Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
File: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (raw, json)
Hash identifier: Qa5VSypv6LIVNBE4SdJKXnJFN1ru42sJm+bG+akeur4=
Subject key identifier: 38:1A:ED:99:D8:03:58:01:4C:D5:77:EA:26:15:9C:04:F2:D0:A0:13
Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial: 4E168FCD94149D2A04276C81B67C3D2F15885167
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
Signing time: Thu 04 Apr 2024 02:10:08 +0000
ROA not before: Thu 04 Apr 2024 02:05:08 +0000
ROA not after: Thu 03 Apr 2025 02:10:08 +0000
asID: 262408
IP address blocks: 168.0.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:16:8f:cd:94:14:9d:2a:04:27:6c:81:b6:7c:3d:2f:15:88:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Validity
Not Before: Apr 4 02:05:08 2024 GMT
Not After : Apr 3 02:10:08 2025 GMT
Subject: CN=381AED99D80358014CD577EA26159C04F2D0A013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:4d:cf:9f:68:21:c5:8c:39:fa:cd:07:e3:
52:0f:f1:77:a6:71:77:d3:f2:cc:c8:8f:3f:70:f8:
5a:c2:75:bd:82:bc:64:36:43:91:3e:8a:85:52:29:
0b:6d:29:d2:9e:e1:1d:d8:c7:36:91:80:0f:7e:4f:
39:24:35:6e:11:60:24:b7:34:71:b8:f5:5f:fc:f4:
bc:db:01:c9:ab:f3:b5:37:c9:96:7e:e1:d8:6f:74:
ae:41:e0:ee:39:98:5c:a3:75:30:ea:0f:e6:e3:69:
2d:f1:33:cf:57:10:e6:d6:ea:63:ad:d1:d6:3d:35:
d4:d1:57:ce:a0:a8:c9:9e:8c:1c:c9:44:a7:9e:db:
14:77:b9:ba:c9:c7:3d:28:f0:ff:0b:0e:51:03:c2:
52:ac:37:f1:a0:72:c3:1a:1e:16:c7:91:65:9f:26:
0b:ba:f7:3d:26:3b:2c:9e:b8:b3:9e:c5:90:92:b2:
85:36:08:2e:10:e9:54:e2:74:da:cb:99:6b:46:0c:
5d:8b:91:79:02:67:ea:57:c8:d4:22:75:f0:c2:27:
9f:0a:05:c2:11:7b:d1:20:d3:c8:7d:88:c8:94:d3:
93:57:58:ef:e7:b2:f8:3b:b0:18:63:72:3c:42:42:
be:5f:58:5c:bc:df:7f:97:d3:7f:a2:cc:bc:ae:a5:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:ED:99:D8:03:58:01:4C:D5:77:EA:26:15:9C:04:F2:D0:A0:13
X509v3 Authority Key Identifier:
keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/3136382e302e3234302e302f32322d3234203d3e20323632343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:51:b4:57:bf:1e:a1:31:02:70:a5:97:55:69:02:e2:c5:02:
92:b1:ca:3b:42:3b:26:ce:94:c7:d9:34:4c:93:bd:fe:12:53:
d9:c0:6a:7d:3f:ff:ae:f2:6e:0e:05:29:e6:b2:d4:8b:fd:60:
70:80:ae:d9:a0:37:5c:ea:6c:32:8c:2a:77:7c:0f:94:b3:91:
41:a6:0a:44:99:f4:58:d6:07:17:14:5b:6c:81:7e:1b:d0:10:
30:b0:d1:ee:2c:f1:68:25:57:98:26:48:f7:f2:b2:fc:5c:53:
60:b6:4b:50:25:56:fa:df:70:e6:fb:7b:a5:e8:c6:0e:5f:ac:
b8:ca:cc:27:5c:cd:82:4a:28:d6:dd:8f:d6:50:97:8d:09:d5:
35:ca:0f:43:6c:3e:5d:b6:4d:dc:d3:60:94:7a:40:09:29:43:
a7:fc:e9:5a:e0:a4:89:c4:9f:c1:cb:20:1a:8c:12:c0:b7:d4:
e9:8d:43:d4:c1:c7:b1:0e:3e:ac:e4:a6:7a:14:6d:a0:a7:27:
4a:f6:d0:24:c8:5e:f5:f9:62:72:52:41:c8:69:db:32:01:80:
b6:1f:2b:c1:7a:86:76:01:78:3a:dc:d9:c5:0a:a3:16:b0:e7:
c5:81:69:e9:d6:76:08:ca:8f:0d:89:88:2c:f2:ee:39:9e:47:
b9:f3:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:11:42 2025 by rpki-client