Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa
File: 3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier: K4BU7GEgHjBF2doG1ofX2ZacWOgUMDp5Se/oO0leL5Y=
Subject key identifier: CE:ED:2B:8C:42:17:70:EE:B4:06:46:70:7E:EF:E6:97:28:7A:A6:52
Certificate issuer: /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial: 01894A7A4E92AC9B9129E409C5527A2A3DB08C47
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa
Signing time: Fri 28 Feb 2025 12:52:09 +0000
ROA not before: Fri 28 Feb 2025 12:47:09 +0000
ROA not after: Fri 27 Feb 2026 12:52:09 +0000
asID: 268786
IP address blocks: 168.196.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:7a:4e:92:ac:9b:91:29:e4:09:c5:52:7a:2a:3d:b0:8c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Validity
Not Before: Feb 28 12:47:09 2025 GMT
Not After : Feb 27 12:52:09 2026 GMT
Subject: CN=CEED2B8C421770EEB40646707EEFE697287AA652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:d9:c9:da:5e:7f:11:c3:b7:16:b2:15:5b:
eb:27:84:3b:29:07:60:c5:23:16:e4:d8:e1:6d:18:
d7:72:a0:5b:b6:d1:f5:6f:43:2c:e0:47:79:c8:d5:
2a:b2:14:9b:82:47:0a:73:55:0e:e0:49:b9:30:b3:
ca:01:8d:eb:9d:46:8f:6d:e1:32:5e:3f:31:6a:56:
e7:9d:62:47:b3:a9:c6:cd:18:a3:2a:f1:87:1f:4d:
33:93:02:78:e7:f9:3e:a0:fc:5f:24:ea:04:49:ab:
23:ac:cd:63:a4:10:07:12:8c:80:20:bd:3c:3c:77:
68:79:eb:01:80:31:36:ec:d8:8c:63:5d:92:d8:24:
a7:20:6a:e3:a9:48:f6:6f:94:67:79:b1:55:79:ab:
cc:3e:96:0b:72:de:66:db:41:36:0d:d0:79:9a:04:
2a:e4:f8:a5:17:1c:50:ae:cc:9b:65:48:0f:6e:27:
e8:54:9d:f4:ec:dd:c9:e6:43:90:88:57:d0:9d:26:
b1:8a:7a:00:f5:03:59:12:96:ac:b8:b6:e4:c1:9c:
c0:4b:af:3c:f3:39:c4:e6:54:b9:3a:5d:6c:07:84:
bf:70:29:d9:74:62:43:78:b4:31:c7:3f:8f:09:74:
51:8d:e8:1f:7e:41:69:b4:8e:a3:4c:fc:d4:0d:cd:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:2B:8C:42:17:70:EE:B4:06:46:70:7E:EF:E6:97:28:7A:A6:52
X509v3 Authority Key Identifier:
keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230372e302f32342d3234203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dd:c7:57:ce:4e:0d:ee:4b:42:30:22:79:4a:c0:d0:ea:ee:
32:65:03:9c:34:cb:4d:b6:f7:b6:f6:14:ba:d5:3f:05:2c:14:
d6:69:ba:9a:72:fe:37:0c:1b:cd:7b:21:69:45:4b:30:64:2a:
57:c9:6c:a4:ab:16:a3:a7:9e:1f:6a:77:c5:aa:1d:99:a1:5f:
86:dc:79:7a:c3:cd:5b:f8:00:64:bd:c1:da:89:78:c1:3f:46:
30:9f:72:5a:c2:61:86:7f:1f:99:53:90:ee:d5:14:d4:0e:e3:
9d:4f:d7:0e:30:ce:b6:6d:59:39:8b:b3:6a:92:56:6d:60:40:
24:9c:a7:cb:35:7e:ac:0d:9f:c7:1b:0b:4c:7d:f0:38:5e:3e:
64:11:4c:63:d1:cd:0f:00:7a:8a:31:0e:6b:86:a4:b8:c9:40:
c9:a7:53:eb:f5:38:e5:96:ab:c9:1f:d5:eb:a2:f6:39:c2:6e:
d2:13:a3:df:57:39:5b:6f:fb:df:76:57:70:39:90:86:f5:1d:
c7:a1:4b:60:3f:b5:da:75:af:cc:1f:c4:77:72:9c:26:f9:bd:
7c:37:f7:23:15:06:0d:3a:03:8a:79:86:3e:ff:57:b6:f1:c1:
d4:74:f7:90:b7:94:1b:a6:d8:25:56:8e:8a:7f:44:33:df:9f:
7b:f4:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:12:12 2025 by rpki-client