Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134362e302f32342d3234203d3e20323730373034.roa
File: 3138392e3132372e3134362e302f32342d3234203d3e20323730373034.roa (raw, json)
Hash identifier: BgqojGnhAcW+VI4Pz/gdnTQWDpCF3vYZ6Aie1Ik4K1g=
Subject key identifier: 8B:53:F4:98:40:39:25:86:8C:5C:E1:FD:0F:08:25:6B:D7:04:BA:F5
Certificate issuer: /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial: 591CBFCECB883CB7D6556C3C33EDBEE91AD3689A
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134362e302f32342d3234203d3e20323730373034.roa
Signing time: Tue 20 May 2025 18:39:13 +0000
ROA not before: Tue 20 May 2025 18:34:13 +0000
ROA not after: Tue 19 May 2026 18:39:13 +0000
asID: 270704
IP address blocks: 189.127.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1c:bf:ce:cb:88:3c:b7:d6:55:6c:3c:33:ed:be:e9:1a:d3:68:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Validity
Not Before: May 20 18:34:13 2025 GMT
Not After : May 19 18:39:13 2026 GMT
Subject: CN=8B53F498403925868C5CE1FD0F08256BD704BAF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:44:c8:0c:e7:47:28:58:8c:ca:81:1b:a9:
d0:f4:0c:a1:ed:dc:e4:a2:bc:c5:52:93:a4:f9:3b:
e7:ad:cd:27:00:c0:31:82:be:2a:d3:b7:aa:61:df:
02:62:09:a3:87:21:34:05:a5:e9:bc:cf:2a:f5:b6:
0d:b9:82:f8:67:a2:3f:06:da:e4:7a:17:37:10:ee:
f5:b3:dd:57:f1:9d:a4:47:11:a2:09:91:bc:c1:00:
89:01:03:57:0f:99:94:be:02:9d:d8:3e:93:62:39:
9d:50:c1:dd:44:1a:ff:03:4a:e7:1f:4f:70:99:7c:
8e:f6:b5:40:47:14:59:95:e8:9a:2d:b0:ee:46:ab:
71:d5:a3:2c:9b:5a:2d:92:f5:aa:a7:c4:2e:1f:99:
91:b8:63:98:61:c9:2b:23:5d:14:70:60:36:5c:e1:
c2:1a:85:02:ba:cf:c1:a8:ab:48:4d:e1:09:96:a8:
5d:01:cb:9e:8d:c7:19:6c:0b:8c:f9:01:38:fc:bf:
ce:22:53:72:c1:9b:af:be:54:ac:08:1b:71:fe:0d:
4e:68:79:d9:f8:18:b3:4c:89:95:9c:3c:a2:f5:72:
dd:9a:f9:c3:c9:20:e0:42:d4:85:00:02:db:ea:d2:
84:66:a9:1a:08:fc:27:14:60:ae:80:6f:5a:f5:f1:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:F4:98:40:39:25:86:8C:5C:E1:FD:0F:08:25:6B:D7:04:BA:F5
X509v3 Authority Key Identifier:
keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134362e302f32342d3234203d3e20323730373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.127.146.0/24
Signature Algorithm: sha256WithRSAEncryption
61:34:bc:14:ae:cf:05:86:9f:a1:f4:4e:3c:7c:f2:79:bc:19:
dc:dd:30:6a:2b:ac:f6:41:20:49:26:0b:17:46:84:1d:96:87:
f0:43:30:7c:e0:4e:aa:86:e5:fa:c5:eb:23:b8:00:c5:ed:9f:
8d:e4:3c:f5:48:53:55:63:16:76:b3:2d:43:51:ed:8c:22:4b:
df:d0:44:8a:82:f4:a5:78:77:0e:28:ff:bd:43:b1:a4:1e:b8:
43:87:93:e6:8f:d5:30:60:b7:45:2f:d5:ce:18:c6:e0:71:22:
39:96:53:3b:aa:e0:ec:ef:7f:b3:99:b1:e9:61:9a:fc:cd:01:
af:26:1a:d1:dc:a7:c1:33:a6:14:54:63:93:3f:3a:67:54:e7:
e1:e3:d7:ba:84:ff:a3:2e:df:6d:fa:9d:bb:db:f4:d9:52:41:
2b:02:e4:80:15:7d:84:cb:2c:31:f6:11:ed:90:7f:04:b2:75:
f6:3c:e8:88:ba:d2:2c:18:df:a5:62:21:af:39:5a:d3:e4:cd:
7a:b2:e1:2a:54:40:cc:11:74:e4:b6:05:4e:15:47:7b:b4:e5:
b3:b2:6d:26:20:81:9a:b5:33:36:f0:8f:9c:3b:38:ec:00:a8:
fc:4d:27:25:98:02:4b:ff:41:4a:bf:5e:9b:ab:be:83:e0:a1:
9c:9b:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:21:22 2025 by rpki-client