Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3232203d3e20323634303838.roa
File: 3134332e3230382e342e302f32322d3232203d3e20323634303838.roa (raw, json)
Hash identifier: 4OEbXJNJifkn4eDEQYpOFNIJYNA0D7ACRimyjnQOSzQ=
Subject key identifier: 65:43:86:4E:05:C4:80:D6:34:F2:5B:18:35:12:E4:CB:57:92:A7:68
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 280858C20782B89B0256BE7A9ADF690790DD20E8
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3232203d3e20323634303838.roa
Signing time: Tue 01 Apr 2025 13:13:26 +0000
ROA not before: Tue 01 Apr 2025 13:08:26 +0000
ROA not after: Tue 31 Mar 2026 13:13:26 +0000
asID: 264088
IP address blocks: 143.208.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:08:58:c2:07:82:b8:9b:02:56:be:7a:9a:df:69:07:90:dd:20:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:26 2025 GMT
Not After : Mar 31 13:13:26 2026 GMT
Subject: CN=6543864E05C480D634F25B183512E4CB5792A768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:00:de:cd:42:fb:57:bd:c0:8f:7d:22:82:
48:da:eb:f7:c7:bd:e7:a9:31:3e:0e:cc:5e:0f:c4:
14:00:47:2c:1f:81:bc:3f:56:2c:f6:eb:8a:54:81:
1c:92:7d:b8:a9:1f:54:38:ce:7e:c4:d3:f5:0b:28:
3d:bd:1f:00:de:b6:88:dc:b9:9d:55:31:54:a0:99:
3a:59:aa:dc:f7:29:19:f4:5b:90:71:9e:2e:69:10:
01:22:e2:bf:6e:d5:9a:c4:21:c8:76:5a:11:02:32:
20:05:0a:4b:16:28:8f:6b:5e:84:f3:84:12:3f:89:
cd:c1:81:00:fc:24:99:d1:db:be:0d:67:7d:9b:3e:
eb:54:9b:72:6c:12:7c:55:a3:e9:33:df:67:27:8e:
42:89:2e:18:ee:a6:b0:89:82:48:dd:8e:84:e3:38:
8f:57:26:94:86:66:de:a9:36:38:d9:0e:93:0d:a8:
95:73:81:74:5c:db:50:a1:b1:6e:ff:78:40:f5:3f:
5e:49:22:26:ab:02:60:b8:c3:95:d2:74:6a:0a:f3:
f8:de:35:26:c9:97:41:0b:b6:76:da:99:da:70:80:
d7:0a:24:6b:7b:2e:87:ef:53:a8:23:7c:4b:66:57:
94:09:63:32:4b:67:2e:8f:91:37:3b:d6:a2:4d:41:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:86:4E:05:C4:80:D6:34:F2:5B:18:35:12:E4:CB:57:92:A7:68
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3232203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.4.0/22
Signature Algorithm: sha256WithRSAEncryption
54:a7:25:d8:cb:54:c0:3b:96:cd:f4:7b:85:4c:a2:42:32:d2:
51:3b:02:21:57:1e:66:4c:5f:14:4a:9a:31:0b:af:7f:e8:47:
e6:7d:39:57:7b:1b:88:07:ba:c2:33:55:82:86:05:53:37:46:
8d:2d:41:4e:d4:25:a2:27:41:dc:96:49:6c:50:fd:87:45:19:
78:66:27:c1:49:4b:5d:ef:e8:13:05:71:f9:c1:f8:d7:ae:57:
16:7f:af:c5:40:77:43:b3:d4:3e:ca:ea:a0:62:94:65:58:75:
c7:f9:45:4d:63:78:13:2e:f0:e0:4b:79:d4:fc:83:0d:4b:9a:
6d:28:46:85:09:78:ba:48:65:87:ab:8d:d4:38:42:a8:88:de:
75:56:e6:a7:9b:2d:d8:d7:51:d4:09:81:0b:38:f8:4b:18:86:
c8:05:06:fe:77:bf:20:92:62:bd:18:dd:cd:59:16:d9:53:e7:
b9:48:a6:cc:35:7f:eb:2e:b1:1e:3b:57:c9:4c:40:72:8b:71:
ff:36:2d:ae:9e:66:d1:7f:42:95:69:4a:de:ab:1d:ca:44:35:
ed:61:00:6e:d6:8d:d1:6c:0f:62:51:2d:39:58:b6:b5:fa:89:
bc:30:62:61:bb:65:ce:4c:f7:00:c2:c3:6c:10:6e:4c:1b:f7:
6d:4b:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:37:43 2025 by rpki-client