Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e38322e3139362e302f32322d3234203d3e20323633323937.roa
File: 3137302e38322e3139362e302f32322d3234203d3e20323633323937.roa (raw, json)
Hash identifier: 3yC9I0ATItSbjEt97nIsok9nJOesMpho+Ce7Oc/ykvc=
Subject key identifier: A2:2E:6D:E3:72:83:1D:D3:46:E0:8F:79:56:85:88:72:FE:74:F9:E4
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 3F9D9DFD6BC13937725F64A0C0FE3BB34681023B
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e38322e3139362e302f32322d3234203d3e20323633323937.roa
Signing time: Fri 03 May 2024 21:51:26 +0000
ROA not before: Fri 03 May 2024 21:46:26 +0000
ROA not after: Fri 02 May 2025 21:51:26 +0000
asID: 263297
IP address blocks: 170.82.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9d:9d:fd:6b:c1:39:37:72:5f:64:a0:c0:fe:3b:b3:46:81:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:46:26 2024 GMT
Not After : May 2 21:51:26 2025 GMT
Subject: CN=A22E6DE372831DD346E08F7956858872FE74F9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:1d:65:dc:c0:25:be:0b:3f:4f:3f:92:93:
72:9c:0f:52:16:33:ba:4c:9e:aa:81:b5:57:87:af:
fe:2a:b6:4e:f0:bb:01:fe:90:00:c3:eb:83:e5:d1:
c5:9e:08:25:ed:52:39:50:38:03:2e:b6:7c:6e:c6:
e4:db:d8:99:e9:7d:ce:86:fd:3a:2b:50:f9:fd:bf:
5e:80:78:f6:b9:88:8e:42:26:3e:72:73:88:7f:b2:
dc:c9:5d:8d:c0:a7:1d:dc:ac:84:2c:17:8b:17:0f:
7f:98:46:62:de:ab:fe:06:30:6d:eb:29:a4:41:8d:
bb:f7:f1:e7:bc:22:93:33:dc:14:72:9c:b2:27:eb:
a3:ec:e7:88:4e:a9:7d:e2:9a:a5:2e:b7:79:54:5b:
b0:b0:95:9e:5f:59:64:9d:e4:e3:36:7a:ed:c3:2d:
25:ff:c6:ed:7d:db:f9:09:86:f5:f4:82:d4:91:c0:
bd:e5:ee:cd:eb:20:57:3b:47:6d:90:e0:0f:a1:df:
e8:9c:9b:eb:4f:7d:b5:c3:dc:86:34:d9:64:3a:61:
c0:7b:49:9c:22:6a:ce:f1:fb:f2:81:a9:e1:e1:7d:
5b:b3:31:c4:40:5c:b5:47:05:44:59:34:3c:1d:ba:
66:9b:db:ac:67:14:73:bd:2a:1a:46:93:22:87:74:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:6D:E3:72:83:1D:D3:46:E0:8F:79:56:85:88:72:FE:74:F9:E4
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3137302e38322e3139362e302f32322d3234203d3e20323633323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.196.0/22
Signature Algorithm: sha256WithRSAEncryption
57:01:63:4e:36:a0:f3:ba:6a:07:73:bd:ee:4d:f4:4b:19:d6:
b8:e3:67:9f:b6:18:92:30:2b:82:5b:14:2a:97:f4:11:22:a6:
08:ee:eb:ac:8a:a1:09:ea:aa:1a:40:ff:d2:4c:4c:73:95:10:
9e:a0:cf:92:78:76:3e:40:fe:9f:59:82:60:73:2c:68:d8:e5:
e8:4c:99:48:a2:07:c7:9c:de:22:c4:d5:21:e5:1f:87:8a:b8:
f6:30:cf:6f:16:d9:55:ab:59:46:91:dc:0a:e8:94:0e:da:74:
95:c3:88:03:52:19:7d:c3:51:a4:ab:51:94:8c:11:f4:9e:e3:
cc:44:b7:af:58:0e:e5:88:6f:68:8a:66:cd:e5:f6:f3:ba:86:
6a:08:6a:11:05:1b:58:f6:ec:98:b8:61:07:c0:eb:f7:fd:29:
d6:61:47:7b:b2:98:2c:86:ce:8c:60:3e:3e:43:6a:98:20:f7:
a2:3e:eb:6a:d5:84:47:99:71:ee:43:d1:a6:15:39:dd:17:6c:
5b:e0:43:3d:fc:44:b4:46:73:8e:3e:fa:e1:b3:1e:46:8f:74:
17:42:a3:1a:01:d4:1a:22:b3:ad:ea:c4:11:1c:4f:45:e0:8a:
89:85:20:93:35:12:c8:22:8f:e3:92:43:de:05:3f:ba:6c:f2:
c4:3d:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:46:18 2025 by rpki-client