Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa
File: 3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa (raw, json)
Hash identifier: 0jeyZaMYCuJa0mo6X22GqFo/7WHGaW0s53Cy+GL5hoA=
Subject key identifier: EE:70:9F:85:84:1E:30:D8:46:10:09:9E:B3:1D:69:81:98:BB:C4:4B
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 4C3F0A1EC60055A93C291B13941954C80DFC9A2E
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa
Signing time: Wed 05 Mar 2025 19:00:03 +0000
ROA not before: Wed 05 Mar 2025 18:55:03 +0000
ROA not after: Wed 04 Mar 2026 19:00:03 +0000
asID: 61888
IP address blocks: 186.235.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3f:0a:1e:c6:00:55:a9:3c:29:1b:13:94:19:54:c8:0d:fc:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Mar 5 18:55:03 2025 GMT
Not After : Mar 4 19:00:03 2026 GMT
Subject: CN=EE709F85841E30D84610099EB31D698198BBC44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:f5:c8:6a:44:aa:fc:42:6b:f9:72:44:b0:
9b:d8:f8:36:91:54:89:d9:0c:04:e8:0c:e3:fe:12:
e2:84:59:47:3e:4a:46:40:88:ca:7a:a2:02:b7:23:
99:77:18:ab:92:e6:37:d2:90:59:fa:1f:e6:39:f8:
65:db:94:b1:24:8f:ac:ac:6c:59:a7:5d:63:8f:28:
a7:ec:bd:4d:c8:50:d8:37:fd:d6:93:28:c8:37:29:
55:4d:26:47:7c:d2:f6:bf:0c:98:be:15:94:d5:1f:
4f:80:df:58:64:62:7e:f7:f7:30:b7:b7:5a:24:49:
2a:b5:7c:13:d8:ee:e0:6f:cb:d9:8f:ae:51:30:d5:
fe:fa:ca:c8:6f:8a:d3:33:fb:e8:31:47:27:ab:35:
91:bc:38:c1:19:b6:8a:7f:b5:a0:7a:46:3c:51:69:
39:46:6f:86:e8:b6:31:52:d9:f2:38:76:6b:67:18:
c1:97:7d:3a:d6:bc:5e:b1:b1:05:e2:71:7c:a2:4d:
07:da:79:22:7c:61:e2:6d:b3:cd:bf:f2:ef:ff:f3:
71:a1:d0:24:1e:2b:bf:eb:09:05:96:8c:e8:b4:38:
b5:e2:a1:68:06:52:62:ef:35:5e:eb:75:4b:24:d0:
86:b9:cd:b1:a5:e3:cb:81:0a:87:95:dd:ce:a1:a4:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:9F:85:84:1E:30:D8:46:10:09:9E:B3:1D:69:81:98:BB:C4:4B
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.235.190.0/23
Signature Algorithm: sha256WithRSAEncryption
84:b3:91:9a:bc:a7:1a:eb:d4:84:0a:f4:cd:8d:21:c8:fd:31:
2d:10:af:c5:fd:ea:b2:8e:00:36:06:bd:43:b2:d8:7e:25:ff:
fd:e6:70:d9:27:a0:c7:15:d8:af:78:8d:9c:be:9f:c3:2e:1c:
2c:2b:ec:72:06:1d:99:3b:4c:b8:79:99:8c:6a:a9:f9:0b:9c:
ab:5b:c8:c5:34:8e:e6:c4:45:1b:bd:51:27:79:87:f4:b4:c9:
e8:8f:aa:86:3e:d3:88:89:51:21:1a:e0:b9:3b:90:c8:32:bd:
fd:db:3e:b2:f8:eb:2b:22:55:a8:0b:48:e9:bb:94:d3:7c:9a:
35:bd:0d:c3:63:4c:77:80:0b:31:21:79:b5:63:0c:5b:2a:ee:
db:27:2b:b9:ee:bb:32:01:33:27:f3:18:28:b3:1e:27:c8:4d:
b3:4e:69:3c:d5:ac:bd:c4:92:72:6d:47:fd:fb:dd:82:9b:db:
1a:39:f4:c9:ca:cb:08:1b:17:92:ce:83:37:d7:55:ea:54:40:
81:4f:d8:39:bf:6e:f8:9d:b0:a0:1f:4d:0d:6d:da:f6:a9:22:
5c:86:7c:03:56:33:8a:34:2a:80:7b:3a:cd:4e:74:f5:88:f6:
f4:30:d1:11:20:ef:88:3d:61:9e:27:61:3f:4e:4c:67:30:7c:
80:4c:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:25:06 2025 by rpki-client