Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
File: 3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier: VUUD8qRi37Uruv4dTSR8ozN63tYGNocKS3vUGrTcCUg=
Subject key identifier: 97:D2:2A:10:01:49:D8:84:A2:6A:58:02:4C:1A:71:18:02:38:E9:48
Certificate issuer: /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial: 15072FDFBEFE0A4EF4C73CB8F077FCDDD4CB0051
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
Signing time: Thu 04 Apr 2024 06:53:54 +0000
ROA not before: Thu 04 Apr 2024 06:48:54 +0000
ROA not after: Thu 03 Apr 2025 06:53:54 +0000
asID: 262645
IP address blocks: 168.194.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:07:2f:df:be:fe:0a:4e:f4:c7:3c:b8:f0:77:fc:dd:d4:cb:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Validity
Not Before: Apr 4 06:48:54 2024 GMT
Not After : Apr 3 06:53:54 2025 GMT
Subject: CN=97D22A100149D884A26A58024C1A71180238E948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:28:51:1b:a3:c6:4a:f6:93:bd:c7:47:a4:
11:34:43:95:63:96:f0:eb:7a:fd:50:e2:0e:12:56:
1b:d4:c1:86:ac:36:ac:6c:90:52:5f:47:d6:44:00:
33:bd:8b:f4:f2:14:7c:95:c2:d0:27:6a:fc:08:0e:
9b:5f:98:52:38:55:09:df:e9:f3:e6:c4:f6:03:83:
ff:6b:96:f1:fd:73:af:aa:af:3b:d8:5f:79:e1:ab:
fd:3b:55:8a:44:a7:78:3d:46:61:c2:e9:69:50:68:
d9:56:a7:c7:90:8a:79:23:29:1c:2a:2d:4f:a8:4c:
ce:83:14:59:88:0c:83:d1:4f:a4:6e:3a:76:c1:03:
a4:7e:68:a5:1b:af:0c:44:fc:54:6e:a8:2a:e6:36:
07:36:30:02:c6:29:81:af:05:88:98:4c:dc:51:e8:
b1:b9:49:38:fc:73:b1:29:b1:3b:dc:d9:b2:e0:dc:
8e:6d:1a:59:4d:22:03:b5:79:fa:4b:3a:73:16:18:
83:64:02:73:42:5e:aa:c1:f2:6a:eb:21:75:b6:79:
4d:05:87:a1:34:89:19:f0:ff:a5:df:e0:d6:1f:05:
c8:db:94:cf:f4:51:d4:f0:11:a8:5c:cf:99:79:f3:
f4:0b:69:3d:98:99:e8:45:91:d9:ef:e0:c0:05:53:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:2A:10:01:49:D8:84:A2:6A:58:02:4C:1A:71:18:02:38:E9:48
X509v3 Authority Key Identifier:
keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3136382e3139342e39362e302f32322d3234203d3e20323632363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.96.0/22
Signature Algorithm: sha256WithRSAEncryption
58:19:35:c1:c9:63:f2:c0:8d:cc:e1:f7:1c:3f:10:37:18:5a:
60:c6:8f:42:d7:e8:39:dd:7e:58:d7:8b:9b:34:aa:79:65:47:
0d:83:24:dc:82:30:20:ab:4b:a5:49:72:76:4f:bc:4c:67:a2:
88:4d:c4:02:45:e9:ad:e5:a2:8b:59:6a:98:2f:28:09:c3:9e:
0a:3b:8f:ec:49:db:e7:0d:e8:10:33:9b:c3:6a:c4:38:36:f2:
20:a8:a0:47:3a:66:ff:18:dd:8f:7e:2d:1c:10:00:04:0a:79:
bb:f1:4c:f8:d3:a8:77:86:42:60:6b:8f:7c:aa:d5:54:41:e7:
7e:d9:ec:6e:46:0d:26:a4:7d:6b:99:21:fd:c4:2a:16:d7:41:
b1:b7:3d:1e:f4:1b:a3:50:7c:c1:23:7b:59:ba:4a:4c:06:00:
95:08:dc:b6:f3:62:6f:91:8b:0f:26:7f:58:48:1d:08:f8:f8:
49:7b:04:2a:f6:48:3f:8e:bb:47:fd:b4:20:65:4b:2c:a4:2a:
c1:c0:e8:fc:81:ef:12:49:b9:a4:d8:04:4f:72:5f:6f:89:bf:
ce:ec:9f:92:90:fc:65:ba:8d:c3:10:3b:59:df:15:e2:db:b9:
bd:ec:23:32:58:fc:61:c4:de:de:49:ef:fd:98:d4:75:6b:35:
69:2f:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:20 2025 by rpki-client