Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa
File: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (raw, json)
Hash identifier: hK0RvLcyNSgCl0OefYmupkPtIV86pZQUVOqr/p0l17w=
Subject key identifier: A8:5E:BA:B8:D4:26:52:26:28:B5:78:F0:69:AF:C1:C3:FC:C1:B3:BA
Certificate issuer: /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial: 04B6E5E264B00DE5BD38F1748C3E415B11662D3D
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa
Signing time: Thu 06 Mar 2025 10:07:43 +0000
ROA not before: Thu 06 Mar 2025 10:02:43 +0000
ROA not after: Thu 05 Mar 2026 10:07:43 +0000
asID: 270370
IP address blocks: 190.89.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b6:e5:e2:64:b0:0d:e5:bd:38:f1:74:8c:3e:41:5b:11:66:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Validity
Not Before: Mar 6 10:02:43 2025 GMT
Not After : Mar 5 10:07:43 2026 GMT
Subject: CN=A85EBAB8D426522628B578F069AFC1C3FCC1B3BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:da:27:4f:ca:0b:8d:60:81:ec:0d:8b:02:
88:8d:ae:22:12:e8:b1:e8:31:fc:92:0a:b6:e0:45:
ae:27:dc:f7:a4:4c:96:6e:7c:eb:4f:d6:5d:14:6f:
d2:b3:fa:b8:8f:78:1d:7a:82:cb:78:02:c4:51:13:
67:bc:ea:1c:1a:50:cf:3b:cb:d9:91:cd:2b:f5:c3:
6c:d5:1b:15:28:5c:39:b4:5d:fc:fe:67:03:26:05:
f3:85:56:e7:2a:97:b3:06:cd:bc:07:de:49:36:3d:
23:ef:59:b6:9f:4a:06:f9:3d:e9:83:17:8d:5f:f0:
37:4e:ea:56:0a:78:f6:3e:ba:bb:4b:26:e2:a6:08:
8d:2e:b9:2e:80:c1:bd:eb:c4:5b:ed:92:67:ed:06:
83:55:e9:6d:20:52:5b:c8:88:f6:d1:76:09:64:86:
0f:04:1a:14:5b:97:15:71:b9:97:8e:22:e9:8e:2b:
cb:a6:0e:ba:6e:35:60:a0:30:d8:03:40:0b:62:73:
77:ac:1c:33:0d:39:3f:d9:1b:91:c8:c1:7a:a9:db:
95:ac:de:71:f9:b6:cf:b0:a7:44:08:33:fe:23:71:
42:49:05:5d:a2:49:09:05:e5:51:9d:60:03:c1:73:
c1:8a:9e:1f:b4:de:b6:57:92:c7:f2:a6:4d:e3:43:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:BA:B8:D4:26:52:26:28:B5:78:F0:69:AF:C1:C3:FC:C1:B3:BA
X509v3 Authority Key Identifier:
keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.148.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f1:22:ff:60:9d:26:59:c8:ab:df:62:ea:7e:e3:90:60:45:
2c:ee:93:04:1c:1c:27:64:9c:a3:d5:b3:38:4a:ba:46:c5:a4:
08:41:cf:2a:5b:c2:5b:01:e0:62:91:d2:9d:86:72:a1:96:6f:
01:f1:55:67:7f:8a:9f:c5:d1:78:89:c5:f3:4a:7a:de:c4:21:
d9:a9:d5:b2:ff:0a:01:73:51:ef:9a:6e:db:5e:16:a3:87:24:
c9:1d:38:66:d4:1f:fa:33:1b:59:50:3b:45:09:9f:ea:4b:38:
46:6b:6a:14:5d:fd:65:00:8c:b7:17:65:63:bf:aa:21:f1:c1:
28:33:0a:c7:c8:04:f5:95:8e:77:5a:96:7e:63:8e:2e:4b:31:
a2:c9:4d:10:a9:a9:63:23:43:bc:06:5e:3f:a5:ef:02:2d:71:
99:c7:a9:36:fc:99:9e:38:76:b5:da:44:94:6e:3b:ec:61:75:
f8:8a:d5:bf:89:ed:3a:e0:9f:d6:59:d6:92:3c:f8:af:f6:55:
89:d2:a7:93:17:1d:3b:e5:7b:5d:7e:e3:17:33:0d:66:a2:74:
d4:7e:c6:2e:e1:18:17:8a:28:60:ea:1a:41:75:9d:21:c5:2f:
be:6f:c6:a3:56:a0:50:00:ca:00:96:29:80:83:e3:0e:b7:d0:
c0:55:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:46:51 2025 by rpki-client