:b1:e9:4c:8f:4f:3f:99:2c:62:e3:d1:dd:42:
60:0c:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:29 2025 by rpki-client