Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35352e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: l3wxmxkT9EZB0wm2izlaG1hojkN0UEfP1H2PeLfhV5g=
Subject key identifier: 23:D3:8A:10:EE:80:80:CA:C5:37:FA:BD:56:2D:78:C6:E7:71:0C:5C
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 0BA86D14F9E52C353FC8A886B943C9E21DAA1312
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 168.121.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a8:6d:14:f9:e5:2c:35:3f:c8:a8:86:b9:43:c9:e2:1d:aa:13:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=23D38A10EE8080CAC537FABD562D78C6E7710C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:b0:55:69:a6:3c:16:d9:fc:a1:04:41:d2:
5c:7b:46:93:82:01:69:89:72:93:4e:1e:be:1b:3d:
e8:06:7c:8c:e2:45:c1:b8:38:4c:99:0d:81:bb:28:
bb:fd:1f:2b:4e:29:f2:6b:e0:e9:a0:0c:90:20:ea:
da:22:d3:90:2f:93:c2:1c:3a:65:7b:a5:3f:dd:de:
1e:ef:41:b3:9e:23:58:70:90:42:2c:60:70:de:1e:
99:10:43:d6:92:40:5a:d7:30:9a:01:74:99:d6:86:
01:4e:5e:97:87:53:be:46:4e:6e:0d:e0:af:c2:e2:
64:db:4f:96:e7:13:6b:94:b6:e3:c5:00:57:ad:8b:
f7:8c:b7:63:3c:3e:1b:eb:b5:1d:a8:aa:a7:51:73:
6b:5b:a2:aa:35:e8:cf:c2:ee:d8:b1:d0:80:2b:b7:
e6:7e:51:9d:dc:eb:6e:22:ae:10:c5:81:ed:92:e7:
34:25:32:4f:47:01:4e:2c:ec:a2:c7:93:bd:41:f8:
f9:80:fb:5c:28:26:cc:a7:6e:2a:35:a0:e9:8c:12:
d3:fd:03:f0:7e:ef:1d:bb:f7:33:d8:d9:3f:1b:e2:
92:fd:25:de:b1:b4:40:03:19:6c:18:97:1e:25:23:
a4:2b:1f:1d:0f:10:43:61:44:b5:d6:f8:44:04:8d:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:8A:10:EE:80:80:CA:C5:37:FA:BD:56:2D:78:C6:E7:71:0C:5C
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b0:ea:cc:be:e8:22:eb:8a:97:92:03:a2:4b:c8:f6:cc:eb:
18:5f:4c:08:bb:99:04:31:f2:fe:dd:40:85:27:81:1e:ac:c3:
ec:8a:f2:44:ca:04:04:e7:42:5c:af:14:8f:f6:fc:67:b6:38:
81:0e:ab:34:f8:c1:a9:41:68:2c:9c:50:b0:e5:79:79:a7:01:
ea:f2:88:ac:f9:e5:cb:e2:5d:c8:d8:50:92:1c:2b:89:32:78:
ff:49:68:93:46:a1:85:f5:cd:cf:46:d0:09:b1:5f:ef:53:a8:
6f:95:68:83:0e:aa:21:ef:ea:b7:ec:3c:ed:46:ac:d2:af:4a:
ca:ba:36:d7:e1:29:1e:39:84:62:d4:66:1b:d0:58:6f:24:9d:
cb:87:cc:3b:53:69:81:f7:2f:7b:32:6a:28:e2:51:2b:8b:af:
64:06:e5:3f:d4:85:bf:52:f7:e1:46:0b:63:79:5a:b0:df:81:
f2:9e:ff:e2:8b:1a:b4:b5:61:4c:f4:48:b6:c8:4f:ec:70:03:
b0:1a:1c:36:12:2e:08:22:9b:48:ac:0d:c8:01:13:7c:73:43:
db:23:d3:d6:05:ab:f5:6f:a7:a8:00:81:02:82:4f:46:c4:0d:
ec:cb:4a:48:96:0d:7a:b3:ec:f3:cc:f3:6f:20:53:10:aa:e0:
e5:62:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:43:50 2025 by rpki-client