Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
File: 3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier: Q9mTEASeMsojoL2Mo+4Z3RPuIryvmmxh0A4Wepgd3jo=
Subject key identifier: A2:B5:66:43:5F:09:4B:B7:BE:13:6C:1E:35:27:F0:1B:DD:19:6D:AA
Certificate issuer: /CN=84952BD36EF412E113A81649D3C5602505743767
Certificate serial: 63424CA9A77736D3365BC339CDBA34500577910E
Authority key identifier: 84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
Signing time: Tue 18 Mar 2025 11:22:31 +0000
ROA not before: Tue 18 Mar 2025 11:17:31 +0000
ROA not after: Tue 17 Mar 2026 11:22:31 +0000
asID: 262669
IP address blocks: 143.202.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:42:4c:a9:a7:77:36:d3:36:5b:c3:39:cd:ba:34:50:05:77:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84952BD36EF412E113A81649D3C5602505743767
Validity
Not Before: Mar 18 11:17:31 2025 GMT
Not After : Mar 17 11:22:31 2026 GMT
Subject: CN=A2B566435F094BB7BE136C1E3527F01BDD196DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:08:9d:c1:c9:ee:ff:4d:b6:03:fc:52:9f:
ac:08:9e:37:a5:ad:7d:5a:ab:ff:87:96:ed:ff:be:
90:4e:af:e1:69:d8:d7:64:cc:c8:f8:c7:ec:fe:44:
cb:52:af:75:21:be:b2:b1:8c:af:c5:59:8b:bb:f7:
47:93:e5:0b:f4:80:95:fa:08:d8:9a:37:36:34:0d:
6b:f6:62:bb:70:30:f7:4a:d1:b8:12:be:bf:ba:6e:
25:65:54:64:d8:15:24:72:1d:5e:0f:c2:7e:ef:7f:
58:ad:9e:43:d4:7e:e4:b3:b1:0a:1a:a1:02:ab:76:
cf:5d:57:85:0b:bc:c3:6c:95:b7:78:de:09:14:cd:
6b:fc:f5:63:8f:a2:22:c5:65:55:ae:0d:98:a9:8d:
00:14:77:9a:11:0f:42:35:67:25:4c:35:90:bf:ae:
6b:49:d4:a3:e0:cc:50:f1:16:9b:b4:78:92:5e:fe:
9f:ec:57:70:b4:74:70:a1:b3:41:a6:3d:3e:97:8f:
cc:3e:dc:2c:65:26:2b:50:fc:ff:43:1a:ad:cf:4c:
3f:bd:e8:7d:d9:dd:93:ab:04:de:49:5e:f3:dc:e3:
53:70:1d:ec:7f:5b:81:96:4d:0c:d9:1e:b5:b4:2c:
74:81:37:a4:c7:63:2e:36:75:e8:43:3a:46:b6:99:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B5:66:43:5F:09:4B:B7:BE:13:6C:1E:35:27:F0:1B:DD:19:6D:AA
X509v3 Authority Key Identifier:
keyid:84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/84952BD36EF412E113A81649D3C5602505743767.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.148.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:1c:0b:0c:20:3a:b6:50:51:2d:46:7c:38:1f:bf:04:c5:99:
08:36:2e:0f:ec:14:b1:d3:fa:6e:da:84:4d:04:e1:96:9a:e1:
c1:a0:7e:78:6c:53:56:01:1b:47:6b:4a:cd:92:b1:c1:1b:38:
db:c1:9a:f9:c9:1e:8b:50:eb:89:b3:86:25:a3:f7:9d:10:2f:
bd:a4:7a:66:79:42:f0:75:1b:cd:3e:c3:f7:6f:11:ae:7e:87:
ae:6b:4d:6b:d3:b3:72:a4:55:d2:b1:39:97:73:b4:63:4a:47:
2c:25:5c:85:f7:e2:30:8b:9f:28:5e:b3:0c:9f:dc:6e:d7:3f:
d7:1c:47:e8:d3:8b:0d:bb:f4:a8:5b:92:a5:56:30:6b:2d:37:
49:0e:66:8d:df:f4:60:b1:64:ce:30:eb:fa:9a:02:f9:4e:8a:
eb:46:03:c5:bb:8c:6e:b0:2b:c1:fe:51:24:37:6c:1d:cb:75:
7b:41:4a:e4:a9:c1:86:6b:d2:e7:2a:5b:f2:93:fc:2b:5d:14:
ff:22:0e:01:73:76:4f:50:e9:1c:05:d5:99:32:8a:f9:c2:7a:
23:7a:14:bd:32:fc:d0:48:f1:58:1f:38:a5:ea:b5:ce:eb:0b:
99:62:7e:73:34:f7:85:7f:48:4c:cd:9e:67:c1:62:70:e7:d3:
93:86:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:29:10 2025 by rpki-client