Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
File: 3136382e3139352e3131322e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier: 5ogR+nfRfW18OnR2iRCxmoxYMyXDkhv3fwZ5aYTyO48=
Subject key identifier: 49:84:FF:F1:1C:BB:5C:93:E8:8E:8B:EB:E1:4B:9C:2B:5C:DA:30:C5
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 2B5C9E57FA3391CFCFB0D02F26A89BFE4D0A2A03
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
Signing time: Thu 04 Apr 2024 00:30:18 +0000
ROA not before: Thu 04 Apr 2024 00:25:18 +0000
ROA not after: Thu 03 Apr 2025 00:30:18 +0000
asID: 202
IP address blocks: 168.195.112.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5c:9e:57:fa:33:91:cf:cf:b0:d0:2f:26:a8:9b:fe:4d:0a:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Apr 4 00:25:18 2024 GMT
Not After : Apr 3 00:30:18 2025 GMT
Subject: CN=4984FFF11CBB5C93E88E8BEBE14B9C2B5CDA30C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:7f:2d:46:1d:b5:73:b8:47:45:31:aa:e5:
bc:d6:68:d6:b7:61:52:a6:54:11:1c:87:00:70:70:
e4:87:41:5f:f7:41:5e:2d:dd:34:e5:72:de:60:1c:
86:41:8f:50:7e:f6:f0:a4:bf:50:a9:0a:38:c8:28:
02:c8:fb:82:f4:73:17:2c:d6:99:db:e9:d3:4a:45:
b0:d3:c3:80:e3:d8:e0:fe:9e:b2:50:30:a7:cc:af:
f3:b2:43:98:ff:71:36:ac:92:ef:66:61:44:c3:bd:
be:b7:59:5b:38:f0:77:f8:05:eb:40:09:23:30:a7:
fc:bf:00:75:54:2f:e9:a7:de:5a:c0:c2:b1:67:51:
8d:03:e4:90:eb:f9:1e:07:c6:c7:93:0b:96:a2:ec:
bc:c9:a9:ae:8e:7a:e5:bc:7d:99:07:3e:ca:ad:de:
65:f5:bc:80:29:9a:12:91:11:7f:96:6e:eb:d2:2a:
b5:61:c5:1a:39:99:2d:3e:a6:13:32:58:d3:f3:e5:
40:8d:f9:05:44:68:3b:c1:31:4b:ea:4b:87:0d:f1:
36:ce:e1:ce:ab:21:98:87:08:86:94:87:e3:6f:4e:
a0:d1:b4:5e:96:c3:fa:62:1e:d1:3b:36:3d:12:96:
95:6f:4c:75:93:3d:6c:21:c6:9e:29:60:a4:09:23:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:84:FF:F1:1C:BB:5C:93:E8:8E:8B:EB:E1:4B:9C:2B:5C:DA:30:C5
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3332203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:24:9e:37:72:ab:41:c8:84:2e:52:64:07:6d:66:ed:03:10:
f3:f1:93:c3:83:fb:a1:df:fc:c5:34:90:2a:6f:28:e7:ea:d3:
fb:61:d1:cd:dc:3f:bc:85:a0:cd:a0:a9:02:4b:72:b5:f9:7e:
d3:b9:7f:77:26:44:bf:b7:9f:09:4a:48:5c:57:cd:1c:f2:24:
20:2a:61:2b:b6:a6:db:dd:1e:da:ca:9f:fd:e4:71:e3:f9:38:
df:34:02:ec:2f:69:8a:23:90:ae:2d:a7:82:1a:bb:90:cb:13:
01:1f:97:4e:60:37:15:7e:da:aa:e1:99:1e:1e:dc:79:f1:77:
80:65:d1:08:09:63:be:fa:b3:04:d9:46:3d:2b:ad:f5:bb:7f:
9f:0a:f9:6e:cb:28:ee:35:de:55:d3:45:6a:c8:94:a9:a2:42:
6b:59:40:54:7a:33:2b:02:36:2e:93:b7:22:a9:e6:a9:bb:2c:
2e:c7:a5:46:1b:99:39:bc:52:16:c1:3e:b6:3f:e9:53:7a:8a:
9a:48:9e:72:bb:1d:36:af:0e:b6:02:15:f6:4b:46:cd:66:84:
54:22:77:98:56:b1:06:a6:67:3e:48:6a:d7:bb:71:dc:c9:9e:
11:d3:37:4e:d9:e3:44:c4:b0:57:30:ac:71:9b:fe:e1:e1:b3:
dc:66:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:15 2025 by rpki-client