Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
File: 3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa (raw, json)
Hash identifier: jHX8rKTJIVzH1nDn1ZKmg7Dc/AgHN8F973eXTDMc5Pc=
Subject key identifier: 77:9C:D8:4A:EA:50:8D:94:86:59:22:3C:16:EB:74:78:A4:36:71:2A
Certificate issuer: /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial: 12E67D37DC231C0B831E2F5FC19904DC9FA66851
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
Signing time: Mon 18 Nov 2024 14:45:10 +0000
ROA not before: Mon 18 Nov 2024 14:40:10 +0000
ROA not after: Mon 17 Nov 2025 14:45:10 +0000
asID: 270704
IP address blocks: 189.127.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e6:7d:37:dc:23:1c:0b:83:1e:2f:5f:c1:99:04:dc:9f:a6:68:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Validity
Not Before: Nov 18 14:40:10 2024 GMT
Not After : Nov 17 14:45:10 2025 GMT
Subject: CN=779CD84AEA508D948659223C16EB7478A436712A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:01:f8:d3:5d:55:30:d7:3f:bf:8a:d1:09:
61:13:c8:ba:78:45:31:db:0b:d0:e9:34:20:19:a5:
a6:bf:43:10:97:6d:0e:7d:0c:1d:35:53:72:90:89:
e3:5c:66:80:51:fb:2b:6b:33:68:27:32:44:cc:89:
2e:8d:e7:43:4e:9f:91:fc:a7:04:e4:18:10:03:22:
e8:86:25:ee:5c:cd:9b:fc:00:47:d2:17:fd:83:d0:
78:9f:12:9e:ea:40:a0:d2:1c:04:72:10:99:31:15:
c4:cb:4d:3f:3b:df:c0:28:50:4c:58:b6:09:7e:ef:
79:8c:dd:34:82:67:ef:cd:02:43:8f:53:ac:4c:fb:
2a:fb:e9:81:be:ed:6d:78:d6:48:99:c7:63:a9:a5:
3b:37:ca:b6:92:e3:ef:13:71:40:99:f0:d4:85:c7:
b8:c9:53:bf:69:32:4f:b7:f4:1e:58:a7:42:00:3b:
a8:0c:39:9b:33:2e:69:bd:49:ff:45:b6:bf:5d:1b:
18:87:86:08:dd:24:93:fb:c7:34:64:d3:f5:25:a7:
d9:b4:bc:01:00:65:f0:9e:77:8d:90:7a:c5:be:e2:
67:0e:89:7c:bf:41:5b:bc:a9:b0:f3:39:15:ca:59:
19:13:e9:9e:df:6c:28:c3:c5:a8:a8:a5:21:7b:76:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:D8:4A:EA:50:8D:94:86:59:22:3C:16:EB:74:78:A4:36:71:2A
X509v3 Authority Key Identifier:
keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.145.0/24
Signature Algorithm: sha256WithRSAEncryption
62:58:ba:c2:c4:7d:c8:96:6b:6c:91:69:96:25:33:e7:bd:ae:
70:67:ad:ec:15:50:80:4f:d2:7a:d9:7c:95:8c:c0:0f:06:5f:
62:71:3d:58:6c:02:6e:49:ea:26:9b:e6:e0:91:93:52:a9:02:
14:1b:3b:99:fc:63:9b:78:fb:36:54:35:5b:f7:8a:cc:21:e0:
ee:2a:a3:25:c5:60:55:70:30:ca:1d:d9:4a:51:2b:4c:19:71:
fe:e5:f9:d2:f3:59:b4:0f:91:d3:66:28:6c:e1:8f:d5:1f:30:
96:f2:2e:fc:fb:dc:fa:16:71:87:ed:1b:db:1e:3e:53:bb:dc:
7b:ea:46:a2:1e:37:50:c5:ab:16:36:cf:83:55:5a:80:6a:8e:
3d:3f:9b:cb:dd:36:a6:1f:37:71:d0:73:cf:b2:d7:21:c5:da:
22:f3:97:83:19:d1:9e:5e:d2:5d:be:c5:d3:50:5e:5e:49:c5:
fe:7f:01:d2:51:3f:38:98:12:5f:31:27:a6:be:39:73:94:b7:
76:fd:2b:62:6e:2c:34:7e:fe:da:6e:9c:cd:f3:6d:83:00:75:
c3:3a:03:29:db:ff:22:fc:d6:47:4b:99:67:8c:ce:ed:3a:93:
aa:33:13:3d:fc:50:11:81:70:5c:79:bc:52:6d:e8:f9:f3:e0:
f1:6f:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:57:21 2025 by rpki-client