Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3232203d3e20323033.roa
File: 3136382e3139352e3131322e302f32322d3232203d3e20323033.roa (raw, json)
Hash identifier: f3oKi6hSya106BBksy4+bqo3sf2SgH5L49IoGtSzZjM=
Subject key identifier: 26:47:F6:B4:4B:61:48:D8:F7:76:1C:18:09:3C:6E:C7:83:38:8E:D7
Certificate issuer: /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial: 1DBFADDD002DFDCCC45B12F48AB620B8DEA08657
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3232203d3e20323033.roa
Signing time: Mon 19 Dec 2022 16:48:58 +0000
ROA not before: Mon 19 Dec 2022 16:43:58 +0000
ROA not after: Mon 18 Dec 2023 16:48:58 +0000
asID: 203
IP address blocks: 168.195.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:ad:dd:00:2d:fd:cc:c4:5b:12:f4:8a:b6:20:b8:de:a0:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Validity
Not Before: Dec 19 16:43:58 2022 GMT
Not After : Dec 18 16:48:58 2023 GMT
Subject: CN=2647F6B44B6148D8F7761C18093C6EC783388ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:7f:f3:44:d2:35:f4:6f:ee:7e:c4:a0:83:
9f:f0:fc:4a:1d:d7:23:1f:59:3c:42:f0:8b:ea:ec:
8d:ce:5a:2b:fe:98:75:16:7f:8a:30:fa:c4:c0:c4:
fb:d9:e9:23:03:ff:a3:80:cf:7d:fc:23:ef:25:af:
9a:51:44:e7:a9:a4:69:57:f9:4a:8b:44:07:d9:b2:
17:9c:cf:14:45:c1:89:74:45:b4:8b:93:9d:bb:ac:
f2:85:9f:d3:ce:45:2a:9c:4f:c4:5c:44:9b:1b:0c:
60:a0:f9:e1:fa:cf:c5:18:96:35:f7:5d:a5:b9:ee:
45:d4:12:2e:58:34:29:df:2d:d8:f5:2a:58:62:9b:
af:c8:d2:c7:a8:bf:48:3a:a0:1e:95:97:1c:56:01:
98:15:3e:86:8e:d8:9c:46:6e:9c:61:2a:e1:cc:ec:
d3:23:9c:3f:c7:1d:a2:1d:95:d9:1b:a4:f1:ba:7b:
4b:c4:3f:49:17:55:ca:2a:d4:c2:f0:c2:ae:dd:e5:
72:ac:f6:8d:98:57:10:fb:78:b3:f2:bf:b4:ee:df:
cc:69:7c:23:51:47:c6:1c:0e:17:00:2d:e1:3f:25:
75:39:7a:32:25:ed:5d:79:27:92:4c:ff:57:12:c1:
1a:32:6c:d1:c3:2c:50:61:33:08:5e:0d:46:a1:68:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:F6:B4:4B:61:48:D8:F7:76:1C:18:09:3C:6E:C7:83:38:8E:D7
X509v3 Authority Key Identifier:
keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3136382e3139352e3131322e302f32322d3232203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:69:a5:1b:3d:73:61:7b:45:c0:d2:32:6e:10:2f:7b:16:7c:
b1:9a:45:bc:a3:41:5e:5f:88:d7:22:1e:8d:4d:cb:fc:ba:92:
8c:dc:ee:12:e9:0d:3c:a0:f1:47:9b:4a:e3:37:6a:70:79:f4:
df:66:75:ce:8a:e3:64:2b:31:7c:ae:b4:56:56:ec:85:5e:96:
a6:19:93:88:fe:92:9d:7c:c3:b3:b4:d6:7d:be:88:32:98:35:
53:18:51:74:5c:71:e7:15:e1:37:91:6e:78:a1:e9:89:60:28:
f0:17:fa:d5:5c:fb:56:13:70:93:63:14:eb:f0:22:14:0e:cc:
7f:94:58:2a:5d:78:39:15:d2:7f:02:e2:2d:cc:ce:da:ed:3e:
9a:a9:50:23:0c:63:59:34:d7:89:a6:ca:10:a5:58:a9:9f:ae:
aa:09:86:eb:f5:45:fa:3d:36:d3:9c:df:7c:58:a8:c8:e5:a5:
4f:e5:59:3c:02:02:07:5d:b4:90:22:51:77:1e:ef:66:f9:94:
70:1b:60:0a:d9:81:cf:c2:d1:15:1a:bc:28:88:42:b8:f8:6e:
2b:16:9e:c6:36:a1:cf:cf:31:c3:d4:52:3e:b0:4f:cc:35:be:
87:cd:9d:9f:57:dc:e9:e7:b8:ab:6c:2a:22:4c:5e:5f:38:dc:
4d:eb:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 00:28:42 2025 by rpki-client