Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138372e34342e302e302f31382d3235203d3e203238323032.roa
File: 3138372e34342e302e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: ODdG/JrraKbXfOYk+a85MIaqQO3N96D2J6se63dJjm4=
Subject key identifier: ED:0D:C6:62:96:4D:63:49:01:46:31:DC:9A:6B:D8:96:1D:29:D3:58
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 443F8559DC69C689D0A5BC205BFAF0FBD7FE489B
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138372e34342e302e302f31382d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:45 +0000
ROA not before: Fri 10 Jan 2025 14:14:45 +0000
ROA not after: Fri 09 Jan 2026 14:19:45 +0000
asID: 28202
IP address blocks: 187.44.0.0/18 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3f:85:59:dc:69:c6:89:d0:a5:bc:20:5b:fa:f0:fb:d7:fe:48:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:45 2025 GMT
Not After : Jan 9 14:19:45 2026 GMT
Subject: CN=ED0DC662964D6349014631DC9A6BD8961D29D358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:fc:c4:07:55:21:ad:90:b6:b6:5b:07:2d:
93:5f:0a:fd:52:bb:a2:0a:38:e3:f2:70:39:8d:93:
ec:e2:ab:95:49:3d:a0:b8:11:48:07:8f:f5:21:76:
ed:6d:24:13:c2:d0:50:32:4c:a1:f7:27:ea:30:46:
20:a9:cd:1e:fb:b8:3f:fc:e9:61:db:64:b4:62:3f:
31:cb:07:9e:17:e0:53:f1:82:15:72:93:0f:82:12:
a3:40:0d:f9:b2:f2:7a:a6:b4:b4:f8:5f:14:29:76:
f9:30:8b:45:7f:09:70:99:6c:98:a9:62:01:e9:d6:
26:a9:15:7d:e3:c5:88:ad:53:0a:6d:dd:dd:8a:d6:
9b:87:97:dd:9a:35:e0:d9:44:75:c3:2b:11:8c:9f:
c2:4c:0b:71:f7:1c:b7:8f:1c:c5:da:29:30:58:ce:
9b:2f:95:d4:88:f3:f6:1d:88:2d:6e:b2:a6:73:b5:
7a:72:54:77:e1:76:96:b4:1d:cf:32:d8:a5:d5:1c:
19:94:af:03:7d:6a:36:72:5e:27:1f:e9:32:77:a7:
ec:41:97:12:2c:59:7b:2a:0e:9d:02:c2:a4:1b:82:
48:3c:b8:64:a4:b0:e8:20:56:c0:4f:aa:52:96:a4:
83:f3:a4:55:6b:26:ac:51:96:b7:1e:5a:83:72:3c:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:C6:62:96:4D:63:49:01:46:31:DC:9A:6B:D8:96:1D:29:D3:58
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3138372e34342e302e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.44.0.0/18
Signature Algorithm: sha256WithRSAEncryption
35:0d:df:7f:ee:2c:e1:eb:f6:e1:0a:90:1d:0a:68:10:bc:21:
e0:df:5f:c9:7d:b2:ff:c9:0b:df:c9:73:03:b0:09:cd:12:59:
9d:54:3a:04:8c:ac:fd:5e:41:cb:d0:dd:a1:f4:ac:53:db:3a:
f4:8a:51:a9:9c:4b:d6:3d:26:f8:30:2c:b9:be:37:05:ab:37:
d4:86:36:89:d9:1a:52:93:cf:cc:28:09:b7:f0:50:36:09:cb:
45:f3:91:88:c2:e4:92:6b:63:bb:34:cb:00:3c:97:11:b8:74:
20:2c:67:4d:85:6f:86:d8:c7:86:8e:5d:cf:ae:56:e4:14:00:
1f:cb:33:76:2e:41:5f:ab:9a:ce:be:47:25:1e:9b:f9:5d:58:
9f:e6:49:77:f7:d2:7a:90:2a:11:8f:c8:79:fb:3f:29:09:6d:
b8:72:e5:09:08:96:df:5d:19:75:13:d8:ae:5c:5f:b1:b3:be:
d1:e7:fe:29:99:78:31:32:75:ce:6b:6a:96:f0:43:c7:d9:13:
59:a1:02:4c:cc:18:b3:fe:86:de:7a:e5:3f:6b:7c:22:6e:89:
5a:5a:2a:eb:ac:de:34:c1:78:91:ea:55:4e:d0:fa:9a:54:e6:
cd:7c:58:37:1b:0d:9b:01:67:77:92:fe:23:a3:2f:5e:b9:55:
0d:b1:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:54 2025 by rpki-client