Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
File: 3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (raw, json)
Hash identifier: QIDm2iFA3FJ1lGohzBKUeLy0KIhswPNF6chBLNE5/eM=
Subject key identifier: CB:AC:15:F2:15:60:D2:5D:86:64:E2:B5:F4:BD:2E:58:8C:F1:04:A3
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 580962EB50F60960CE57104C6E7A2C66F9BA7C77
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:48:52 +0000
ROA not before: Tue 14 Jan 2025 15:43:52 +0000
ROA not after: Tue 13 Jan 2026 15:48:52 +0000
asID: 265393
IP address blocks: 168.194.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:09:62:eb:50:f6:09:60:ce:57:10:4c:6e:7a:2c:66:f9:ba:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:43:52 2025 GMT
Not After : Jan 13 15:48:52 2026 GMT
Subject: CN=CBAC15F21560D25D8664E2B5F4BD2E588CF104A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:9b:0f:fb:60:ad:a9:c1:c3:91:9f:15:3e:
3a:9c:0c:b8:54:ed:be:bd:69:68:dd:75:2f:9d:57:
17:89:13:bf:7c:ed:ac:7c:58:fa:77:4d:20:0f:1e:
63:c5:65:4b:1e:2b:2b:96:f5:7d:44:ef:18:2e:12:
2a:46:31:8d:68:50:17:26:48:7a:f8:aa:9c:54:7c:
36:ff:5c:d6:8b:b7:3e:3d:a3:e7:d0:19:3a:e3:d2:
86:a3:94:23:6d:fe:65:35:11:c1:5f:58:7e:72:03:
81:7a:b8:af:09:1c:e0:12:2b:ed:c9:c2:4e:b0:d1:
a9:a9:7a:96:1d:54:fe:f7:06:e1:97:05:77:36:11:
cb:34:b6:2e:c2:ce:9d:2c:5b:e2:c5:f8:c9:27:1b:
37:88:ac:3d:fd:a2:c1:15:f0:00:63:02:3e:20:7e:
27:ea:86:67:fb:67:2e:a4:68:f4:18:32:24:5e:13:
84:c2:68:6c:eb:b7:bd:7c:7b:80:51:ba:ee:d5:9a:
c9:8d:c6:00:f8:7e:d5:48:ad:e0:54:8a:7a:de:1b:
57:f0:83:c9:89:04:e2:99:61:ab:ab:9b:51:b2:c5:
4f:a2:eb:ec:51:82:6a:27:14:e5:56:43:ac:a7:94:
84:ad:c8:c8:4f:77:e7:a6:e6:19:5f:4d:9d:8c:92:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:15:F2:15:60:D2:5D:86:64:E2:B5:F4:BD:2E:58:8C:F1:04:A3
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.164.0/22
Signature Algorithm: sha256WithRSAEncryption
15:5f:17:86:03:ee:ea:ef:fa:36:33:a7:fc:c9:59:df:f9:d9:
a1:2d:9b:80:5b:14:26:9d:fa:2c:cc:8d:1d:cb:c0:ce:06:f7:
61:2d:40:3f:01:93:0a:fc:9e:e0:e7:f0:4d:95:d2:c0:f1:a1:
9c:f6:72:f4:ae:cf:8b:d6:82:cf:ed:12:74:31:7b:39:70:94:
8e:9a:57:92:bc:6f:14:b7:12:bb:6e:ac:ae:c2:43:d8:62:f8:
a9:3d:60:19:d1:3f:77:c8:e3:36:06:f5:f6:1f:75:23:06:04:
6e:eb:72:9e:2b:59:f9:21:e3:5d:b1:0a:f6:48:52:ab:b2:83:
d0:72:a1:5e:57:57:3b:bc:1e:df:b2:32:90:59:1b:b4:96:c1:
4a:36:f2:d2:4a:ec:08:86:88:46:04:e2:ef:59:d3:52:be:0f:
ae:d2:99:68:96:17:0c:76:5c:55:a8:16:fb:55:12:60:b4:7c:
b2:0e:20:d6:4b:81:4e:98:88:ea:1d:58:1e:8d:79:67:a3:1b:
92:21:d2:cd:90:7c:e3:bc:ea:11:0d:71:83:8e:4c:85:76:8e:
14:42:0d:68:3f:2d:15:ea:bf:d5:38:3d:b8:d0:5b:93:1b:cf:
a7:71:d7:73:3c:d5:00:77:be:f5:7b:ba:46:26:ce:8f:6e:d4:
41:e6:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:29 2025 by rpki-client