Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
File: 3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier: hULGjVMvy24A6lWA4BXJCgNMfwJ5+zUiNnVjSiJUzug=
Subject key identifier: A3:97:EE:3B:DE:22:4B:87:28:E2:28:10:F2:5D:61:DA:AB:90:09:FC
Certificate issuer: /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial: 109ADE7E70AC977710FF121A2F16C914EA8E0BB5
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 264509
IP address blocks: 132.255.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9a:de:7e:70:ac:97:77:10:ff:12:1a:2f:16:c9:14:ea:8e:0b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:17:9d:8b:a2:ec:c0:17:77:dc:ab:7d:11:
94:49:c2:e5:fd:07:a6:bc:1f:76:ff:2f:d7:37:44:
e0:a0:bf:cd:17:b7:8e:98:01:f7:1d:f9:2e:56:c8:
59:50:37:bf:b9:b7:04:bf:e6:47:dd:b0:b0:61:7e:
fb:3f:30:23:76:4e:e0:7e:7b:6e:ed:c9:1c:cc:e4:
0d:e2:82:0a:cb:66:f6:24:3c:49:ef:82:c1:0d:d5:
b1:e0:e8:55:d6:bc:dd:a7:8a:97:01:6e:84:05:3d:
d6:dd:00:63:85:ee:f9:9d:98:08:33:b9:41:3a:61:
2a:2a:15:f0:e6:fa:af:87:5d:c8:4e:f1:23:cd:05:
4c:82:6f:86:56:95:5f:ab:3e:05:c5:bc:fd:c9:65:
8f:d1:74:2b:63:d5:ca:1e:e2:27:f6:3d:e6:af:63:
45:82:8b:15:53:f3:9d:30:1a:92:57:58:f4:57:93:
5f:df:39:09:b7:51:cf:4c:44:b4:60:ac:bc:5f:e7:
c5:f8:b3:7c:f9:fd:10:d3:51:31:28:ce:74:fe:b9:
26:2e:4b:88:16:4b:16:5b:64:98:7a:40:b4:1c:ca:
fa:d6:c7:3a:88:9b:ea:1e:f8:0b:2b:8d:e0:c3:b4:
f9:c8:fe:7a:09:3b:c6:0d:39:74:e2:d4:68:06:06:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:EE:3B:DE:22:4B:87:28:E2:28:10:F2:5D:61:DA:AB:90:09:FC
X509v3 Authority Key Identifier:
keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f0:54:5d:09:7d:95:0f:8b:88:4c:6d:72:eb:3a:78:06:2e:
03:06:b0:2b:38:9b:fc:49:c2:be:5a:66:b8:b5:4a:95:a3:70:
18:03:3b:39:e7:28:da:32:53:91:33:9e:75:9e:7a:00:c1:98:
f9:2c:45:58:8c:3c:14:55:42:e3:77:8a:25:46:84:76:57:14:
5d:ed:7a:2d:a6:8f:02:ee:b0:59:cd:15:0a:8f:4a:65:71:1b:
34:f9:11:c3:20:bc:b5:e9:81:63:b9:02:68:7c:a5:8c:a3:bd:
a7:28:c5:07:5d:37:9a:75:57:40:f5:ea:05:30:fe:cc:67:d1:
b1:32:05:98:89:2f:98:16:b0:09:fe:26:9a:64:e0:82:b3:07:
ec:14:e3:c8:04:54:cf:ae:d9:dd:ef:42:b2:14:1b:66:ac:2f:
d1:b0:7c:af:bd:e6:fb:30:f9:af:12:5d:d1:a5:52:77:37:30:
25:bf:85:a3:b5:5d:2e:3f:be:1d:6d:78:92:4f:87:b6:7e:6e:
b3:54:92:5a:78:f9:11:ea:05:9b:96:d3:88:33:1c:cb:a9:aa:
19:89:61:bd:a0:96:15:a3:43:52:a4:88:b3:27:06:f5:09:e3:
0c:e1:c4:a0:4b:06:57:e6:c4:7a:32:07:25:04:13:ba:03:0b:
0d:58:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:03 2025 by rpki-client