Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e2033323233.roa
File: 32342e3135322e33392e302f32342d3234203d3e2033323233.roa (raw, json)
Hash identifier: tG5bSfjbgvaiE63yH8h/o6VeolhVsDLLvwv4MUsKhH8=
Subject key identifier: 9A:97:77:7E:2C:6D:47:F6:40:80:2E:5C:47:24:62:0D:21:06:EC:E3
Certificate issuer: /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial: 29A996009E1181C5C37D8C2DC836B5DF9FF75FA4
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e2033323233.roa
Signing time: Sun 05 Jan 2025 05:07:55 +0000
ROA not before: Sun 05 Jan 2025 05:02:55 +0000
ROA not after: Sun 04 Jan 2026 05:07:55 +0000
asID: 3223
IP address blocks: 24.152.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a9:96:00:9e:11:81:c5:c3:7d:8c:2d:c8:36:b5:df:9f:f7:5f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
Validity
Not Before: Jan 5 05:02:55 2025 GMT
Not After : Jan 4 05:07:55 2026 GMT
Subject: CN=9A97777E2C6D47F640802E5C4724620D2106ECE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:ca:a5:dd:ae:37:8f:bf:2d:41:59:61:9d:
95:90:84:21:f1:65:ee:92:dd:2d:44:54:1f:29:bc:
78:81:d4:32:21:d0:bc:12:c2:ed:d4:ef:2f:93:3f:
35:3f:ab:55:df:9a:04:80:c0:f5:5b:3e:7a:6b:8a:
85:00:e6:1d:99:2a:46:9c:a0:92:3c:e5:c7:16:8a:
99:29:85:6f:2f:2e:07:35:b0:de:f5:a7:22:83:cc:
73:e1:e5:cc:f1:fa:d7:55:3d:87:45:e6:25:76:5a:
9d:e2:65:a3:e4:5a:4f:9f:94:bc:e2:65:00:87:9b:
6c:40:4d:5b:2f:b2:9c:a0:89:26:17:ec:e1:22:8f:
b9:79:2e:0e:92:b9:f3:46:0e:6e:3d:1b:95:3a:68:
96:8b:8f:9b:7e:f2:5a:dc:2c:b4:75:db:f6:bd:77:
37:07:48:ec:58:8c:cd:eb:62:af:4f:e0:0e:d4:51:
25:a0:f8:29:87:49:ae:fe:28:71:0e:21:75:6c:2f:
59:c2:47:fe:45:ff:12:e4:4c:e9:94:f2:4f:85:6e:
67:05:17:32:59:34:6e:0f:ba:ab:74:09:7c:62:56:
ef:db:58:34:ed:2f:fc:2d:e8:69:83:ab:11:67:72:
60:96:cc:20:3f:0e:57:fb:6c:bd:c7:ea:b0:32:90:
ec:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:77:7E:2C:6D:47:F6:40:80:2E:5C:47:24:62:0D:21:06:EC:E3
X509v3 Authority Key Identifier:
keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33392e302f32342d3234203d3e2033323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:70:08:6e:80:5f:97:c3:1c:de:84:ef:a3:03:41:fd:da:7c:
c7:87:52:0c:21:29:db:f7:2c:2a:ec:4c:66:f9:e0:4f:dd:ce:
f6:b9:08:a5:d1:de:4b:42:21:33:8f:4f:58:5c:05:79:5f:97:
37:95:99:86:2e:a5:70:42:46:8d:b9:7a:ab:71:37:9d:66:42:
4a:cb:0c:09:b0:18:55:aa:c7:ea:ce:6b:c4:ac:8b:60:c9:46:
e7:82:16:73:60:d8:33:ec:e7:c4:8b:6d:f4:6c:98:df:4a:89:
6e:6e:39:d6:70:cc:4c:3d:17:45:e9:65:40:aa:8b:53:a9:b7:
02:46:d8:65:93:0b:0a:c1:f1:af:7c:eb:4c:41:72:50:7e:7a:
d7:75:2b:e0:67:b6:a3:a4:64:7c:dd:46:40:55:fd:df:98:04:
ef:4c:5a:e9:e8:e0:64:74:c3:20:c8:5e:9e:bf:86:69:78:e2:
4f:7c:e3:e6:93:7d:97:fc:31:31:de:dc:78:fd:4e:4d:33:c3:
36:25:4f:47:94:c7:b8:29:95:9a:12:47:aa:df:1b:2e:66:bd:
78:d8:4e:d1:69:7f:be:01:c0:dc:59:df:4e:75:9e:1f:af:c9:
fe:0a:2c:16:ac:81:21:7a:cc:d3:b6:7c:ab:e5:0a:ee:88:96:
d1:bb:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:20 2025 by rpki-client