Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3235302e302f32332d3233203d3e20323636313732.roa
File: 3136302e31392e3235302e302f32332d3233203d3e20323636313732.roa (raw, json)
Hash identifier: HY6MYAFLtJg5jOQ4B/eycEVQ9U7PrF4BqIW3WcAPgb4=
Subject key identifier: 45:9A:C4:38:A0:D1:33:9B:35:BC:3A:6D:F2:CD:D4:84:7A:E6:09:40
Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Certificate serial: 58D6B9AA21B866AA9000A3E791E0D6FD5FD5213C
Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3235302e302f32332d3233203d3e20323636313732.roa
Signing time: Mon 17 Feb 2025 19:32:50 +0000
ROA not before: Mon 17 Feb 2025 19:27:50 +0000
ROA not after: Mon 16 Feb 2026 19:32:50 +0000
asID: 266172
IP address blocks: 160.19.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d6:b9:aa:21:b8:66:aa:90:00:a3:e7:91:e0:d6:fd:5f:d5:21:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Validity
Not Before: Feb 17 19:27:50 2025 GMT
Not After : Feb 16 19:32:50 2026 GMT
Subject: CN=459AC438A0D1339B35BC3A6DF2CDD4847AE60940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:29:bb:83:bc:6a:55:85:26:9c:ef:d1:50:
7f:f8:98:d1:20:49:b2:c7:1f:34:af:6d:2a:cd:ad:
e5:68:1d:68:8d:df:9f:e5:d8:c2:21:e9:8d:30:4b:
0d:40:52:8f:23:93:0c:f0:8e:b4:b1:e9:b8:58:1d:
34:98:74:9e:fa:e8:33:63:aa:8a:7b:dc:2a:10:4f:
00:cb:d1:26:ad:77:7d:22:fe:93:7d:ed:46:a4:58:
6a:b3:46:14:24:01:8e:f6:14:39:62:97:c3:9d:25:
e3:2b:76:fc:c4:5e:0f:57:40:d3:de:0a:3f:3b:f2:
52:c9:85:6e:15:71:d3:43:7f:bb:00:9d:c5:8f:4e:
35:59:6a:ef:89:49:ea:63:9f:db:29:b6:3a:27:73:
99:ea:f7:47:dc:00:2f:eb:4e:c6:8a:e2:9a:c2:9e:
3c:c5:09:fa:95:e4:35:a0:b9:22:4d:13:83:d1:ad:
2e:31:e9:f6:25:0f:cc:47:e7:e9:fb:89:22:8d:74:
db:bb:6c:87:41:be:e3:cc:33:3f:7d:b3:4e:98:8c:
60:15:2e:3c:13:bf:5c:dd:b1:da:41:74:d8:c8:cb:
2f:d0:cb:cc:90:28:d4:c6:9d:31:e4:38:f2:a4:4d:
dd:40:1f:f7:9c:cb:6d:2d:9f:2e:0a:91:1d:fa:8f:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:C4:38:A0:D1:33:9B:35:BC:3A:6D:F2:CD:D4:84:7A:E6:09:40
X509v3 Authority Key Identifier:
keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/3136302e31392e3235302e302f32332d3233203d3e20323636313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.250.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ff:02:65:ef:f9:ee:61:b7:13:f2:ab:17:0e:fe:75:d6:b3:
2d:d7:39:be:d5:94:21:63:7d:b2:f3:1a:66:fd:78:ef:a7:15:
45:6d:ed:92:51:ba:e6:f1:2c:89:a8:e1:b4:8d:2d:18:50:99:
48:c6:ee:a7:75:d1:fe:35:1f:7e:98:15:db:5f:77:cf:85:d6:
3a:58:38:20:28:ed:2b:f3:1b:81:40:43:ca:10:b9:d8:fb:50:
6f:d4:f3:28:9c:95:50:e3:34:69:51:6f:b8:0c:d9:f1:7a:8f:
30:ca:d9:39:ad:21:85:ad:e6:d8:e2:d1:55:76:ef:7b:e6:2f:
93:7c:6b:6f:6c:04:70:88:ad:0c:fa:a8:fc:ea:b5:01:eb:5e:
2f:74:ad:b4:6c:f7:ac:2d:88:31:4c:dc:ed:45:15:27:99:bc:
e8:a4:95:47:0c:be:37:9d:39:ef:b3:77:b5:8c:26:c3:c6:4f:
7f:84:37:3f:0d:af:99:c1:93:27:bf:d5:6c:63:79:12:f3:29:
e9:db:31:6e:f9:4b:7a:e4:b3:f4:7f:cf:a9:12:d8:9e:a4:94:
b6:1b:64:77:46:1d:ed:82:3a:3b:e8:af:6a:68:7b:79:41:f8:
27:35:25:8f:10:2f:f9:43:97:de:e7:03:9f:02:41:97:87:69:
c9:62:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:45 2025 by rpki-client