Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3234382e302f32322d3232203d3e20323636313732.roa
File: 3136302e31392e3234382e302f32322d3232203d3e20323636313732.roa (raw, json)
Hash identifier: zuFJSRGwNPo1tkuKWISReBRx/vbX03nb+vL0l2eDEQA=
Subject key identifier: 35:40:32:D3:1C:CF:9C:65:9B:C4:2D:C8:F9:A2:9A:11:30:A5:43:59
Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Certificate serial: 11B4FA903B547F299E842ECD244533DBD9CF4EC4
Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3234382e302f32322d3232203d3e20323636313732.roa
Signing time: Mon 17 Feb 2025 19:32:50 +0000
ROA not before: Mon 17 Feb 2025 19:27:50 +0000
ROA not after: Mon 16 Feb 2026 19:32:50 +0000
asID: 266172
IP address blocks: 160.19.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b4:fa:90:3b:54:7f:29:9e:84:2e:cd:24:45:33:db:d9:cf:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Validity
Not Before: Feb 17 19:27:50 2025 GMT
Not After : Feb 16 19:32:50 2026 GMT
Subject: CN=354032D31CCF9C659BC42DC8F9A29A1130A54359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:de:09:41:a0:5d:06:33:5e:a7:d7:ab:92:
fb:57:29:fa:0e:26:ba:4a:dc:40:9d:d2:2d:19:2e:
42:fa:02:26:46:f2:13:ce:a4:0d:f0:d0:d4:86:a4:
79:ed:3e:16:a8:c7:1d:05:47:ea:9b:fd:0a:2b:5f:
26:3d:13:2f:5e:70:ec:a9:98:06:f6:6b:f2:d3:47:
20:4c:58:bb:98:ef:95:2d:cb:c6:17:95:30:a6:9c:
cc:79:da:fe:a8:0f:09:26:6c:63:74:63:50:92:4f:
de:87:9b:05:dd:ab:a6:1a:4f:93:a4:1d:09:a4:e9:
e8:af:7f:b2:10:bd:e7:3d:86:d7:a3:eb:e2:36:54:
4d:39:14:9b:33:56:3f:5b:f3:19:d3:46:1b:79:f0:
1b:d9:a2:d2:83:c7:00:e5:87:1e:c6:6a:53:35:d9:
5a:4a:79:d6:82:10:4a:7b:7f:e3:b1:fc:c7:14:ea:
87:ff:2a:3d:80:c4:25:f0:09:29:f1:14:cf:25:99:
21:c7:13:1b:6f:fc:2f:70:d1:f1:61:9b:3d:3c:54:
fb:f5:55:6b:51:c9:bf:65:ab:b4:7f:c3:b4:3d:5a:
26:60:64:e3:ac:9d:0a:44:c5:e9:a7:e2:22:b5:24:
f4:7d:a8:aa:8b:98:8a:f3:7a:ce:8c:81:5f:4f:fc:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:32:D3:1C:CF:9C:65:9B:C4:2D:C8:F9:A2:9A:11:30:A5:43:59
X509v3 Authority Key Identifier:
keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3234382e302f32322d3232203d3e20323636313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.248.0/22
Signature Algorithm: sha256WithRSAEncryption
81:4a:41:79:9a:4f:52:d1:3b:df:5f:6d:89:a2:9e:05:5e:59:
94:77:b4:04:c4:9c:4a:34:03:8b:8a:6e:30:1a:2d:71:03:27:
82:2f:70:de:00:4e:8e:1b:37:37:10:dc:36:d4:8e:f9:60:e9:
f2:6e:99:4b:d7:f8:9f:e5:91:92:d7:9a:d0:b4:fd:6c:03:80:
b2:84:c7:d8:e4:8b:5b:aa:bb:ce:29:06:f3:21:77:c1:46:50:
fe:ae:8b:ad:8f:7d:8e:50:41:7e:78:2c:fa:2d:7c:ff:1f:03:
d7:92:54:62:1f:37:2d:b6:86:7a:b6:ca:d3:45:10:c6:f2:79:
55:81:09:3c:89:97:a6:07:78:18:cb:29:cc:01:c7:12:db:ed:
4b:61:0a:9e:4d:3d:da:bd:61:5b:c4:70:2a:ce:0d:99:5f:c9:
ed:24:3b:c3:74:b2:f2:dc:10:b4:0a:09:e1:f8:51:25:a6:55:
42:25:7f:53:79:52:6c:67:a0:2f:ea:89:67:92:5b:01:bd:c8:
bb:1b:a2:c2:47:2f:bf:66:ac:dd:ec:19:de:53:fe:f5:22:c7:
a6:dd:25:26:6d:f4:bd:fa:48:5e:fe:20:63:b7:4e:4b:31:47:
62:4e:77:9f:4e:61:dd:2e:1c:e9:ce:ab:d1:64:7d:6a:e0:23:
3b:99:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:44 2025 by rpki-client