Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa
File: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (raw, json)
Hash identifier: 0HtIStJbMsMcPkb3Bpf/zwlv0P5p5WuHdoYgzHMGegQ=
Subject key identifier: A7:5B:78:FB:0C:96:83:F8:20:2F:33:18:3A:8A:5C:4C:59:6A:DD:1C
Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial: 656335B1DB57DF8F2331036621D775F50C6861FE
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa
Signing time: Thu 16 Jan 2025 18:37:40 +0000
ROA not before: Thu 16 Jan 2025 18:32:40 +0000
ROA not after: Thu 15 Jan 2026 18:37:40 +0000
asID: 264867
IP address blocks: 168.205.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:63:35:b1:db:57:df:8f:23:31:03:66:21:d7:75:f5:0c:68:61:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Validity
Not Before: Jan 16 18:32:40 2025 GMT
Not After : Jan 15 18:37:40 2026 GMT
Subject: CN=A75B78FB0C9683F8202F33183A8A5C4C596ADD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:3a:91:51:82:67:a4:0f:2a:6b:88:b2:5e:
2e:c8:b1:c6:a6:18:ad:37:d0:3a:65:e1:35:c0:d8:
e5:eb:37:ba:73:45:f3:82:0e:f0:d0:2c:6f:d4:e5:
7d:53:41:83:08:8d:b3:d8:7e:a6:8c:60:0f:ea:a7:
5a:98:94:1a:79:48:62:38:39:f9:b9:3b:b3:e3:4a:
b0:c4:e4:b4:21:e2:af:b0:d7:53:39:27:c1:69:2f:
84:a3:bb:e3:ad:96:92:f4:ac:bc:c0:11:00:e6:c5:
9f:23:f0:dc:1c:40:dd:86:42:ff:e0:31:1d:c0:e6:
a1:46:b1:3d:06:0d:ac:b2:fd:fe:ce:ce:e8:82:4b:
d3:73:9a:34:aa:9f:d8:1c:10:8a:09:6e:cf:62:02:
09:c1:49:9f:cd:a3:72:c6:5f:26:76:ec:78:ee:7e:
c6:f3:22:18:11:0a:f3:7b:b8:5e:ef:66:a7:96:f5:
23:6d:99:b0:4f:4b:bd:81:24:e6:60:05:ae:2e:a0:
10:f8:f7:38:5f:7a:32:19:a8:c4:4d:9e:6c:87:6a:
6c:2c:02:8d:54:4a:93:ac:2b:9d:86:e5:06:81:ca:
d5:fb:20:15:b3:5e:90:fa:e7:bb:e7:ca:37:df:63:
e7:c2:d9:2a:e6:ac:ea:ec:3f:5a:8e:a5:95:ab:e9:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:78:FB:0C:96:83:F8:20:2F:33:18:3A:8A:5C:4C:59:6A:DD:1C
X509v3 Authority Key Identifier:
keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:de:80:3a:48:5f:2b:a1:13:d1:92:28:b9:8b:b6:7c:f3:c4:
5e:b9:87:99:7a:58:36:2f:b3:f6:91:19:5a:03:b1:4e:85:1c:
6c:0c:51:cb:29:65:14:62:25:d0:77:44:21:44:0e:e3:9c:cd:
76:08:b9:29:05:8e:66:d2:79:fa:1f:be:9d:92:f9:f0:e8:70:
22:82:09:eb:b9:36:b1:2c:fe:14:1e:37:27:21:ea:6b:de:ca:
a8:6a:11:7e:6b:96:4d:90:d1:95:5f:9d:cb:b4:f4:a9:60:75:
ea:ca:8b:db:39:d7:45:e4:79:ba:ee:f4:56:e4:31:41:55:61:
44:8c:00:7d:15:83:fe:79:07:d5:a8:04:d6:28:ad:6c:e0:95:
35:b3:c9:af:ff:7f:7e:35:d5:ad:e3:79:ff:48:af:0e:47:5f:
be:c0:bb:e3:aa:05:a8:a5:d7:31:ae:19:26:34:cc:ab:1c:39:
0b:d3:19:37:d5:18:db:17:b8:0e:98:2a:a1:5b:df:bd:01:37:
ce:f8:0c:fd:6d:a4:db:04:70:71:11:fe:d8:16:ca:34:2f:28:
ee:ad:04:0c:84:70:f8:a3:c5:93:ca:90:a6:82:47:d4:9d:2d:
9f:30:8c:64:6c:85:3d:94:3b:63:c7:d6:d7:05:ce:d8:ec:c0:
5e:1d:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:35 2025 by rpki-client