Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
File: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (raw, json)
Hash identifier: ROft8n4BbOwvf2bQCwmxjt0cfIjDdRCpnG/TOQGiRmw=
Subject key identifier: A5:57:3C:AC:EE:1C:87:4D:76:7D:28:E0:AB:69:36:42:6C:5F:B0:40
Certificate issuer: /CN=D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D
Certificate serial: 23F119A320558389471BAA1DDEBE5087123F9900
Authority key identifier: D1:09:3B:85:DB:CF:9D:C2:34:1A:82:B6:E6:D2:BA:0D:0C:B0:F9:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
Signing time: Tue 01 Nov 2022 17:54:24 +0000
ROA not before: Tue 01 Nov 2022 17:49:24 +0000
ROA not after: Tue 31 Oct 2023 17:54:24 +0000
asID: 52639
IP address blocks: 168.195.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f1:19:a3:20:55:83:89:47:1b:aa:1d:de:be:50:87:12:3f:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D
Validity
Not Before: Nov 1 17:49:24 2022 GMT
Not After : Oct 31 17:54:24 2023 GMT
Subject: CN=A5573CACEE1C874D767D28E0AB6936426C5FB040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:f2:47:b2:0c:b0:10:86:60:ff:7f:8c:8a:
47:92:ea:89:00:ae:2b:5f:a4:81:3d:c1:e9:e0:81:
78:31:03:ae:7e:ba:35:73:ae:b3:fa:b4:18:88:cd:
02:11:89:d4:27:02:46:72:a2:b3:90:ff:57:db:06:
1e:c3:32:fc:6c:40:3d:32:3c:01:fd:f3:38:8b:aa:
c7:00:92:18:4a:2a:a7:9e:b8:16:47:be:25:9e:5f:
a8:6a:48:4e:05:63:18:8a:c7:bc:17:99:5f:66:c1:
c2:df:ba:b9:fd:fe:c1:75:6b:35:01:bf:43:b8:4a:
6d:71:31:79:b6:fa:52:89:af:b6:71:2e:0c:0a:c1:
07:a3:1e:30:a0:0f:9e:79:fc:51:b2:ec:26:4d:8c:
f5:93:5f:ca:55:46:79:c7:de:c5:ae:ab:62:8b:2d:
1f:fe:d8:04:04:37:0d:a9:09:01:f6:48:15:fa:ca:
8a:89:27:e4:0e:99:97:03:0d:10:5d:34:60:5f:e9:
ca:e0:85:99:93:31:c8:39:d9:e8:29:1c:73:ee:46:
1f:6b:1c:2e:16:f8:ad:87:13:d3:33:6b:f9:f4:f7:
d1:0f:03:ee:ed:cb:85:a4:01:5c:7f:23:3d:e3:f6:
9d:3e:53:10:43:99:06:07:2b:18:30:19:16:79:27:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:3C:AC:EE:1C:87:4D:76:7D:28:E0:AB:69:36:42:6C:5F:B0:40
X509v3 Authority Key Identifier:
keyid:D1:09:3B:85:DB:CF:9D:C2:34:1A:82:B6:E6:D2:BA:0D:0C:B0:F9:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f1:e0:97:42:66:89:4f:76:76:f1:3b:68:e1:5b:6a:78:51:
02:3e:fd:b4:2b:12:b5:f9:ca:be:f9:3a:f7:7c:76:5a:b2:e4:
f8:47:2f:fb:22:dc:92:b0:02:19:fc:33:ed:d5:ef:92:72:bd:
49:19:65:83:9f:16:9b:9b:b0:dc:5b:49:43:d6:3c:1c:85:8c:
a7:fa:55:47:13:4b:e6:bc:0e:ee:78:be:af:cf:57:dc:70:c2:
09:10:13:6d:8a:c1:c9:85:cd:87:54:8a:8b:34:39:0e:ec:f7:
49:eb:5a:e5:39:0b:68:f2:4e:9f:d2:0f:64:33:0e:d5:aa:89:
52:28:c6:93:21:12:6f:be:24:a5:ce:d4:9b:e2:cb:a3:5a:70:
80:d6:99:3a:e2:a4:55:7e:c8:e0:e0:8f:f2:3d:e2:01:89:ab:
8c:a9:ea:26:a6:88:3d:12:de:27:7c:2c:68:ed:d4:61:e3:aa:
46:7f:90:9f:77:29:2b:2a:50:e6:1b:82:1e:82:59:8a:c1:e4:
40:c6:35:a2:2c:a1:6a:c8:ba:a3:98:27:a0:f1:c0:aa:a1:6a:
ff:9d:4e:41:76:b6:0a:f6:b2:52:23:ef:da:fa:66:94:e3:72:
f4:b7:31:92:c1:d4:15:1c:23:b4:f1:f1:36:e6:a4:1c:b7:11:
1e:c6:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:28:44 2025 by rpki-client