Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e3130392e36342e302f32322d3232203d3e20323634323238.roa
File: 3139302e3130392e36342e302f32322d3232203d3e20323634323238.roa (raw, json)
Hash identifier: CaKDa9BciNdCQEzKhb/AEjiCdq0i0fgmpanlv7xRLsA=
Subject key identifier: 23:0E:8F:CB:1F:32:1B:B4:58:8D:A5:84:D7:59:B6:65:E4:D3:27:83
Certificate issuer: /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial: 2591CC40107B6B68CA14D40B97BA2C1D091F86B8
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e3130392e36342e302f32322d3232203d3e20323634323238.roa
Signing time: Tue 12 Sep 2023 14:13:52 +0000
ROA not before: Tue 12 Sep 2023 14:08:52 +0000
ROA not after: Tue 10 Sep 2024 14:13:52 +0000
asID: 264228
IP address blocks: 190.109.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:cc:40:10:7b:6b:68:ca:14:d4:0b:97:ba:2c:1d:09:1f:86:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Validity
Not Before: Sep 12 14:08:52 2023 GMT
Not After : Sep 10 14:13:52 2024 GMT
Subject: CN=230E8FCB1F321BB4588DA584D759B665E4D32783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:8c:bd:50:2d:00:b8:6c:04:5c:6d:35:42:
16:76:75:54:b2:df:40:77:fe:65:ec:77:fe:32:38:
76:3a:0c:f6:14:08:71:e4:03:da:d9:7c:51:98:6d:
b3:10:7c:3d:30:79:dd:80:73:a1:99:53:69:fd:1a:
b8:9c:fd:47:c5:e8:4a:a7:7b:6e:31:73:f6:36:c9:
46:24:70:10:07:99:01:09:8e:09:30:29:09:e6:9d:
7d:39:92:94:27:a2:bc:0b:d1:4e:ad:63:68:cd:a2:
e8:28:6b:3c:a6:67:49:12:b9:51:57:8e:ac:9d:84:
25:57:96:2f:c5:08:28:77:96:f3:5d:bb:f8:9d:a6:
37:05:9f:66:02:9a:2c:f5:aa:d1:0d:4c:e3:c3:87:
f9:5b:85:58:dc:cc:f0:42:19:69:e2:67:66:1a:71:
db:70:77:ce:fa:b1:9e:81:95:d3:55:b5:8e:1a:e0:
dd:42:d0:cb:5f:21:ae:6a:f0:a1:d8:55:ea:32:55:
20:da:ec:d0:07:ed:5b:15:8a:fc:b1:29:af:27:78:
61:c0:da:84:ba:bc:4b:bb:89:cc:a5:f1:0f:e9:77:
25:4a:78:0e:d7:76:39:2e:8f:f7:0e:ec:20:3e:31:
ac:09:46:93:8e:f2:83:91:a1:d4:99:7f:9c:ca:e6:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0E:8F:CB:1F:32:1B:B4:58:8D:A5:84:D7:59:B6:65:E4:D3:27:83
X509v3 Authority Key Identifier:
keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e3130392e36342e302f32322d3232203d3e20323634323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.64.0/22
Signature Algorithm: sha256WithRSAEncryption
42:08:25:e2:f8:20:93:7c:f7:fa:26:61:6c:30:b2:fc:01:77:
d5:fc:83:07:7d:b2:f6:d3:70:0c:53:48:8c:82:4a:96:6e:35:
a0:ad:d2:ba:e2:a8:0e:0b:43:ea:f9:1f:bf:9c:45:c5:f4:8c:
63:3e:09:5e:58:84:51:6c:95:f3:e6:bf:94:d9:5b:d1:88:c5:
19:e7:b3:82:60:0b:7f:b8:98:24:87:02:05:23:ae:b1:c2:72:
4e:cc:9b:a0:73:db:b0:09:46:36:d4:d3:a0:26:ca:20:fc:bc:
25:60:6f:a1:41:e9:a4:e1:85:6d:a7:63:d0:d6:70:f2:71:18:
8d:eb:f6:2d:9a:46:f0:ba:c2:f3:d6:f7:ca:d8:73:52:91:63:
3f:7d:f6:4e:4e:0c:1c:23:39:88:fc:85:7f:3c:7b:6f:b6:f9:
40:00:67:3e:05:14:a1:00:64:17:6a:17:e2:c9:f0:66:5e:45:
10:2d:52:29:a2:42:6a:3a:90:7e:f6:db:6e:70:af:ef:5c:84:
63:f5:fa:a0:9c:da:84:79:6c:4a:de:fc:74:46:9e:a1:90:80:
0c:f0:40:ba:f3:be:88:1d:97:ca:36:7c:b6:9b:f1:39:51:96:
64:2b:1a:ee:8e:b9:27:9e:f3:ac:ed:d0:31:a4:e1:89:23:e2:
e0:b1:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:21 2025 by rpki-client