Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
File: 3136382e3232372e34342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: SRtBCZT9mlXrN4T8yVqIkFRoI/DMJMOBuYp4+8wxfAQ=
Subject key identifier: 88:F9:A2:D4:11:98:4B:7E:EB:03:61:18:C8:B9:05:C8:61:2E:59:68
Certificate issuer: /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial: 08EFAEEA1BB72694C92D9C49E193FD5457200A79
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
Signing time: Thu 07 Nov 2024 20:40:15 +0000
ROA not before: Thu 07 Nov 2024 20:35:15 +0000
ROA not after: Thu 06 Nov 2025 20:40:15 +0000
asID: 28270
IP address blocks: 168.227.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ef:ae:ea:1b:b7:26:94:c9:2d:9c:49:e1:93:fd:54:57:20:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Validity
Not Before: Nov 7 20:35:15 2024 GMT
Not After : Nov 6 20:40:15 2025 GMT
Subject: CN=88F9A2D411984B7EEB036118C8B905C8612E5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:af:ae:2a:f3:5d:0a:03:1a:89:61:3c:7c:
a3:86:82:63:46:5d:cb:c0:93:e1:33:0e:aa:b8:91:
eb:dd:01:9c:e0:55:9b:f0:ea:16:d6:3b:96:3e:1a:
06:37:58:48:47:bb:21:e2:a3:2d:b0:25:f5:af:7c:
9e:6e:cf:82:d9:fa:75:49:b2:fc:7a:69:8a:1f:20:
dd:e4:ae:68:ce:dd:c7:cd:81:57:d8:ad:26:26:46:
6d:c5:a7:46:ae:d8:a3:8b:27:96:08:ce:01:aa:4f:
4a:90:4d:86:67:4f:84:76:df:ac:89:3b:f8:88:3a:
b9:13:da:23:34:29:1b:4f:55:f8:04:3f:5f:b1:a9:
08:6d:12:08:d5:8f:74:07:49:6a:33:57:97:bd:64:
0d:ae:f2:bd:5a:4d:27:b8:0f:9f:10:ca:0e:61:93:
1d:da:58:94:13:80:67:db:08:a1:91:67:a2:48:da:
da:a6:86:77:a3:35:e5:d2:5c:d7:ce:4c:11:26:0a:
36:f9:28:70:fa:0a:26:b0:62:9f:88:2b:26:90:eb:
44:75:1a:72:78:c5:52:8e:c8:61:9d:4a:cd:89:ad:
62:30:7e:8d:e2:5a:b0:81:8d:f1:94:7c:f8:ca:11:
31:70:03:79:11:ae:4f:f6:00:40:31:aa:d2:21:8f:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:A2:D4:11:98:4B:7E:EB:03:61:18:C8:B9:05:C8:61:2E:59:68
X509v3 Authority Key Identifier:
keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.44.0/22
Signature Algorithm: sha256WithRSAEncryption
06:b5:b8:9a:d1:8a:93:e0:01:93:45:2a:0c:c2:b2:e7:f6:bb:
0b:7d:8f:30:f0:c7:14:fc:53:bf:3c:fc:52:b7:75:e7:3f:1c:
c2:b5:5a:55:5a:b9:bf:cb:b5:88:70:2b:d5:18:37:78:8b:4d:
79:8c:5e:52:a4:73:5e:9e:c8:42:22:37:27:51:76:ed:4c:6f:
45:01:91:39:92:de:63:8a:09:90:23:d6:c9:fd:02:68:88:b7:
e6:1a:82:ea:54:20:8c:c7:87:1f:06:71:24:bb:5e:d2:10:b5:
8f:e1:23:6b:ff:a7:c8:7d:a0:ee:6e:5d:f0:d7:65:fa:48:7d:
0c:3d:b7:82:da:2f:b4:ce:19:d2:dd:6b:a9:ee:30:72:32:ba:
63:11:af:06:a2:84:36:8c:ae:51:29:4e:dc:5b:77:47:d8:25:
6f:54:e0:10:06:ba:fb:90:fa:00:f7:13:57:39:10:92:d5:c3:
37:1c:87:3b:46:73:93:6a:14:8b:7a:44:e0:91:62:9d:fc:d8:
67:81:95:bd:ea:84:65:6b:1e:cf:49:6f:8d:28:17:4c:c7:73:
bd:42:0b:7f:d1:a6:6c:07:60:be:18:d0:eb:b7:89:f3:b1:c3:
10:81:c1:bf:91:9c:01:75:05:b9:7a:5b:d3:1c:ab:2d:a4:5e:
b1:af:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:52:38 2025 by rpki-client