Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3133312e302e34342e302f32322d3234203d3e20323632363231.roa
File: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (raw, json)
Hash identifier: EonAsZcC3+297zjktfq+Chnxso/t4P3gU3t0DARAhMQ=
Subject key identifier: BB:8E:7F:F9:EF:8B:D0:10:26:D5:32:FB:60:96:21:93:AE:94:07:40
Certificate issuer: /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial: 554595069908567728CF62A165F399318C5809D7
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3133312e302e34342e302f32322d3234203d3e20323632363231.roa
Signing time: Thu 04 Apr 2024 04:47:23 +0000
ROA not before: Thu 04 Apr 2024 04:42:23 +0000
ROA not after: Thu 03 Apr 2025 04:47:23 +0000
asID: 262621
IP address blocks: 131.0.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:45:95:06:99:08:56:77:28:cf:62:a1:65:f3:99:31:8c:58:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Validity
Not Before: Apr 4 04:42:23 2024 GMT
Not After : Apr 3 04:47:23 2025 GMT
Subject: CN=BB8E7FF9EF8BD01026D532FB60962193AE940740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:10:7a:73:d1:7e:46:9a:a8:9a:33:93:85:
d9:24:64:99:69:5b:da:d1:69:f1:57:d1:46:e7:0e:
99:64:24:8c:e9:14:05:a2:cf:6d:c0:91:d4:27:f3:
92:e8:cd:35:fb:44:aa:cb:83:e7:16:72:35:fb:d0:
b0:a2:6e:9c:cf:87:46:46:36:11:c7:a1:b3:db:1a:
8e:b4:9d:9c:0f:09:ae:6b:9e:60:fd:9a:5b:22:ea:
78:b5:52:6c:11:c0:11:b8:82:11:eb:47:49:87:68:
cd:b5:75:66:fe:d4:2d:87:82:0f:4d:f9:f8:f8:1d:
55:9e:4f:b6:6b:cd:c1:dc:58:f1:3a:06:74:36:19:
33:3b:a4:33:d2:b1:44:6f:2e:27:68:e3:3e:b3:e5:
20:75:fc:10:a7:d4:8e:22:2f:51:c4:21:c2:45:94:
b3:ff:01:96:66:40:ca:db:d6:be:ee:7d:81:0a:c1:
b9:61:a0:08:8e:d7:d7:e8:4e:81:80:47:5b:69:15:
48:d8:3c:41:28:e3:58:bd:b0:a1:3b:31:c8:65:66:
7a:cc:aa:aa:98:82:72:fe:cf:ee:0a:09:b6:77:09:
1d:ac:c8:fd:55:59:03:26:c1:b2:a0:24:30:48:12:
7d:cb:5d:e9:b6:3c:a1:72:89:32:67:2e:af:df:57:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:7F:F9:EF:8B:D0:10:26:D5:32:FB:60:96:21:93:AE:94:07:40
X509v3 Authority Key Identifier:
keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3133312e302e34342e302f32322d3234203d3e20323632363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:fe:33:3c:92:1e:8f:cc:6e:5d:94:a1:95:eb:ce:1a:47:0a:
13:ab:9f:07:a4:09:05:33:16:44:2f:b3:d4:68:03:e0:59:b5:
8f:d3:a2:11:49:26:36:e8:03:9d:ab:11:45:06:cd:99:a2:b3:
e0:0b:ff:c1:fc:8f:b1:42:c8:b0:68:f9:4f:3e:2e:ef:89:52:
f4:dc:92:7a:55:0d:1c:eb:65:ec:a9:d0:2a:05:96:69:84:01:
5f:28:06:d1:7f:0a:c8:29:7d:a8:6a:f6:e8:86:3a:b5:09:d0:
f7:bf:66:9e:04:b3:5d:6d:93:18:ff:f8:c0:7a:64:59:8c:9f:
97:f7:28:0e:0c:61:78:9c:8d:cd:3e:35:8b:17:e0:5f:af:8b:
e5:d2:17:ba:b9:6e:25:31:82:ad:c5:76:4d:ee:2c:f1:95:db:
e4:aa:a3:5a:ca:76:37:74:32:80:ad:d6:c2:a7:c6:0a:0c:47:
62:d1:d3:b6:dc:a6:f2:0c:45:6b:ef:eb:4e:28:c3:a6:d3:00:
7f:40:fd:bc:35:ae:50:f4:41:e5:d0:f9:c9:b2:78:8c:bb:50:
e4:bd:4d:93:aa:c4:69:bb:d2:1b:87:09:64:29:b9:0f:8f:45:
11:1b:79:a7:3e:ba:76:99:76:b2:42:ce:0c:22:d5:a8:3e:55:
d3:76:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:19:54 2025 by rpki-client