Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
File: 3136382e3232382e33362e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier: fFfLnlHSFe2eRrZbVvT5xSZQeBgwl7E2Q3Uw+QM43+I=
Subject key identifier: 40:E6:00:A3:27:88:81:F4:81:8C:3A:B9:02:3F:C2:8F:0A:82:44:E9
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 30FB330B7B2604DAA2A097C6C499E1FD47331782
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
Signing time: Wed 29 May 2024 18:23:52 +0000
ROA not before: Wed 29 May 2024 18:18:52 +0000
ROA not after: Wed 28 May 2025 18:23:52 +0000
asID: 61794
IP address blocks: 168.228.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fb:33:0b:7b:26:04:da:a2:a0:97:c6:c4:99:e1:fd:47:33:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: May 29 18:18:52 2024 GMT
Not After : May 28 18:23:52 2025 GMT
Subject: CN=40E600A3278881F4818C3AB9023FC28F0A8244E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:dd:e5:aa:42:28:15:ac:cb:7c:97:08:b0:
89:c3:1d:ee:3f:1b:3f:2a:2a:e8:0d:51:a1:8e:47:
d5:13:40:d0:72:b6:33:ec:b7:a7:5f:70:d8:ab:c3:
08:c8:6e:fe:51:c8:17:08:2d:4e:4d:f2:6a:24:86:
69:13:df:cb:fe:41:33:33:93:a4:7a:be:bc:3a:64:
fc:2b:eb:3f:57:47:7c:83:2d:36:a4:71:ef:28:0b:
62:80:d2:50:a6:31:f9:01:48:48:bd:13:38:19:8a:
23:70:63:ca:86:74:08:6a:94:a3:6e:a8:66:8f:6e:
21:b3:5c:e9:df:ca:b1:2f:1b:7a:43:6b:51:88:17:
a3:ad:ef:e0:5e:8e:89:66:29:c6:ea:0e:ba:d2:a4:
d3:ac:72:22:3f:c7:4f:7b:8a:4b:4f:28:6d:f1:56:
3d:22:02:3f:7b:fc:45:92:98:fd:ef:91:fc:13:39:
90:ae:0a:0d:d0:b6:36:0f:63:4a:8e:cf:68:dc:10:
5b:74:a2:c6:d6:1c:0e:78:2a:a6:42:35:50:5c:28:
e6:80:dc:d3:04:b8:ae:cd:72:d4:de:af:86:28:f7:
1c:35:f0:06:9d:c1:ed:fb:2f:89:ca:1a:20:6f:e6:
98:e6:f3:e0:ce:bb:c6:40:1b:7d:20:f2:d5:f7:74:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:00:A3:27:88:81:F4:81:8C:3A:B9:02:3F:C2:8F:0A:82:44:E9
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:4c:28:1f:31:a0:73:43:f5:ac:dd:09:cf:cf:24:40:ec:ec:
ff:c9:0e:05:90:80:3a:26:dc:5e:97:26:a8:ce:43:83:fc:ed:
33:4f:ab:57:74:91:60:88:d4:ef:da:42:5e:de:e8:8f:d3:a4:
96:6e:ed:59:f2:76:c2:60:f7:ce:76:98:f9:a2:db:73:07:2e:
1f:f8:24:a1:de:46:c6:ce:33:7a:d9:35:d8:90:ad:a0:15:2d:
d3:79:8f:3b:38:a8:b9:95:a0:d2:25:46:9b:ac:e2:15:75:db:
7b:67:a4:aa:bf:b0:86:3f:31:4f:4c:87:31:e9:4d:1f:e8:ae:
9c:5f:a5:82:28:ba:cf:e8:0b:78:d0:83:3a:ae:50:5a:5e:41:
ec:86:1d:34:c9:24:ec:83:6f:24:28:f7:c9:dc:94:d2:38:db:
c6:ef:64:d6:7c:2f:00:c3:cc:30:c4:b4:68:e7:7f:75:fa:e4:
52:ad:c7:02:30:81:df:65:3e:70:30:04:89:e8:71:e5:e1:1f:
37:3c:a7:75:97:17:1c:f9:99:bd:2c:fe:97:29:5a:24:04:99:
19:e1:b5:f0:da:01:01:63:d4:6f:28:28:14:69:4a:3b:95:4b:
83:60:f4:95:66:27:0e:97:e3:61:30:c8:31:69:df:f2:e5:ad:
7d:b9:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:05 2025 by rpki-client