Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32342d3234203d3e20323730343331.roa
File: 3139302e3131352e38342e302f32342d3234203d3e20323730343331.roa (raw, json)
Hash identifier: 5iBSHqHzbXvOlY3hfZzTYyRpk0yfuih2KLG7iP6dMZ4=
Subject key identifier: 7F:AD:24:75:AE:EA:C9:9A:C3:08:9E:EC:46:F2:4C:01:C4:1F:97:6D
Certificate issuer: /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial: 430223991775CB5FAC17A9DBFE39EBF989515E9C
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32342d3234203d3e20323730343331.roa
Signing time: Wed 29 Jan 2025 22:29:24 +0000
ROA not before: Wed 29 Jan 2025 22:24:24 +0000
ROA not after: Wed 28 Jan 2026 22:29:24 +0000
asID: 270431
IP address blocks: 190.115.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:02:23:99:17:75:cb:5f:ac:17:a9:db:fe:39:eb:f9:89:51:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Validity
Not Before: Jan 29 22:24:24 2025 GMT
Not After : Jan 28 22:29:24 2026 GMT
Subject: CN=7FAD2475AEEAC99AC3089EEC46F24C01C41F976D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:c8:1e:ef:bf:43:31:6f:db:32:8f:e7:39:
e6:02:5b:a5:02:83:da:c6:01:51:77:75:55:0a:74:
e1:0a:01:fc:16:7b:30:72:da:c7:be:08:4c:9f:f4:
62:40:ab:22:e8:7c:f8:10:c2:26:70:54:6a:75:bc:
2a:0d:ba:13:07:01:79:8f:36:91:cd:03:2d:78:d5:
10:eb:73:e0:db:90:62:cc:4d:c3:fe:ff:44:57:bd:
d0:45:64:fa:e4:54:c5:37:01:95:11:77:bb:05:bb:
04:27:19:dc:89:1e:c2:55:ea:53:80:09:69:a8:85:
76:ae:c2:a4:b6:e2:fc:87:33:a7:ff:84:50:75:73:
cd:af:97:07:0a:73:16:12:08:8c:90:b4:1b:28:34:
2a:4c:27:39:8e:aa:d5:bc:3e:28:44:e4:b5:dd:55:
22:0e:f2:91:27:e2:88:1a:0c:97:95:06:37:e3:c1:
a6:e5:39:e4:3a:c4:13:fc:41:7e:e5:c9:4f:15:9d:
b7:8f:1e:d7:d5:bd:ea:38:b7:f2:54:71:eb:e3:de:
ad:0b:d3:18:88:a0:9f:cd:18:97:30:a7:1f:0a:b6:
4f:32:98:07:68:9e:78:0f:79:45:20:da:85:80:d6:
99:56:2f:fa:23:78:fe:f7:c9:aa:75:59:0c:ce:c5:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:24:75:AE:EA:C9:9A:C3:08:9E:EC:46:F2:4C:01:C4:1F:97:6D
X509v3 Authority Key Identifier:
keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/3139302e3131352e38342e302f32342d3234203d3e20323730343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.115.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e8:a8:a1:a1:be:ad:91:39:0d:a8:36:b9:7d:4a:ac:ac:d8:
53:ce:e0:0c:ab:52:3b:d6:98:04:a9:3f:86:36:f6:65:8b:ac:
4a:63:1c:25:84:f6:53:99:b1:27:e0:44:f8:fe:c0:fa:d0:c2:
88:82:f7:e5:83:b9:45:ce:12:bf:2e:0f:96:b5:4e:a1:c3:c6:
fb:40:b5:48:ce:62:95:a2:f3:fe:92:d9:33:70:bd:56:ef:7a:
56:d7:15:13:2b:d8:81:8d:bf:89:cc:72:08:32:16:59:dc:e2:
e9:da:f3:c4:a8:62:14:c6:a6:7c:8d:f8:3e:f2:09:25:bf:69:
51:ef:3a:0e:72:51:ae:c7:6b:d0:46:a5:16:87:70:c4:66:84:
9f:01:85:9b:37:72:8a:4c:01:07:d3:0f:f6:a7:36:34:4a:9a:
ac:63:ce:0c:d4:ca:ef:28:e1:4a:b7:f0:43:6d:29:26:6e:db:
b1:b6:a5:58:66:e6:b5:a0:a6:46:58:b3:da:0b:d0:2f:6e:e7:
d2:08:10:5c:62:6e:37:47:45:9d:5c:c8:e4:93:b6:e7:84:c2:
2f:a1:f4:58:e6:f4:77:c0:ea:75:a4:34:08:c1:a1:a3:55:98:
ec:c7:92:22:97:c7:b0:70:07:eb:b5:92:97:8a:c1:31:20:57:
48:87:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:43:16 2025 by rpki-client