Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33372e302f32342d3234203d3e2033323233.roa
File: 32342e3135322e33372e302f32342d3234203d3e2033323233.roa (raw, json)
Hash identifier: np9ul6YyfLVr68pYLnFURE14eagFavT0cxKm7Xtzum8=
Subject key identifier: 40:94:C2:90:24:29:64:42:38:FD:A5:7D:76:BF:0B:81:0E:9E:44:1E
Certificate issuer: /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial: 6679BDEC29296BA5E7D7A9FF9E4092F52DEA040E
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33372e302f32342d3234203d3e2033323233.roa
Signing time: Sun 05 Jan 2025 05:07:18 +0000
ROA not before: Sun 05 Jan 2025 05:02:17 +0000
ROA not after: Sun 04 Jan 2026 05:07:17 +0000
asID: 3223
IP address blocks: 24.152.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:79:bd:ec:29:29:6b:a5:e7:d7:a9:ff:9e:40:92:f5:2d:ea:04:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
Validity
Not Before: Jan 5 05:02:17 2025 GMT
Not After : Jan 4 05:07:17 2026 GMT
Subject: CN=4094C2902429644238FDA57D76BF0B810E9E441E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:fc:c1:d8:66:f6:99:03:5f:6c:c5:45:76:
f1:0e:e4:8f:f3:7d:54:66:e2:ce:c7:66:1b:b6:1f:
51:0f:2d:9e:63:87:ba:30:07:f2:47:e6:00:d9:ef:
00:3d:35:b1:5c:57:3f:5c:bc:f6:57:84:56:44:41:
c3:ef:8c:83:a4:62:0c:1f:e8:04:2c:b0:76:15:41:
e4:bf:9e:b3:c2:5e:2c:04:7b:f0:c8:3d:aa:b2:d8:
2a:f8:98:10:e6:08:b8:56:73:97:da:66:bc:85:b6:
c8:9d:9a:7e:0b:a4:ca:8e:4e:b6:13:0c:97:96:5f:
9a:b9:2a:b2:3f:c1:1f:0a:be:bd:c6:c5:c6:24:80:
45:f9:4e:9c:96:c3:12:0f:3f:24:fc:81:64:26:c3:
53:6e:26:46:00:65:eb:70:56:74:61:6a:d7:6f:52:
0a:0e:41:1a:83:b2:d5:6a:dd:ff:89:24:84:87:4b:
d6:94:42:c0:fd:e8:d4:0c:a1:b8:21:f8:a0:a4:ef:
87:80:9e:73:7b:96:2f:c9:c3:89:63:50:59:f9:f2:
03:00:b7:12:60:b2:c9:2b:2c:4b:44:d9:b8:19:1a:
aa:ee:55:52:f4:56:43:e0:0f:67:85:74:63:20:d6:
02:27:1a:76:74:db:40:70:31:70:74:64:db:8b:71:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:94:C2:90:24:29:64:42:38:FD:A5:7D:76:BF:0B:81:0E:9E:44:1E
X509v3 Authority Key Identifier:
keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33372e302f32342d3234203d3e2033323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.37.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9f:80:7d:60:bb:69:ff:6f:61:ba:12:a2:aa:e8:09:14:2b:
c8:a5:8b:95:c2:00:4d:2b:ec:c9:73:17:cf:c6:6d:33:0b:40:
01:08:7b:bd:ea:5f:4a:ce:00:65:36:83:7f:27:ed:c8:7e:47:
ac:7b:a2:91:78:c8:34:df:43:d9:bd:27:63:23:cb:0e:7d:19:
8d:da:bd:4e:cf:f4:27:f9:a9:40:f6:42:bb:1b:1b:fa:f3:7f:
90:4a:35:19:fb:ff:7e:fa:52:c6:b5:bb:a6:6a:b5:9c:02:df:
1c:cf:dc:54:eb:fd:0a:71:c4:68:a2:38:69:20:6d:f1:80:7f:
2b:61:0f:32:ed:e7:a4:11:0d:67:d4:3a:10:8b:f8:0f:34:5c:
3d:a2:5c:3b:3c:41:18:ba:3c:cb:d4:50:6b:aa:0e:32:a7:98:
ea:5e:ea:a4:50:96:25:e7:4a:27:3a:ca:82:80:0c:2d:da:da:
90:bd:72:55:26:78:24:00:87:f2:7b:02:1b:a9:4f:63:fc:78:
67:6e:96:d5:0a:48:9f:24:eb:1a:aa:55:c1:2c:32:79:74:d9:
5c:fd:14:bb:07:6c:26:3d:76:a7:4a:de:73:cf:87:e8:3e:53:
c3:b9:10:ec:7a:9f:a5:5c:23:ab:60:01:40:41:93:9b:16:be:
91:cc:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:35:49 2025 by rpki-client