Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3234382e302f32332d3233203d3e20323636313732.roa
File: 3136302e31392e3234382e302f32332d3233203d3e20323636313732.roa (raw, json)
Hash identifier: b/OyRpa49KnqeQJPH6x6Bw89aO+HIjXgb0fRAprBKPc=
Subject key identifier: 24:14:DC:88:99:08:A8:29:C3:0A:19:CA:2F:BF:AC:A5:38:8F:5F:C4
Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Certificate serial: 17CAEA7D5DFAD03827BBB250B069632BC3558833
Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3234382e302f32332d3233203d3e20323636313732.roa
Signing time: Mon 17 Feb 2025 19:32:48 +0000
ROA not before: Mon 17 Feb 2025 19:27:48 +0000
ROA not after: Mon 16 Feb 2026 19:32:48 +0000
asID: 266172
IP address blocks: 160.19.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ca:ea:7d:5d:fa:d0:38:27:bb:b2:50:b0:69:63:2b:c3:55:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Validity
Not Before: Feb 17 19:27:48 2025 GMT
Not After : Feb 16 19:32:48 2026 GMT
Subject: CN=2414DC889908A829C30A19CA2FBFACA5388F5FC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:be:75:02:5f:f7:53:48:64:2c:d6:d9:f5:53:
10:b2:df:5b:59:62:cb:14:02:90:60:b0:a7:80:64:
4a:72:a5:dd:3c:66:77:62:24:aa:2d:18:b6:e8:45:
fe:40:10:ac:27:cc:55:6c:4e:a2:14:94:ce:c6:9c:
0e:3a:55:c7:ec:66:45:cc:53:f5:8b:88:e1:a8:21:
8d:a9:87:2c:02:f8:af:31:6a:92:b1:1d:72:18:57:
84:be:f8:0f:00:0a:b3:4f:d9:53:b5:49:ff:a1:5f:
41:bc:49:44:98:52:9f:53:49:9f:02:3c:26:e2:dd:
e2:ec:89:35:a7:ff:cc:ee:50:81:fc:e3:8c:56:9e:
3f:b3:b1:d6:d0:a2:bb:31:69:9a:b5:24:d1:5d:74:
47:41:57:09:12:10:38:bc:6d:6d:41:4c:ff:ee:5c:
b5:6d:32:8e:de:9e:28:50:1f:89:65:dd:3d:12:5b:
3e:ca:ec:b2:a3:7e:22:0a:6b:5e:bf:cf:63:8d:af:
4b:e5:6f:38:83:d3:1a:d3:4a:7f:2d:ec:61:d0:f3:
82:ac:86:49:ff:9c:df:9b:ed:90:96:ce:47:fa:f7:
70:17:92:74:7b:60:f0:c8:54:2d:b2:85:19:8b:17:
14:80:8a:5e:9f:97:c9:2f:d0:93:91:28:12:6b:90:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:DC:88:99:08:A8:29:C3:0A:19:CA:2F:BF:AC:A5:38:8F:5F:C4
X509v3 Authority Key Identifier:
keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3234382e302f32332d3233203d3e20323636313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.248.0/23
Signature Algorithm: sha256WithRSAEncryption
94:06:81:dc:dd:65:59:5b:9a:91:dd:f1:0a:78:09:69:07:c4:
f1:1f:48:7b:13:26:4f:7f:c9:4d:15:05:49:c0:4b:42:1e:48:
18:0b:21:1b:b5:fc:72:26:81:94:8a:07:25:e3:84:49:ac:9e:
fa:ea:c6:53:9e:c3:cc:79:61:5c:fb:43:4f:a4:89:80:75:d7:
40:a9:6d:0b:58:a2:f6:54:dc:e0:55:64:57:28:cd:8b:ae:e5:
da:dc:7b:4b:74:64:6f:9a:3a:2b:32:1c:a6:b6:92:23:fa:99:
e7:ad:8f:5b:3f:eb:0d:31:42:9e:cc:23:32:08:80:fb:d6:2d:
9b:6e:00:66:16:9c:53:97:d0:1e:20:36:00:85:ce:ae:66:cf:
a1:a5:98:5e:28:73:c0:46:53:71:1c:1b:8b:d6:c7:87:22:f5:
0a:2f:62:6e:e5:b9:d9:73:7c:d8:d5:f6:ee:f7:92:ec:52:e1:
03:f7:4f:cd:34:dc:93:a7:cf:55:20:86:f1:28:11:f0:45:28:
1b:80:ae:32:66:56:fa:e6:88:0e:b7:c7:1a:24:ce:a7:f1:a3:
da:5e:c4:45:87:c8:fe:72:6d:db:b4:64:3b:d5:25:d2:cd:f0:
9e:19:82:8b:92:d5:46:76:6f:87:a5:78:66:ca:94:39:6c:4d:
a7:57:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:34 2025 by rpki-client