Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
File: 3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier: kHWFpmRxhyxILiaYGtvnY7CVBrNrJS33d1o/LNAS/5Y=
Subject key identifier: C1:CD:D1:50:54:3C:1C:B8:81:0F:90:D3:6C:E3:A1:60:1D:C2:49:24
Certificate issuer: /CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Certificate serial: 43BB23D42204AD6123B8D8A4C691743EA66F1662
Authority key identifier: 4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
Signing time: Wed 14 Aug 2024 01:06:11 +0000
ROA not before: Wed 14 Aug 2024 01:01:11 +0000
ROA not after: Wed 13 Aug 2025 01:06:11 +0000
asID: 262391
IP address blocks: 168.181.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bb:23:d4:22:04:ad:61:23:b8:d8:a4:c6:91:74:3e:a6:6f:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EED9818567EF67A561AEB24FB9C960FF884B0BB
Validity
Not Before: Aug 14 01:01:11 2024 GMT
Not After : Aug 13 01:06:11 2025 GMT
Subject: CN=C1CDD150543C1CB8810F90D36CE3A1601DC24924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:3f:d4:53:36:78:95:e6:55:e1:7a:7b:31:
d6:2d:f6:0c:d2:c7:5e:f0:08:d8:12:cf:aa:43:1a:
18:bb:46:61:8d:8c:0d:f5:8f:d0:fd:00:fe:14:17:
ba:4a:d9:4f:a8:d2:51:19:31:64:cc:e1:3a:05:9e:
23:b5:ae:62:2d:48:41:f9:13:e0:66:1d:05:2d:98:
03:3d:72:ae:3a:43:13:93:bf:fa:8b:59:28:12:35:
e8:e7:05:3e:53:f2:1b:19:b5:4d:04:1a:22:2c:74:
4b:7e:d8:81:64:06:d2:82:ff:5a:bf:49:bf:c2:b0:
3c:ff:57:97:77:be:29:78:a9:4e:8b:ab:1c:22:74:
21:92:09:3e:89:f5:a0:9c:62:d0:fe:b6:bd:85:1d:
01:60:81:55:46:21:d3:52:a6:3d:e7:3a:5f:c1:48:
49:30:31:ec:6d:4b:d9:3c:c1:15:1d:15:ac:83:82:
8e:00:a9:1f:69:10:4a:58:84:bf:76:72:f3:91:5f:
69:a9:66:dd:5b:fb:2c:b9:bc:3e:5b:06:e6:9d:32:
40:93:5d:a8:3d:92:9b:20:eb:99:19:d5:19:ff:85:
de:3c:94:f4:99:80:aa:b5:00:cf:98:b6:00:d1:73:
de:31:01:af:62:e5:71:62:db:9f:8d:fe:d1:20:00:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:D1:50:54:3C:1C:B8:81:0F:90:D3:6C:E3:A1:60:1D:C2:49:24
X509v3 Authority Key Identifier:
keyid:4E:ED:98:18:56:7E:F6:7A:56:1A:EB:24:FB:9C:96:0F:F8:84:B0:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/4EED9818567EF67A561AEB24FB9C960FF884B0BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EED9818567EF67A561AEB24FB9C960FF884B0BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.68.0/22
Signature Algorithm: sha256WithRSAEncryption
76:0f:f4:3b:b7:f8:9e:38:fa:56:62:2d:ad:e4:5a:36:26:41:
49:d2:3c:90:ab:d9:eb:14:6d:ad:6f:77:a4:07:f0:2d:c1:9f:
07:93:19:bd:42:a8:df:b6:3a:db:d3:0a:7e:63:7a:ef:0b:92:
4d:6d:5d:06:3e:32:f4:a0:6c:9b:9c:8b:87:50:7b:d3:dc:8c:
6b:d4:8c:82:09:bd:48:01:e9:75:af:bb:80:77:55:0e:3e:16:
b8:bc:61:cb:7b:7d:fd:d4:1e:ec:77:c4:2f:9e:5e:57:48:f7:
af:56:42:29:ff:6f:0d:63:2e:ee:03:eb:f4:38:a0:7d:79:0d:
29:45:6f:b5:19:78:2d:f8:94:72:bc:28:67:2f:9d:f7:c2:31:
e4:06:a2:5a:05:fd:c1:d5:20:81:79:41:f8:c1:c2:70:e1:2e:
d1:2d:b4:b4:9f:9c:21:97:98:4a:27:9e:39:3a:5d:d7:1f:6c:
52:1d:39:b9:28:90:7d:35:0b:a0:d9:2a:21:ff:f4:dd:63:d7:
eb:50:42:0e:71:32:0b:71:bf:f0:c1:6a:0c:a6:d7:d6:d3:4b:
4c:f9:59:08:1d:7d:89:c1:42:87:e7:f0:5b:4a:9a:30:a9:62:
eb:45:b8:63:42:f7:5b:0d:3f:20:98:e5:e9:26:79:4d:c4:0e:
e3:7a:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:41 2025 by rpki-client