Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
File: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (raw, json)
Hash identifier: jxcT7UQCB25cOhI7bfbqMPMJ8mZBKfS+t1689GTxsI0=
Subject key identifier: 9F:BB:91:94:23:39:74:71:9A:3C:B5:90:EC:FD:3E:E3:25:89:36:59
Certificate issuer: /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial: 106E4F9E450DCCA2D8B2E866DD70AFBE3B7ACCA7
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
Signing time: Thu 13 Mar 2025 15:10:46 +0000
ROA not before: Thu 13 Mar 2025 15:05:46 +0000
ROA not after: Thu 12 Mar 2026 15:10:46 +0000
asID: 271484
IP address blocks: 181.233.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6e:4f:9e:45:0d:cc:a2:d8:b2:e8:66:dd:70:af:be:3b:7a:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Validity
Not Before: Mar 13 15:05:46 2025 GMT
Not After : Mar 12 15:10:46 2026 GMT
Subject: CN=9FBB9194233974719A3CB590ECFD3EE325893659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:27:59:1e:5a:cb:15:8b:5d:d0:8c:44:c0:
67:ee:8d:a0:5b:6b:da:c4:6e:c5:a7:9a:58:75:f2:
e2:1f:c4:64:92:aa:f2:c7:57:22:32:de:b9:80:d2:
c6:f2:b0:d6:fe:88:4d:c1:80:b6:35:2d:d1:0b:c9:
46:f6:6d:6d:02:30:8f:63:b4:9e:4c:de:90:24:78:
1d:26:94:b5:7a:3b:dc:2c:bf:97:cc:d0:6c:bc:ba:
9a:37:89:11:e9:8e:56:77:58:44:2a:05:0f:64:31:
53:de:4f:6e:51:5e:93:f8:5f:ee:9b:18:d1:ed:38:
47:7f:ff:14:c2:cb:3c:3f:e6:ac:30:3f:78:e3:e7:
06:91:ee:65:db:6d:04:75:1b:77:97:8f:74:39:92:
d8:3e:00:a4:c7:af:d1:3f:70:7b:ee:54:aa:6e:62:
bf:12:83:49:d7:b8:c9:13:d0:f9:74:de:f6:5c:cb:
ca:fe:80:6a:82:65:e2:a1:9e:47:3c:42:24:3b:9c:
7c:44:1c:48:ea:9b:d7:dc:90:ad:67:85:76:21:67:
bf:69:fd:39:90:5d:58:9a:ab:db:81:7a:40:5c:0c:
05:44:10:12:2e:d5:f6:6f:28:bb:6d:25:b8:a4:55:
f0:6b:9b:bf:2f:80:ad:01:23:fd:bd:f2:df:db:ec:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:91:94:23:39:74:71:9A:3C:B5:90:EC:FD:3E:E3:25:89:36:59
X509v3 Authority Key Identifier:
keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.16.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:04:18:46:c8:29:72:42:c9:a9:a1:a0:f0:47:56:b2:1c:da:
90:5e:36:a2:c2:1a:39:4d:3a:3c:bc:74:ff:e9:63:4c:db:ac:
43:ce:23:b3:9e:36:65:8d:53:13:52:fa:14:60:d2:c4:a7:d7:
85:8d:6f:0f:84:65:8e:2e:52:83:54:58:0b:8f:3f:98:fc:5c:
07:88:8f:a3:ba:8e:8e:f7:d4:48:98:7b:39:69:7d:0c:61:d2:
33:98:8f:46:ee:a0:a3:82:86:06:b0:fe:60:25:8c:6d:63:ec:
47:9a:08:89:63:fb:83:d8:ef:10:3a:fc:ba:d3:8c:2c:e9:15:
a2:5d:a0:a9:3f:cd:16:03:ec:cb:66:fe:f5:dd:6e:89:34:d9:
f3:08:ff:86:2e:6c:0b:5f:87:09:09:52:2a:cf:57:4f:3f:13:
ac:fa:14:a8:ab:ee:8a:7b:78:cc:8d:c9:86:45:85:3f:cc:15:
39:28:7d:1d:a9:38:2a:12:b8:cf:3e:15:ae:53:7b:de:ed:d4:
f1:65:88:9e:40:53:6b:ec:25:0c:b4:56:e3:63:67:0c:ab:69:
5d:5c:fe:ae:8d:9b:b5:f8:62:de:ce:07:89:36:8d:e8:28:1e:
e0:9e:2d:be:fe:94:07:23:05:9e:d9:ed:71:d5:10:89:a2:fa:
8e:00:4a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:51:46 2025 by rpki-client