Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
File: 3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa (raw, json)
Hash identifier: Tg+TwMt16eX3zZB3gakSky/srqySn8z28UHZ1axsvBo=
Subject key identifier: F6:A6:3F:86:FA:95:ED:BB:16:37:F6:0F:DA:D5:06:C5:27:2D:A9:C9
Certificate issuer: /CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Certificate serial: 25004065B3E6A4BEBEAF7D653044C711BD307C9D
Authority key identifier: 8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
Signing time: Mon 16 Dec 2024 20:51:18 +0000
ROA not before: Mon 16 Dec 2024 20:46:18 +0000
ROA not after: Mon 15 Dec 2025 20:51:18 +0000
asID: 264316
IP address blocks: 168.121.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:00:40:65:b3:e6:a4:be:be:af:7d:65:30:44:c7:11:bd:30:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Validity
Not Before: Dec 16 20:46:18 2024 GMT
Not After : Dec 15 20:51:18 2025 GMT
Subject: CN=F6A63F86FA95EDBB1637F60FDAD506C5272DA9C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:90:70:7c:1e:c7:b5:93:ac:f5:b9:8d:08:
77:4a:0a:b5:56:fa:ba:bc:a4:98:b9:1a:6c:46:8e:
f2:1f:01:88:07:ec:86:0d:c8:02:c8:ca:4e:54:f0:
ac:09:57:05:8d:fa:72:25:56:1d:58:58:31:00:ca:
ed:02:20:d5:2c:29:0a:2b:49:13:cf:48:00:ab:d3:
e7:10:14:03:80:e7:4a:12:06:6c:39:d1:e8:52:c4:
4b:a5:73:ab:9b:15:f4:c0:da:98:f0:25:3d:b0:4a:
80:df:3f:59:0f:34:cc:75:e0:3f:f2:8a:b0:5d:96:
e9:7f:8b:2c:96:a8:50:88:24:39:14:71:e6:b0:32:
c3:ab:48:ff:27:73:fb:06:93:45:4b:f9:94:24:0d:
65:ec:9a:f0:d1:81:58:c4:68:58:a5:ca:bb:29:9c:
d6:05:05:66:cb:fd:99:d0:e9:75:7a:f2:3b:9b:e7:
33:5f:ba:4f:82:c9:b6:0a:69:91:83:14:62:2d:4a:
b2:31:72:06:24:8d:c2:e6:14:a1:98:c5:8f:a2:81:
7e:49:e4:ef:cd:bd:12:0a:b8:37:39:53:0f:80:60:
c7:26:c4:d2:13:c8:08:27:07:a1:db:67:d4:79:07:
38:89:e5:44:50:f9:0b:b4:d5:b2:24:76:48:e4:64:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:3F:86:FA:95:ED:BB:16:37:F6:0F:DA:D5:06:C5:27:2D:A9:C9
X509v3 Authority Key Identifier:
keyid:8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.216.0/22
Signature Algorithm: sha256WithRSAEncryption
99:c2:73:c0:c9:ae:e5:1b:14:77:ad:17:b8:42:21:2f:02:af:
eb:65:77:6b:37:3c:fd:5d:db:ce:18:46:b1:d8:aa:70:31:7c:
39:d2:de:35:a8:72:bb:9e:68:66:1c:bf:a5:23:df:cb:fb:a3:
4a:47:e9:ee:24:2b:94:6c:de:e9:10:35:9d:31:84:16:4f:62:
0f:0d:b6:bb:4b:f3:e6:11:6b:b8:d2:d8:5d:c3:25:5c:ac:33:
05:5d:9e:c6:e2:b3:7e:1b:9e:73:f4:03:5c:24:e0:1f:e0:aa:
d2:a1:f0:4b:5c:5e:54:33:4c:1d:e9:26:bd:19:fe:15:5b:5a:
ba:59:45:4b:90:d9:cb:b1:be:ad:d5:40:b8:92:92:32:60:aa:
7d:13:99:7d:50:f1:9d:aa:77:ba:2f:a9:a4:1e:b7:86:64:ae:
02:d3:38:0f:7c:57:b3:ab:3c:13:83:80:bd:29:a9:68:76:43:
f6:5a:da:f5:11:f3:db:f5:4a:92:ef:57:c0:b5:34:1b:89:69:
b2:14:d5:ff:75:d5:85:e0:9b:a3:a7:0a:80:42:3c:0a:2e:31:
a8:4b:71:a7:39:3e:3d:8b:c3:e1:fb:46:35:e3:66:08:3e:c5:
73:91:2d:18:32:e0:ba:07:b7:7c:ca:0c:67:36:ea:d9:b3:b5:
85:98:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:12 2025 by rpki-client