Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
File: 3133312e37322e34342e302f32322d3332203d3e203631373132.roa (raw, json)
Hash identifier: ithxhFwEmvME49t5xtLI+y1wZJUp65fkfsFnYbGpQiY=
Subject key identifier: C8:2F:C2:66:D2:6C:22:8B:6C:3E:2C:EE:79:8F:D8:E9:A0:93:E1:B7
Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial: 278FE01E0058BED3A36D5C04A53EF5C30C9F63E7
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
Signing time: Sat 01 Mar 2025 12:39:25 +0000
ROA not before: Sat 01 Mar 2025 12:34:25 +0000
ROA not after: Sat 28 Feb 2026 12:39:25 +0000
asID: 61712
IP address blocks: 131.72.44.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8f:e0:1e:00:58:be:d3:a3:6d:5c:04:a5:3e:f5:c3:0c:9f:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Validity
Not Before: Mar 1 12:34:25 2025 GMT
Not After : Feb 28 12:39:25 2026 GMT
Subject: CN=C82FC266D26C228B6C3E2CEE798FD8E9A093E1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:ce:1a:7b:55:fc:e6:15:0d:90:de:59:3d:
d3:83:0b:90:b0:d3:c5:dd:01:ce:2b:ce:05:e7:8d:
9d:b7:80:c9:a1:b6:15:23:5b:4c:2b:fd:9d:f1:6e:
a0:ec:ec:5b:86:69:6e:a4:88:6c:ae:e5:e1:27:2d:
95:ee:1c:59:76:43:95:0b:02:b5:99:a9:c0:e0:41:
56:7e:bb:98:f9:77:68:08:0b:26:39:8a:bb:7b:f1:
ac:4d:b1:96:4d:80:05:95:56:85:d5:1b:22:e9:ad:
0d:44:89:1c:de:da:2e:09:a0:5a:3e:58:5d:16:6d:
39:93:29:57:2e:d2:c8:92:bd:25:7f:62:35:fc:d9:
e4:27:35:e9:02:69:9f:f7:54:8b:60:92:bf:92:0b:
82:f1:57:66:aa:f8:04:7f:89:8e:08:d4:69:ab:5f:
b0:04:b6:72:e3:3d:7c:78:b9:05:6c:47:73:b8:b2:
b1:4f:5f:d9:e4:9f:41:db:9e:9e:6a:1f:28:08:49:
9d:c0:5e:dc:5c:57:89:b4:5c:67:7f:3e:06:15:e4:
e9:99:81:4a:63:24:76:6a:7e:8e:51:8d:e0:ef:87:
d5:74:71:77:76:47:bf:f4:66:a5:c1:63:61:95:4a:
9f:f3:06:9c:84:72:da:9f:be:6d:21:e5:f1:e8:66:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2F:C2:66:D2:6C:22:8B:6C:3E:2C:EE:79:8F:D8:E9:A0:93:E1:B7
X509v3 Authority Key Identifier:
keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.44.0/22
Signature Algorithm: sha256WithRSAEncryption
40:5d:05:c9:b4:b7:22:69:cd:bf:51:f1:8d:d6:23:2a:50:1f:
4b:30:9c:2f:a4:ad:02:28:f2:bf:5b:c5:79:f8:5a:04:80:66:
65:d4:e9:c8:35:e7:7e:21:80:9d:82:39:d7:34:59:4a:69:bc:
3d:72:a8:68:2e:d5:cc:cf:33:54:cf:6d:f6:61:2b:dd:38:f0:
60:97:4b:b5:3a:90:27:81:7f:d7:0f:45:f3:4f:fb:75:db:8c:
dc:a3:df:5e:47:a3:a9:22:7e:10:ee:be:1d:ae:32:84:e7:0a:
e2:ee:88:3e:db:db:e4:93:77:45:8c:15:50:93:0d:65:cd:0e:
aa:51:c8:ca:ed:bb:6e:eb:84:6c:8f:05:32:14:d4:99:10:46:
06:89:1a:bd:8f:27:71:01:7b:99:b4:6e:cc:7a:90:a9:32:fd:
41:61:8b:84:09:08:41:67:24:95:59:8c:7b:92:79:3a:ec:4f:
62:4a:9e:37:d8:6d:b6:00:96:bc:e1:03:6c:a1:97:05:c5:b4:
ff:2c:f2:1a:9a:e4:0b:a5:9d:dc:9c:54:05:9d:1a:62:43:ba:
a5:12:dc:56:80:03:8c:d9:71:dd:27:89:b9:c7:4f:89:8a:a5:
12:a5:20:ae:7a:cf:d3:de:06:eb:e9:5a:3d:b5:2c:82:10:63:
5b:6b:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:19:49 2025 by rpki-client