Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
File: 3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier: aDum0iNczvjusgbY9AgJXNEipEe+IzVqmJzzKJ0j8Co=
Subject key identifier: 48:2E:A2:00:2B:30:E4:21:62:85:2B:F5:28:3D:26:BC:AB:C7:B5:55
Certificate issuer: /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial: 4DBB7ED82DF5FA17005A4456AD2F5FD5ACA0598B
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
Signing time: Thu 06 Mar 2025 18:53:30 +0000
ROA not before: Thu 06 Mar 2025 18:48:30 +0000
ROA not after: Thu 05 Mar 2026 18:53:30 +0000
asID: 61672
IP address blocks: 131.108.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bb:7e:d8:2d:f5:fa:17:00:5a:44:56:ad:2f:5f:d5:ac:a0:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Validity
Not Before: Mar 6 18:48:30 2025 GMT
Not After : Mar 5 18:53:30 2026 GMT
Subject: CN=482EA2002B30E42162852BF5283D26BCABC7B555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:2e:f9:3b:07:da:7c:33:26:cf:90:e0:3e:
9e:9d:c1:f7:f6:fb:28:11:92:1e:48:57:80:15:dd:
ae:55:8c:78:56:ce:73:0c:9a:08:ba:d2:a9:e1:ef:
8e:0e:bf:e2:12:88:16:f0:a6:60:8f:72:7e:9f:de:
82:48:5c:5a:4c:b6:11:84:aa:5b:e8:d2:56:d0:f5:
3c:b9:c9:bb:85:6b:c8:ad:a1:47:3d:af:7d:a1:5a:
7d:fa:52:4f:72:c2:96:69:06:2e:cc:bb:de:1d:e8:
1d:4e:e0:14:2d:41:28:f8:d5:c7:0e:ab:b0:98:c1:
25:8a:96:95:3e:b9:1b:6a:ca:4c:57:24:db:4a:e2:
0f:a8:ae:21:6d:a6:69:bf:16:50:89:4c:4b:3a:1f:
f2:b2:d6:c6:03:ac:9c:2f:af:b1:67:c9:96:f7:0e:
4c:92:e9:0c:3c:b5:e8:cd:e9:e9:23:db:f1:b2:9d:
55:c3:8f:db:45:b4:ca:81:5a:4a:79:85:e1:93:40:
9f:7e:75:55:f9:1d:f9:67:6c:32:01:1a:2f:f4:24:
a7:1b:72:2a:66:ea:2d:64:5e:59:9f:39:08:68:9c:
5b:94:8a:f7:a8:99:99:a4:ec:9b:b8:63:e0:22:dc:
17:bc:bc:9b:9c:4b:31:f3:aa:f0:4e:18:b8:6b:e9:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:A2:00:2B:30:E4:21:62:85:2B:F5:28:3D:26:BC:AB:C7:B5:55
X509v3 Authority Key Identifier:
keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.103.0/24
Signature Algorithm: sha256WithRSAEncryption
72:dd:8b:c5:2f:a2:df:85:4b:f4:47:76:ed:05:23:e9:19:61:
a9:5a:83:9d:99:f4:fe:4c:da:e8:e8:3b:81:09:e0:71:b0:23:
00:54:d3:9c:10:fb:9a:cc:a5:db:8b:37:dd:06:03:8c:b2:30:
c1:2f:da:9f:db:b8:b9:6c:dd:29:9b:6b:f1:b3:47:22:ba:71:
30:97:4c:56:3d:c0:8f:4b:6c:c2:41:6b:51:76:7f:52:bb:f2:
63:c2:e7:3b:50:4f:28:7b:b5:43:91:48:35:2c:45:17:24:f1:
4b:f7:f6:e2:1f:e4:ec:b2:86:f8:f0:41:43:02:8b:72:81:cc:
a2:0a:75:1d:2d:b4:98:3e:df:32:67:35:f1:69:4f:33:ec:84:
2c:97:3a:3e:d2:0b:73:da:47:8b:e8:40:60:f1:97:f5:6a:d9:
68:75:84:a3:ea:9b:9a:91:81:94:59:10:8b:37:b9:bf:bc:b3:
ad:8d:5f:62:50:d9:d9:bf:cf:89:2d:c2:83:de:ec:5e:49:43:
0f:f8:9a:87:fe:8f:7b:50:e8:e1:a1:f8:dc:e3:84:2c:0d:24:
57:eb:9b:67:71:0c:a7:8a:5c:33:3d:70:17:fd:55:9e:4b:c9:
69:01:00:13:2b:2b:3a:07:36:80:84:34:8f:6e:6d:81:ef:95:
cc:77:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:20 2025 by rpki-client