Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
File: 3139302e38392e37322e302f32322d3234203d3e20323730333538.roa (raw, json)
Hash identifier: k1nifSLPnA3C3teEr+owXsf3cyQEwIWzzyXhKpGPM4E=
Subject key identifier: 5C:4F:D8:4A:02:C0:9B:E3:AF:4F:CC:47:08:96:EA:88:92:6D:E5:2B
Certificate issuer: /CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Certificate serial: 156104490ED1031501DAAF2714299927BA84FEC3
Authority key identifier: 61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
Signing time: Tue 20 Feb 2024 14:34:55 +0000
ROA not before: Tue 20 Feb 2024 14:29:55 +0000
ROA not after: Tue 18 Feb 2025 14:34:55 +0000
asID: 270358
IP address blocks: 190.89.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:61:04:49:0e:d1:03:15:01:da:af:27:14:29:99:27:ba:84:fe:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
Validity
Not Before: Feb 20 14:29:55 2024 GMT
Not After : Feb 18 14:34:55 2025 GMT
Subject: CN=5C4FD84A02C09BE3AF4FCC470896EA88926DE52B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:aa:98:30:fe:13:f9:21:c4:8a:a4:2f:d5:
22:48:bc:87:80:a2:05:e0:81:65:d5:b0:e7:36:3d:
98:10:e1:34:d1:8e:13:1f:61:cc:ad:b4:7c:b1:90:
5b:fc:66:c2:c3:94:fd:1d:e5:10:e5:c3:e4:0d:67:
43:08:8e:f2:5d:94:2f:3b:73:9f:92:f7:25:d4:f7:
ec:fb:82:6a:86:06:ec:77:31:4e:8a:e3:87:8c:ee:
b0:a2:ad:b4:2a:d2:a4:24:33:68:20:83:35:cf:df:
57:26:07:02:ce:b7:f7:2d:25:66:bf:6b:89:83:58:
eb:0b:d0:5f:34:bc:89:22:d0:9e:88:a7:51:9c:05:
90:bc:cd:52:9a:17:37:94:d8:63:ad:a3:c4:9c:03:
c0:c4:17:87:35:b2:e8:58:b2:8c:9a:1a:32:99:3a:
c8:47:09:d9:58:a6:8f:78:5f:cb:dc:a1:21:e0:38:
e3:32:5f:3b:4a:b3:6e:4e:09:9c:cf:e4:bb:48:55:
02:1f:ae:47:df:b3:94:84:e9:a8:4f:c4:c2:d0:32:
89:03:04:2b:b8:45:6f:a9:03:02:3a:10:fd:66:13:
1b:37:5a:75:d6:e3:60:21:a1:97:b1:b6:2e:60:fc:
4b:43:5a:44:36:3a:81:34:6c:da:bb:d7:9f:4f:19:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:D8:4A:02:C0:9B:E3:AF:4F:CC:47:08:96:EA:88:92:6D:E5:2B
X509v3 Authority Key Identifier:
keyid:61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/3139302e38392e37322e302f32322d3234203d3e20323730333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:67:cf:11:01:9e:54:63:85:35:dd:b1:e0:36:4b:04:2d:3b:
9c:9a:ab:db:8a:09:f6:fb:97:29:a9:9b:b2:d8:e9:ea:d3:4f:
c6:e8:6a:c0:80:f0:8a:e1:32:f8:b8:1a:ad:39:4f:f4:f4:45:
2f:45:f5:e4:4f:84:a9:62:9a:6b:90:94:74:78:e9:e1:75:5f:
a3:a5:ea:8e:c1:af:04:8f:27:53:4e:74:66:2f:01:dd:e1:67:
eb:36:b5:c8:db:ee:25:fa:03:73:b2:fd:de:82:90:87:de:83:
21:f1:46:64:bd:a8:20:50:88:b4:bc:a0:34:91:3e:fa:c9:8d:
b8:f1:a4:8d:26:e3:01:2f:2b:c1:6f:66:1d:cd:8a:67:e2:c8:
0b:9c:ca:d5:d7:cd:91:1b:2a:c2:26:dd:e9:86:ad:8b:46:16:
da:e5:03:d0:f0:da:d2:c0:cd:85:4d:66:69:18:d4:d5:20:32:
31:a4:72:66:9a:26:53:65:40:d4:2a:f2:cd:85:34:46:3d:0a:
15:a9:f4:5d:97:7f:78:69:d9:81:f9:18:21:d3:58:d3:eb:ce:
57:da:90:94:bb:0d:20:32:0f:50:8b:69:7a:96:d7:4b:cc:e6:
1b:43:30:dd:6d:8e:e0:e2:e3:78:ee:91:b8:c4:32:1f:f1:85:
c9:97:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:53 2025 by rpki-client