Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
File: 3136382e3139352e302e302f32332d3234203d3e20323635343130.roa (raw, json)
Hash identifier: oBEZustU0rUVnpcJYxR2GPNgS2323faFfa0zuWRvf0A=
Subject key identifier: 86:64:75:8B:6D:E9:51:53:82:DC:7F:4C:02:01:74:05:02:E2:25:05
Certificate issuer: /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial: 630A02BB4042506D3024CEEAEDF1D114E5070285
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
Signing time: Thu 04 Apr 2024 16:32:58 +0000
ROA not before: Thu 04 Apr 2024 16:27:58 +0000
ROA not after: Thu 03 Apr 2025 16:32:58 +0000
asID: 265410
IP address blocks: 168.195.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0a:02:bb:40:42:50:6d:30:24:ce:ea:ed:f1:d1:14:e5:07:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Validity
Not Before: Apr 4 16:27:58 2024 GMT
Not After : Apr 3 16:32:58 2025 GMT
Subject: CN=8664758B6DE9515382DC7F4C0201740502E22505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:06:d9:20:24:9c:02:24:08:fa:24:26:72:
7f:41:0f:4b:67:dd:c4:82:da:36:b6:6a:36:7a:18:
d8:94:d4:34:b8:23:b5:06:dc:9e:f4:87:99:f0:d7:
bb:02:a0:56:cc:4a:a8:6a:df:70:4b:fa:5d:fa:7b:
46:be:b5:8b:2f:4e:06:0a:b4:2e:54:e6:26:99:a9:
d5:28:72:0d:9b:30:dc:67:03:56:dc:67:8d:35:b2:
fe:31:78:89:f4:e3:1b:14:f1:7a:c4:f9:a6:a2:52:
5d:19:f2:72:d8:00:f7:5c:09:a4:0c:cc:82:4d:39:
c1:19:10:61:4d:58:4c:da:ad:be:62:8a:e0:3f:e4:
9f:85:ad:0c:0b:8a:db:6a:7b:df:ab:69:7a:f2:23:
a8:6f:1d:5d:12:0f:a9:95:65:56:46:7a:56:6c:98:
97:67:0b:a3:dd:1d:42:b0:57:6c:91:06:50:5a:44:
ef:cd:96:c3:d3:23:c5:4a:16:4e:1c:8f:08:ed:60:
5b:ee:4a:a3:2a:44:b7:09:71:a5:32:81:2c:9d:e2:
9f:d7:b2:34:b6:9f:da:39:c8:cf:07:ae:62:a0:ed:
ea:34:77:50:e1:56:06:dd:60:08:b4:b5:09:91:f2:
2a:35:df:ef:11:79:b9:73:75:20:42:55:f6:8f:13:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:75:8B:6D:E9:51:53:82:DC:7F:4C:02:01:74:05:02:E2:25:05
X509v3 Authority Key Identifier:
keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:5f:21:10:2e:57:98:7f:3f:77:ae:1a:07:e5:43:15:4d:d9:
96:cd:04:ba:20:0f:07:6d:cd:b8:69:aa:00:1f:65:45:97:ad:
d7:1d:fb:b7:7a:c9:18:d3:b9:dd:44:4c:a8:c5:47:20:45:09:
ab:39:f6:06:df:25:22:c8:74:61:c6:00:a7:26:ef:d5:64:c7:
71:92:38:a4:68:1e:ac:13:b7:ed:19:e8:ea:32:ed:6a:26:d5:
f9:98:75:9c:34:5f:7b:7e:b8:6a:6b:2f:a4:65:ac:67:be:4c:
61:a3:7a:72:13:8b:79:be:82:87:9d:a2:c7:11:88:bc:cc:ac:
f5:6d:0c:9a:a4:76:32:9c:bd:39:bd:72:30:e5:bf:cc:b9:3e:
04:50:58:33:93:87:31:f7:d3:d7:28:d9:d2:bb:1f:8d:3e:2e:
3b:65:0a:30:bb:01:57:74:f4:80:c3:b0:01:23:cc:9e:31:4c:
cb:92:b9:76:ce:a1:eb:8a:40:44:d7:ce:09:3e:2e:09:ce:a8:
47:1e:8f:c7:ea:a0:41:64:ff:20:2e:6d:e5:c5:bd:bd:d7:45:
03:30:50:5d:43:98:0e:f3:d0:08:47:3b:99:ff:2b:9b:b2:06:
53:a0:bc:0a:6c:47:fe:82:ce:85:db:4a:6a:18:fc:98:16:0c:
ce:71:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:57:32 2025 by rpki-client