Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa
File: 3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa (raw, json)
Hash identifier: FKMFhqlRbB2vptNoZ5ISDZt8Ocsa8IXQNUDgS7GJILE=
Subject key identifier: 5F:CA:6F:48:FF:DD:2F:A2:15:D1:BA:F0:E2:4A:EF:B6:AA:73:39:03
Certificate issuer: /CN=C977770848F9819D0F9036920A47A3511F957396
Certificate serial: 524AAF6DD622C445E9FEC022CF4898D2CA687184
Authority key identifier: C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa
Signing time: Mon 04 Nov 2024 16:36:40 +0000
ROA not before: Mon 04 Nov 2024 16:31:40 +0000
ROA not after: Mon 03 Nov 2025 16:36:40 +0000
asID: 265409
IP address blocks: 168.194.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4a:af:6d:d6:22:c4:45:e9:fe:c0:22:cf:48:98:d2:ca:68:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C977770848F9819D0F9036920A47A3511F957396
Validity
Not Before: Nov 4 16:31:40 2024 GMT
Not After : Nov 3 16:36:40 2025 GMT
Subject: CN=5FCA6F48FFDD2FA215D1BAF0E24AEFB6AA733903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:5a:03:bd:39:02:6b:1b:6e:fb:98:ef:54:
3e:64:ba:93:cf:3c:bd:23:0b:0a:ee:7d:fe:4b:83:
55:60:66:99:88:f9:26:eb:b8:57:b7:d8:dc:32:a8:
8a:ef:26:32:b2:7b:ca:ee:5a:2a:60:1f:cd:e5:88:
71:76:46:c2:23:a1:ac:23:31:a6:bf:a0:7b:b2:d8:
5f:37:64:3d:f8:bc:1c:e1:91:e6:d8:95:9b:59:90:
7a:2f:75:8b:33:b2:95:04:f0:21:b6:d9:c7:80:c9:
72:be:f3:9b:79:db:82:e8:01:81:f4:8f:de:98:0b:
37:fd:61:ad:63:ff:aa:a5:00:1b:3f:d5:f3:63:e8:
71:b0:fc:70:ab:f4:fc:aa:3c:21:11:a2:f8:91:17:
5b:53:5f:3e:8c:52:d6:39:1d:2f:4a:45:e8:4e:73:
50:d2:93:41:81:71:df:62:33:56:93:a7:67:02:56:
e9:cb:2c:87:6c:3b:7e:c1:21:1b:70:70:89:41:f9:
42:de:bd:ed:fb:57:31:64:6c:7f:a2:fd:62:8f:01:
c3:c7:90:1e:38:65:7f:92:e8:9e:8f:d9:94:4d:d5:
84:f5:37:f1:42:9a:28:f0:41:80:a4:6f:e3:e0:63:
e6:b6:22:a9:56:4f:ca:4b:83:77:7f:91:17:0f:da:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:6F:48:FF:DD:2F:A2:15:D1:BA:F0:E2:4A:EF:B6:AA:73:39:03
X509v3 Authority Key Identifier:
keyid:C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.212.0/22
Signature Algorithm: sha256WithRSAEncryption
65:43:18:65:03:3f:a1:a3:f8:04:be:6b:c9:4d:a1:fe:bb:fd:
18:c0:8d:6d:28:64:16:b4:d8:e3:89:c9:ad:6c:54:91:6f:58:
ba:5f:36:fe:c0:c3:ff:9e:32:ba:0b:74:58:52:79:07:96:8b:
23:fd:84:b8:57:e5:19:e3:c8:e5:47:60:05:eb:b3:bf:93:e5:
aa:bd:c6:58:d3:f5:98:56:3f:00:05:85:6f:bf:8a:81:71:0c:
4a:ad:38:51:a4:4d:3a:b0:8b:7a:45:4c:28:46:82:f7:fd:c9:
d7:39:80:58:72:2e:6e:40:1e:6a:28:bb:1e:5d:16:74:c2:fe:
72:60:48:b5:e0:7b:ee:82:da:ff:2a:9d:8c:12:94:ef:64:9b:
f8:b4:51:9e:f7:e8:9f:10:9e:bd:6f:6f:de:a3:73:75:3f:39:
dc:ec:be:8b:a0:90:5d:35:03:37:a6:e1:b9:77:57:f5:65:8c:
e6:d2:5f:88:c7:47:78:e4:44:0c:43:8e:df:ec:86:46:ae:df:
ab:95:ef:d6:5a:b0:74:71:6b:bd:a0:33:d7:8c:bd:5a:be:79:
59:59:88:70:e9:39:db:2d:f2:f2:5c:b7:6c:d7:89:a3:76:b8:
91:f6:c4:51:27:70:ac:94:fc:4c:6f:5c:eb:e6:5d:6e:02:0c:
52:0c:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:25 2025 by rpki-client