Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa
File: 3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier: btBrhk/vnir3/WkjAJpbhfUXh+S5JEUg1vU7ZFwfGGQ=
Subject key identifier: C2:20:3E:29:F5:1F:B4:67:01:A3:30:D9:D0:D3:17:7B:82:92:E4:D8
Certificate issuer: /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial: 3823364CEDAA2C43D9BF8F2FF70E6DCAEF04DA79
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa
Signing time: Wed 03 Apr 2024 20:29:44 +0000
ROA not before: Wed 03 Apr 2024 20:24:44 +0000
ROA not after: Wed 02 Apr 2025 20:29:44 +0000
asID: 264444
IP address blocks: 168.194.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:23:36:4c:ed:aa:2c:43:d9:bf:8f:2f:f7:0e:6d:ca:ef:04:da:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Validity
Not Before: Apr 3 20:24:44 2024 GMT
Not After : Apr 2 20:29:44 2025 GMT
Subject: CN=C2203E29F51FB46701A330D9D0D3177B8292E4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:c7:76:87:8b:37:dd:f7:10:31:0f:66:a6:
cc:a6:0d:e9:f2:92:c6:5e:91:f4:20:96:78:3a:26:
9a:31:27:f4:c0:49:1f:2b:ad:33:46:17:be:df:4e:
de:16:96:63:a9:12:f1:d9:e1:f0:67:40:6e:37:85:
58:66:7f:fb:01:9a:53:79:e3:88:cc:98:91:47:c8:
92:14:29:f3:e6:06:e4:f8:3f:9c:e9:be:82:f8:fc:
d0:cf:99:1d:9c:7a:57:91:7f:32:28:67:e3:54:02:
a7:47:c1:48:d5:58:69:d4:5e:33:94:59:ac:21:55:
02:a4:b6:82:8b:7a:44:fe:73:ed:d2:13:11:ca:24:
36:55:7c:b5:6d:84:89:ac:66:9d:79:f5:e4:f6:d8:
1c:ab:34:f5:6c:02:76:bc:87:97:97:4b:cd:95:60:
97:0c:91:86:5d:8d:14:60:f3:f9:cb:70:1d:fe:7e:
85:14:47:de:5e:6a:36:ed:ad:24:4a:9e:fe:20:5f:
18:1a:14:f0:29:b1:81:84:80:12:0e:45:66:51:6a:
cb:e8:d3:8f:05:42:b1:ee:c2:91:05:5f:af:e3:08:
9c:2e:fb:5d:1d:81:c5:cc:62:b4:20:49:d9:fc:52:
49:f2:6c:76:10:ed:3a:ca:11:1f:69:7d:54:5d:27:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:3E:29:F5:1F:B4:67:01:A3:30:D9:D0:D3:17:7B:82:92:E4:D8
X509v3 Authority Key Identifier:
keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.236.0/22
Signature Algorithm: sha256WithRSAEncryption
63:f8:c1:62:62:16:0c:d2:67:28:92:ff:6e:60:94:84:8f:12:
fe:2e:e3:f1:4a:55:35:eb:af:5e:7f:d3:c3:e5:02:c1:fb:15:
8f:92:10:fb:b1:85:ea:d7:32:2e:92:be:76:24:dc:71:cd:99:
b8:75:e7:38:6b:eb:e3:c7:3a:56:43:ea:56:14:90:97:96:5c:
a3:bf:58:1d:b0:eb:a5:9f:cc:75:a0:a0:7a:73:71:a1:29:be:
99:19:70:d2:c1:df:d4:88:04:68:10:08:38:aa:69:ed:44:4d:
ad:9d:6c:b0:d9:f0:36:d8:f5:18:a9:81:3c:32:4c:5c:1f:91:
e3:4b:34:47:40:66:6a:bb:b2:94:46:15:28:0e:fd:1d:ea:5b:
1b:95:ee:71:f5:39:27:22:22:91:05:ff:2f:41:94:98:e0:f5:
bd:f8:39:3b:14:0a:b2:9d:2f:5d:a7:9d:b2:90:cd:f0:26:bd:
95:cd:05:05:92:9e:8f:86:15:46:40:67:e7:78:65:bf:95:2e:
c4:d9:9a:31:c3:b4:19:6d:73:90:8c:8e:f4:5d:5a:41:55:dc:
69:97:82:d5:6f:fe:f7:78:53:18:e1:8f:de:61:fe:74:da:df:
1f:a9:54:81:17:df:0d:92:32:94:be:81:a8:34:fd:62:f4:2e:
77:8c:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:04 2025 by rpki-client