Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
File: 3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier: KCQrXBq4C+WEYzcjojJ0BzDUiHqgV8uf48xewEmsCbM=
Subject key identifier: EB:A8:C3:AC:E0:F3:03:31:7A:07:D5:F8:94:93:66:83:D4:A5:2F:E6
Certificate issuer: /CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
Certificate serial: 2A2C185DD516416863B8FBC3D24E5789A810114E
Authority key identifier: 67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
Signing time: Wed 29 Jan 2025 19:02:32 +0000
ROA not before: Wed 29 Jan 2025 18:57:32 +0000
ROA not after: Wed 28 Jan 2026 19:02:32 +0000
asID: 52872
IP address blocks: 168.197.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2c:18:5d:d5:16:41:68:63:b8:fb:c3:d2:4e:57:89:a8:10:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
Validity
Not Before: Jan 29 18:57:32 2025 GMT
Not After : Jan 28 19:02:32 2026 GMT
Subject: CN=EBA8C3ACE0F303317A07D5F894936683D4A52FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:fc:17:a0:53:2d:2c:16:0f:40:21:95:2c:
e9:54:01:80:56:a9:2c:6d:9d:08:dc:38:7b:18:3f:
29:03:81:7d:b6:f0:0f:a3:22:7a:0e:33:c1:45:71:
2c:8f:8a:ad:b9:9d:fa:58:09:c8:79:8c:52:11:af:
fb:5f:69:fd:34:59:09:b8:26:3e:a3:ed:6b:fd:d2:
5d:d1:f3:5a:25:d2:94:f3:a1:41:67:be:63:6f:a7:
22:80:46:78:c4:fa:b6:c9:34:25:e2:3a:28:70:c6:
f8:bf:19:da:7c:41:b7:35:30:24:74:eb:5e:4f:57:
6e:2c:8b:ac:84:49:96:fc:72:f8:a9:4f:34:29:f4:
97:98:71:a1:8c:7c:23:fb:29:3c:e3:b1:7a:6a:41:
dd:d4:de:c7:d4:59:67:72:22:6f:b3:af:ac:dc:03:
e7:c5:85:89:c4:b5:1c:0d:98:c1:e7:00:27:91:8d:
8a:c2:56:27:01:0c:0f:21:a5:34:cd:4f:1a:e8:2e:
04:f0:52:da:4a:50:5c:e7:71:fc:5b:3c:f6:f9:7d:
1f:82:04:9f:5e:21:e6:40:2f:50:bd:c9:0a:ce:4e:
8a:46:65:44:4e:a7:bf:99:de:66:27:04:e3:a7:32:
69:5c:e5:60:92:49:18:ca:72:1e:6e:db:32:67:d9:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A8:C3:AC:E0:F3:03:31:7A:07:D5:F8:94:93:66:83:D4:A5:2F:E6
X509v3 Authority Key Identifier:
keyid:67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.136.0/22
Signature Algorithm: sha256WithRSAEncryption
19:ca:22:ff:9f:d3:11:34:80:23:00:37:f3:7b:73:12:c8:ae:
d5:d1:5f:3f:20:13:5c:d7:6d:6b:28:25:de:cb:2d:5a:46:e1:
f9:46:c5:a1:07:c9:fa:3c:25:10:8d:3b:ca:08:35:4d:45:a4:
d5:d7:bb:27:93:2c:5a:af:5f:b5:74:d5:d4:47:ac:68:7f:22:
7d:04:21:ab:f9:d2:23:20:da:2f:5f:fb:51:f0:13:4f:95:f5:
fa:8c:7c:1b:70:3a:b3:e0:69:a1:77:0a:f7:d1:15:88:30:07:
d8:8e:53:bb:d4:42:63:c2:3b:27:e5:80:d2:1a:94:28:d9:9f:
f3:0e:47:84:3d:74:7c:8b:34:e2:82:22:0c:95:cf:77:46:f3:
6d:00:46:c3:7a:7e:37:93:de:65:87:8f:9c:bb:3b:09:61:87:
15:42:74:b5:0e:f0:1f:74:25:14:dd:66:f2:c2:ba:55:a7:c8:
10:e4:98:33:33:89:57:a9:af:f0:ef:7d:98:36:18:bb:dd:3c:
6e:39:ce:8d:40:44:e9:37:12:f1:94:39:19:e3:53:0c:68:83:
b1:97:b4:7f:f8:03:c8:f3:e9:c5:b4:72:79:e4:cf:c0:da:36:
34:4c:67:64:b8:c7:6b:be:b3:d2:38:81:f2:ae:48:de:35:68:
47:16:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:15:06 2025 by rpki-client