Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
File: 3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier: ZJstMgP4PFpCzUvv72rdZjDN0CD/9d8GF/sSAtnwSzc=
Subject key identifier: A8:DB:32:FA:78:68:C6:0F:28:AE:0A:E1:01:E0:24:FB:FD:52:0D:C2
Certificate issuer: /CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
Certificate serial: CF53D56DC855C760A5E6FBEF4A5017371311FB
Authority key identifier: 19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
Signing time: Mon 13 Jan 2025 13:13:55 +0000
ROA not before: Mon 13 Jan 2025 13:08:55 +0000
ROA not after: Mon 12 Jan 2026 13:13:55 +0000
asID: 262765
IP address blocks: 168.232.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cf:53:d5:6d:c8:55:c7:60:a5:e6:fb:ef:4a:50:17:37:13:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
Validity
Not Before: Jan 13 13:08:55 2025 GMT
Not After : Jan 12 13:13:55 2026 GMT
Subject: CN=A8DB32FA7868C60F28AE0AE101E024FBFD520DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:c0:79:96:82:b6:02:b3:34:b6:e0:34:b8:
37:11:43:bd:5b:11:da:ef:fb:58:9d:9a:47:b9:7f:
96:d4:be:50:b3:4d:db:5f:d6:05:64:a6:73:85:ae:
fa:68:4f:00:dc:04:e1:bc:00:2d:c1:9c:c8:7b:3a:
6d:18:db:71:ca:bd:a2:5b:9b:cd:32:23:40:64:31:
5c:5c:e4:8e:65:04:f4:13:80:61:e1:56:05:93:42:
9d:ff:e5:45:ac:11:be:c8:82:fc:c1:67:5a:02:46:
ac:ff:91:10:22:f9:96:16:2f:ed:10:d7:eb:83:5e:
a7:9c:f9:e4:b9:ef:ff:7e:5d:b6:1a:76:f0:b9:04:
ec:84:46:38:84:79:9c:1d:c5:21:41:d9:4f:6b:c7:
c0:a1:31:0a:02:f2:03:4a:44:40:c1:0d:44:ca:67:
a6:8e:c5:69:56:87:8d:0c:8c:45:d1:f8:d2:7c:70:
b3:d8:80:3f:f9:89:4f:f0:cb:5a:17:e2:12:58:51:
65:07:4f:74:b9:97:00:13:e9:45:f9:d9:86:68:a8:
92:62:c4:b6:03:81:df:60:a5:e8:45:20:f2:8f:67:
26:12:10:c3:41:71:c9:4e:dc:b1:a4:67:a5:71:91:
d6:bc:3e:fa:34:38:07:9e:29:08:c8:1f:6a:1c:07:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:32:FA:78:68:C6:0F:28:AE:0A:E1:01:E0:24:FB:FD:52:0D:C2
X509v3 Authority Key Identifier:
keyid:19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
14:20:ee:71:2e:76:0e:da:88:67:1e:10:35:b9:77:31:1d:13:
4d:1b:6e:3d:d3:24:f9:35:d9:13:d1:ac:d6:dc:7e:0b:11:18:
6a:6c:75:32:3a:ec:8e:6f:6f:a0:05:09:6e:ef:3b:cf:7b:db:
36:60:0a:90:01:20:e7:6d:36:fa:2e:99:a5:0d:ae:04:e6:84:
82:da:28:4e:dc:ad:3b:6f:cb:8d:d3:9e:4f:ce:f0:be:d7:5c:
ea:48:20:67:cc:45:d6:fc:d4:8d:38:8a:f5:ea:7d:96:7d:0b:
21:3e:12:85:ba:c1:5a:a4:9b:cd:cc:ab:46:2c:04:a7:8f:5d:
76:6e:19:a2:fb:3d:c5:4e:ec:fb:f4:af:13:62:32:78:b5:62:
34:db:cb:d4:66:c4:b5:ad:86:47:7b:aa:6e:8b:b0:a8:e6:42:
52:a5:47:9f:a4:5e:78:65:1d:65:e4:40:3b:49:4a:3f:ee:c2:
c9:ee:b8:35:68:05:47:ae:4b:26:98:c5:e4:60:cf:25:ce:21:
81:37:71:3a:65:41:ab:83:95:6d:b9:db:61:d9:1d:e7:9a:35:
af:b4:48:53:63:84:26:cb:99:33:20:cf:39:2d:0f:20:ff:cc:
b3:49:dd:1b:7b:fd:cb:a6:d0:fb:10:6b:ba:93:32:0f:53:53:
be:46:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:01:28 2025 by rpki-client