Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e20323632353039.roa
File: 3136382e3233322e3132302e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier: fPNdmev28OI7WnCjEo+IHl50HCmaam5KC/sH4gInmLQ=
Subject key identifier: 59:FF:8D:EE:39:D5:58:41:E3:38:0F:76:83:27:5E:4F:A7:B5:1F:6F
Certificate issuer: /CN=781AC5A062EABB611A9D1B0BB056385DCABD6150
Certificate serial: 48FA0395A816ED8D099FCFBA4472AF5947805DEA
Authority key identifier: 78:1A:C5:A0:62:EA:BB:61:1A:9D:1B:0B:B0:56:38:5D:CA:BD:61:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.cer
Subject info access: rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e20323632353039.roa
Signing time: Mon 23 Jan 2023 21:37:30 +0000
ROA not before: Mon 23 Jan 2023 21:32:30 +0000
ROA not after: Mon 22 Jan 2024 21:37:30 +0000
asID: 262509
IP address blocks: 168.232.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fa:03:95:a8:16:ed:8d:09:9f:cf:ba:44:72:af:59:47:80:5d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781AC5A062EABB611A9D1B0BB056385DCABD6150
Validity
Not Before: Jan 23 21:32:30 2023 GMT
Not After : Jan 22 21:37:30 2024 GMT
Subject: CN=59FF8DEE39D55841E3380F7683275E4FA7B51F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:0a:24:1f:fc:1e:fc:53:f4:2c:61:12:a0:
7b:c4:ec:81:dd:86:ea:6e:c2:45:ee:d3:fb:fb:a3:
76:34:0c:39:75:c3:9c:be:47:36:93:93:3f:59:f0:
24:83:a4:b6:89:91:8d:71:50:b9:52:78:90:99:69:
1d:92:b9:4e:67:28:10:ad:cd:14:13:29:9d:e1:93:
78:aa:dd:3c:cf:28:54:5c:1c:7f:eb:48:ed:e9:83:
74:90:38:ff:ec:cc:28:b3:75:9f:08:d0:39:5a:c2:
a7:91:36:47:51:90:b6:ad:82:e5:05:db:03:83:0e:
fe:40:94:af:74:03:47:fd:e8:30:86:09:93:8d:93:
98:f7:ed:90:92:23:43:a6:e9:c5:b9:59:0e:11:3b:
51:89:2a:eb:e2:1b:f0:db:22:3b:cd:f8:fc:13:64:
2e:d2:4f:7e:4c:ae:d9:c1:a3:fc:83:ae:8b:24:8d:
63:e3:11:29:31:58:c5:4c:fb:77:8f:e0:eb:9b:6f:
63:97:9b:22:89:93:b0:d6:0a:40:e7:30:37:d8:0a:
b6:b8:6a:a1:da:6a:44:d6:a8:99:77:f9:94:b9:22:
49:66:31:ea:b6:e1:5b:0e:3b:d5:00:10:b9:27:23:
86:df:ff:c0:70:d7:cc:ca:16:d4:37:6a:4a:03:d3:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FF:8D:EE:39:D5:58:41:E3:38:0F:76:83:27:5E:4F:A7:B5:1F:6F
X509v3 Authority Key Identifier:
keyid:78:1A:C5:A0:62:EA:BB:61:1A:9D:1B:0B:B0:56:38:5D:CA:BD:61:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:03:2c:8b:5a:49:a8:ea:f7:6b:20:ba:3f:83:84:1e:c6:5a:
9d:ea:a8:e4:c8:cd:9c:03:bd:47:15:43:c1:59:5c:1b:bb:ed:
a6:e3:5c:7f:b3:49:86:a8:bc:9d:c9:4b:e3:9a:f8:6b:2c:be:
51:e0:3a:21:d4:84:c4:67:a7:f2:a3:f9:a0:9b:6e:60:ea:f4:
c0:45:1d:2c:44:37:ae:f6:36:5e:68:8c:e2:09:13:06:36:02:
b8:25:8c:c1:ba:52:6b:31:0a:8d:52:cc:f3:4b:17:f9:c9:b5:
bf:0e:65:1c:97:71:f3:b9:a7:35:9f:3f:ce:5e:15:1c:dd:78:
d3:45:4e:06:2a:a9:13:1e:87:1a:ea:a6:69:3b:d7:9f:cc:c7:
51:32:a1:4c:d3:10:27:ee:c6:3a:2d:5a:0b:be:c8:08:1d:42:
2a:18:5c:8b:f1:ea:fd:6f:a1:ab:43:12:f3:1e:9a:1c:7a:94:
4a:9b:d8:9a:14:a7:ba:99:52:ff:f6:99:c9:30:17:6c:fe:28:
0f:d1:2b:aa:0d:63:d6:a2:2d:e8:28:c3:a4:ac:a7:ea:f3:ad:
83:1b:55:b3:5c:f6:fe:20:d8:c1:3d:90:23:df:f8:70:c5:8d:
2c:20:65:10:37:a6:5b:f1:f7:65:6e:52:2a:73:26:c1:65:07:
59:d3:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:24 2025 by rpki-client