Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa
File: 3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa (raw, json)
Hash identifier: c5Uy5q+XHC5eKTt2COQuPdxjxYJuOFuuZ2gde9Z8sEs=
Subject key identifier: ED:A9:DC:E1:E1:62:DC:28:6A:AD:28:37:62:83:88:FD:3A:64:9C:7B
Certificate issuer: /CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Certificate serial: 073CC466226E15AAB48C0F98A5BBFB9E0FF682E0
Authority key identifier: 68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa
Signing time: Tue 25 Mar 2025 20:35:38 +0000
ROA not before: Tue 25 Mar 2025 20:30:38 +0000
ROA not after: Tue 24 Mar 2026 20:35:38 +0000
asID: 264862
IP address blocks: 168.181.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3c:c4:66:22:6e:15:aa:b4:8c:0f:98:a5:bb:fb:9e:0f:f6:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Validity
Not Before: Mar 25 20:30:38 2025 GMT
Not After : Mar 24 20:35:38 2026 GMT
Subject: CN=EDA9DCE1E162DC286AAD2837628388FD3A649C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5c:e0:d9:aa:58:7e:a7:ed:b8:c4:1b:54:9d:
e2:f5:6e:fa:47:3c:74:bc:18:04:ca:61:4f:cd:ef:
4a:61:9e:5d:14:37:1a:ea:2b:84:4c:50:85:b5:6b:
7e:83:0d:5d:c5:23:97:f1:2d:5f:b2:7c:d9:33:8e:
00:ad:96:5e:79:8a:6b:37:f0:b0:ba:6a:00:63:65:
fa:38:a9:36:3f:5b:1d:29:50:90:61:72:59:09:9e:
9b:6d:66:ff:0b:48:eb:5b:03:aa:b1:76:42:16:cf:
9b:55:f8:9b:94:8f:d3:fd:3a:c6:a5:85:24:57:00:
9d:42:d8:bd:a3:20:3d:dd:85:3c:78:6c:a4:56:79:
ef:c1:ed:24:e0:be:c3:89:bd:ba:20:35:93:d2:44:
0d:c0:ba:05:5d:1c:77:06:e2:95:b0:0a:d3:85:83:
9b:30:79:e4:d9:f8:ad:8a:70:56:b0:a2:5b:bd:88:
3b:bd:37:17:33:f1:84:2c:86:38:a3:8e:d0:6f:9f:
e6:2f:0a:1d:ca:cd:72:a3:c7:3d:d3:d9:f1:2f:e2:
e7:a3:13:5e:8f:e2:dd:3d:a4:d0:cd:f1:de:9d:df:
d5:d1:4a:f9:da:c1:d9:f4:8f:26:31:5c:f5:a0:73:
f5:0f:9f:de:df:e1:7f:18:17:d8:8e:dc:eb:64:85:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:DC:E1:E1:62:DC:28:6A:AD:28:37:62:83:88:FD:3A:64:9C:7B
X509v3 Authority Key Identifier:
keyid:68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.134.0/23
Signature Algorithm: sha256WithRSAEncryption
85:cf:8a:03:72:81:45:28:49:a0:33:89:d4:be:10:32:d8:fe:
63:b8:3d:6b:1d:65:09:fb:f0:cf:17:ea:18:4c:71:07:e8:8e:
ec:9c:77:dd:de:5f:53:30:17:16:f9:53:5c:f6:8f:c0:c3:3e:
c1:65:fa:2b:8e:a6:18:c8:ff:a2:ab:c6:96:25:9b:9d:0f:5f:
51:eb:1d:21:e7:72:4a:f5:e0:1b:e3:12:df:ac:26:6b:0c:77:
51:9d:1d:16:1c:99:6a:a8:3e:45:79:4e:e3:81:69:b1:f8:93:
0e:bb:8a:6c:31:57:9f:e3:e6:6f:bb:57:b8:20:3a:6e:34:f5:
db:c7:c1:a7:43:4e:d8:a5:4c:da:b9:45:9a:56:59:90:18:cf:
b1:23:0a:d4:42:d2:92:04:7d:a5:18:62:a5:a4:e7:81:0a:46:
26:94:22:0c:b1:d0:1b:80:54:a4:af:a2:4c:0b:b5:fb:8a:61:
c9:a5:21:bf:38:91:67:dd:14:72:9e:0b:4d:83:e9:e4:7a:49:
d6:23:4a:d9:58:b7:67:fb:a6:da:12:9a:54:d1:d0:e5:8b:ed:
fe:ce:f0:7f:b2:b6:1b:dc:c2:96:4a:28:8d:e1:1a:96:5e:81:
0f:2b:ce:e2:3a:71:73:c8:f5:44:0b:71:4d:e0:68:ba:df:ce:
af:21:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net