Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa
File: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (raw, json)
Hash identifier: jO+j2ycSSgUqX/c6R4D4iMxvnJVHoWNPsmxQHR/K7WA=
Subject key identifier: 26:8D:25:55:40:BA:C5:7F:84:4D:38:FE:6D:16:25:8D:F8:26:B6:9E
Certificate issuer: /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial: 1FF37AE1608AB9DEB0B95B67F2E25A154A70EF24
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa
Signing time: Wed 08 Jan 2025 20:41:37 +0000
ROA not before: Wed 08 Jan 2025 20:36:37 +0000
ROA not after: Wed 07 Jan 2026 20:41:37 +0000
asID: 265140
IP address blocks: 143.255.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f3:7a:e1:60:8a:b9:de:b0:b9:5b:67:f2:e2:5a:15:4a:70:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Validity
Not Before: Jan 8 20:36:37 2025 GMT
Not After : Jan 7 20:41:37 2026 GMT
Subject: CN=268D255540BAC57F844D38FE6D16258DF826B69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:f2:75:2c:16:87:de:67:38:87:eb:fb:9d:
2e:14:9f:1f:0b:61:0c:72:0c:d5:02:ed:d5:a4:e7:
48:75:b1:aa:b8:03:a0:eb:af:70:74:42:62:1d:22:
a2:9f:80:08:30:e0:53:8f:03:e9:26:b8:4b:36:32:
e7:df:97:88:3a:a2:57:e7:07:20:71:9a:bf:2a:45:
28:15:6e:ca:a6:a6:02:14:0f:e8:35:b6:87:a4:56:
2e:ba:84:5d:21:fb:ff:90:65:24:5f:82:df:9d:da:
5d:49:48:0f:b7:b2:a8:91:c5:e5:d3:df:88:f6:d6:
9a:f6:00:3a:2a:29:f8:01:7b:b5:6f:ba:59:bc:26:
3d:d6:66:f9:c4:a9:9d:fb:ae:ed:fc:78:c7:3c:54:
71:f8:05:44:ca:7d:d7:88:32:9c:be:00:97:0e:a2:
78:03:47:b4:ec:62:e7:b2:cc:f5:19:e8:2d:25:28:
6a:16:b4:ac:da:e6:f7:a4:26:53:58:b9:d5:78:a7:
14:26:c2:ff:87:86:34:45:7c:8a:b4:63:aa:7a:f7:
5e:01:cc:89:8d:d8:a7:06:2a:96:e0:b6:60:4d:19:
d2:e2:49:66:df:ce:c9:f7:e4:54:11:d7:c4:bd:0f:
5d:6b:74:53:f9:75:c8:ea:ed:ae:1e:8f:40:c7:a3:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:25:55:40:BA:C5:7F:84:4D:38:FE:6D:16:25:8D:F8:26:B6:9E
X509v3 Authority Key Identifier:
keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.0.0/22
Signature Algorithm: sha256WithRSAEncryption
25:8a:f7:17:da:76:2d:d2:e5:16:9d:b3:37:08:51:37:1b:2e:
76:51:fd:ac:da:9e:74:0f:96:31:36:20:3a:30:f6:08:ba:75:
36:ae:fc:ef:16:83:fb:d4:c5:cb:2b:2e:67:22:25:3c:64:6c:
53:df:68:b4:6d:b0:ba:fb:f4:07:ed:91:1a:de:c5:a9:c1:4b:
38:a3:d1:42:21:fe:9f:73:7c:7c:39:54:c4:8c:7a:82:99:27:
a7:da:20:14:93:67:74:68:e4:79:a8:d1:d2:f7:bc:b4:1d:3e:
b7:9a:58:35:30:ba:3d:a0:bd:b8:af:f5:5f:59:76:09:30:2b:
80:89:98:3d:13:5a:fa:e3:20:84:99:4a:77:a0:ca:c1:01:8d:
66:85:98:f3:eb:8b:dc:3d:80:24:58:43:f1:c5:06:0e:b8:84:
cf:25:34:f6:57:82:9b:25:14:6a:64:3e:e2:00:44:88:79:18:
67:d9:8d:22:b6:bc:e0:58:47:9f:48:98:f9:0f:ea:41:f6:22:
94:48:aa:e5:db:a6:45:6b:8d:22:2e:8f:95:90:e0:aa:56:e4:
06:d6:31:3a:f1:cd:5b:c0:ff:02:bb:5b:c9:bd:7a:68:7a:07:
cd:88:18:dc:5e:5f:11:9a:eb:32:2e:2e:64:bf:da:6f:a9:07:
cd:8e:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:59:24 2025 by rpki-client