Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32332d3233203d3e20323634303838.roa
File: 3134332e3230382e362e302f32332d3233203d3e20323634303838.roa (raw, json)
Hash identifier: Mc/2uUMDlYW9g6SuJ63ENPLHVEF4BeIV/bjbs1mGQmk=
Subject key identifier: 98:9F:EF:AA:26:A1:D5:28:FA:24:B4:B9:25:DC:57:95:48:64:F1:61
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 49551E76FE495B56A6C2367840EA39408B97AD14
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32332d3233203d3e20323634303838.roa
Signing time: Tue 01 Apr 2025 13:13:33 +0000
ROA not before: Tue 01 Apr 2025 13:08:33 +0000
ROA not after: Tue 31 Mar 2026 13:13:33 +0000
asID: 264088
IP address blocks: 143.208.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:55:1e:76:fe:49:5b:56:a6:c2:36:78:40:ea:39:40:8b:97:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:33 2025 GMT
Not After : Mar 31 13:13:33 2026 GMT
Subject: CN=989FEFAA26A1D528FA24B4B925DC57954864F161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:da:1e:9e:b3:56:3a:0b:5a:a3:1d:62:a9:
48:ed:78:b5:80:d6:5d:2b:f1:eb:64:b3:91:77:37:
27:60:db:d5:ff:bb:1e:19:42:4b:74:d9:f4:49:c7:
dc:03:d3:dd:f7:cf:29:bd:8e:e6:85:68:35:83:96:
95:22:ea:c9:55:3d:83:3c:03:e2:b9:16:a4:b4:45:
de:35:95:95:d6:95:c3:12:c5:66:b7:e5:48:19:14:
96:f2:8e:6d:af:61:01:50:a6:7e:9d:d1:1d:70:76:
1a:93:be:93:58:bc:85:44:9a:15:50:fc:9b:8e:8a:
88:36:29:2b:1b:a1:e6:dd:70:57:24:8d:47:97:e4:
32:a3:bb:f7:96:e9:65:15:18:3d:79:89:2b:6f:69:
79:35:5f:e2:da:42:f6:d7:4d:95:f7:93:8b:91:35:
fd:2a:de:6d:57:7a:df:97:14:9c:e8:1d:01:a5:aa:
46:d1:2a:93:14:79:71:e7:ed:b1:aa:dd:4d:63:94:
0a:8c:c4:c0:fc:f2:f0:8b:ec:9b:1e:9c:6f:d9:03:
2a:4d:26:31:f4:4b:b6:b1:22:8a:52:5c:8a:85:20:
05:24:71:b0:79:b6:5c:19:c4:16:c5:3c:cf:5e:08:
00:ec:6d:7d:bb:cd:83:6d:80:40:39:70:06:91:f8:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:EF:AA:26:A1:D5:28:FA:24:B4:B9:25:DC:57:95:48:64:F1:61
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32332d3233203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:2b:f3:9e:98:d9:05:c4:bc:a0:1e:fc:20:dc:af:fa:34:64:
c2:3f:e0:f0:2a:07:0c:fd:45:e7:1b:70:07:51:3d:1f:57:5d:
d3:8c:c3:89:de:d7:31:9c:47:16:d7:bf:4f:cc:86:cc:0a:0a:
9f:f1:b6:f3:b3:61:72:78:bf:6e:86:ef:eb:d7:a6:22:36:ae:
26:9d:d3:5d:c0:b6:bf:08:bb:24:d1:37:12:29:44:01:ec:3c:
89:05:e9:2a:25:3e:40:9c:25:72:45:69:37:10:c3:3f:5e:a2:
ab:42:12:eb:d3:f4:76:14:c9:fd:82:05:01:85:37:ba:c6:b3:
bf:0d:4d:57:44:92:16:12:e0:29:83:83:55:2f:20:b6:8c:64:
b1:90:ea:07:75:0c:c6:61:a5:fe:c9:63:e7:2f:81:54:9d:2f:
17:78:61:72:b5:61:42:8a:51:81:73:5f:13:72:f2:48:1e:ff:
a1:f3:43:f0:70:c0:68:fb:e6:d5:d3:ec:92:02:98:2a:7f:f1:
f6:ef:f2:77:69:e1:63:5f:91:44:9f:6b:80:b1:33:8f:6f:7e:
c0:20:4d:d7:2f:b0:15:79:10:f6:2e:b7:e4:a5:f6:69:d8:f1:
fa:48:8a:3c:f8:07:04:95:cc:80:15:33:bb:7c:c2:8e:9a:e8:
66:d0:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:32:12 2025 by rpki-client