Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
File: 3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier: 5VzUlaflKgw6o6VQHM06HQyybfVzD9ZBaSJMie8WTRs=
Subject key identifier: 7D:4A:24:37:AC:6D:2D:83:30:4C:CB:1D:03:4C:9B:95:39:B8:1E:01
Certificate issuer: /CN=66B03F54D91D92AB0222173C178095462152C2A6
Certificate serial: 417C28849BC0385A9287FAB90DCB0FEB2DAD5096
Authority key identifier: 66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
Signing time: Wed 30 Apr 2025 18:45:37 +0000
ROA not before: Wed 30 Apr 2025 18:40:37 +0000
ROA not after: Wed 29 Apr 2026 18:45:37 +0000
asID: 263360
IP address blocks: 191.37.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7c:28:84:9b:c0:38:5a:92:87:fa:b9:0d:cb:0f:eb:2d:ad:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66B03F54D91D92AB0222173C178095462152C2A6
Validity
Not Before: Apr 30 18:40:37 2025 GMT
Not After : Apr 29 18:45:37 2026 GMT
Subject: CN=7D4A2437AC6D2D83304CCB1D034C9B9539B81E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:56:1d:ea:48:c3:f2:b2:b9:98:69:24:48:
48:0c:5c:bd:14:39:7f:36:58:7b:17:06:ba:b2:a5:
d6:7f:af:69:aa:86:eb:c3:18:ab:7c:ec:d6:01:89:
94:2a:68:d8:b2:9f:d4:9d:5f:66:ff:47:81:04:15:
0a:52:21:9f:83:2b:c9:99:ed:4f:af:d2:a5:6b:7e:
f2:82:4d:72:32:25:96:45:59:13:4f:4f:11:85:14:
3c:4e:b4:d2:93:63:2e:0e:07:ac:a5:81:69:d6:f4:
a2:ee:26:03:37:39:29:70:ca:01:6d:73:07:83:63:
66:4e:65:95:52:8f:1c:55:83:e4:7a:00:7f:bc:3c:
01:4e:c6:ad:4b:a5:51:20:a1:e2:66:b5:d0:80:3f:
b2:3d:0b:41:72:2a:80:2a:95:57:1c:3c:d8:67:04:
c2:7e:bf:9c:d1:7d:d9:5d:bc:a6:61:8e:0f:b0:d8:
54:d5:57:ad:48:3f:b8:a0:8e:bf:14:de:27:93:09:
b1:ef:16:2b:1c:e8:9c:2e:17:0e:f4:a9:ce:e7:10:
18:11:26:1e:aa:65:04:42:9a:86:48:06:cd:77:24:
75:46:f5:0e:4e:06:23:cb:d6:35:9e:79:e9:85:b4:
b2:fe:85:0a:85:31:37:e4:45:e3:d9:d5:08:f4:81:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:24:37:AC:6D:2D:83:30:4C:CB:1D:03:4C:9B:95:39:B8:1E:01
X509v3 Authority Key Identifier:
keyid:66:B0:3F:54:D9:1D:92:AB:02:22:17:3C:17:80:95:46:21:52:C2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/66B03F54D91D92AB0222173C178095462152C2A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B03F54D91D92AB0222173C178095462152C2A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:13:04:d7:fc:f8:34:08:be:5f:9e:a7:c5:e6:4d:05:85:26:
56:49:5e:b0:aa:8f:4e:ee:ce:fb:ae:cb:18:26:dc:80:48:da:
27:1b:03:6d:95:86:b1:2b:60:ca:57:4a:61:1a:43:cd:93:74:
9b:f6:72:1e:3c:e5:a9:0b:e5:c6:67:81:7f:2c:82:a5:79:a0:
c0:d9:14:d1:92:b5:4a:bc:93:ef:40:f0:91:38:37:1b:9e:f9:
f6:70:9b:91:39:ce:f8:fa:a0:73:26:c8:ae:a7:05:b2:1b:52:
91:80:1c:e1:d3:17:d4:7a:cd:f8:7d:76:72:62:45:17:a9:1b:
66:c2:04:03:89:0e:39:87:bc:0d:ac:14:f1:ed:06:e4:ed:74:
94:b5:c1:e8:e0:59:8a:c4:0e:11:3d:23:02:f7:f0:f2:f8:c6:
6f:a7:00:6d:d1:7e:55:23:53:70:9a:11:6f:2d:f9:83:f9:cc:
4f:0a:f3:0a:f2:1e:1b:fa:05:48:ad:ff:a1:e4:09:0f:51:6b:
c8:e7:14:01:2b:29:b0:92:2a:b3:c9:4c:d5:2e:c0:32:40:b8:
4f:ed:bb:dc:b5:b7:d6:a3:a2:77:2c:3c:9f:a2:cd:4b:d4:d6:
c3:c0:61:15:0c:44:fb:6d:fe:53:ef:2f:63:8b:b4:b8:fa:11:
af:31:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:10 2025 by rpki-client