Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e35332e302e302f31362d3235203d3e203238323032.roa
File: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (raw, json)
Hash identifier: pTNx/Ro9D3PLMd+75n3lq9opxxDRrDXY1xG6l47TzvA=
Subject key identifier: 8E:4D:B0:C3:6A:BD:F4:14:69:D2:9A:47:B8:27:E4:9A:37:7A:4B:37
Certificate issuer: /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial: 59DCFD5421DB90E793160DBEBAAA3AD07EDDFB32
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e35332e302e302f31362d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 14:19:32 +0000
ROA not before: Fri 10 Jan 2025 14:14:32 +0000
ROA not after: Fri 09 Jan 2026 14:19:32 +0000
asID: 28202
IP address blocks: 191.53.0.0/16 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dc:fd:54:21:db:90:e7:93:16:0d:be:ba:aa:3a:d0:7e:dd:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Validity
Not Before: Jan 10 14:14:32 2025 GMT
Not After : Jan 9 14:19:32 2026 GMT
Subject: CN=8E4DB0C36ABDF41469D29A47B827E49A377A4B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:dc:5b:c9:f8:57:82:4d:b6:28:95:0e:f9:
9a:32:6a:94:89:70:6a:0d:23:70:4b:ad:39:2f:ba:
78:c9:34:28:64:5a:0f:da:90:c1:74:7c:26:fe:9f:
dc:80:e1:1a:27:25:06:93:8a:a0:04:ff:6b:3b:89:
86:b2:4a:8c:ce:c8:26:e9:e1:ee:db:f6:97:6f:f5:
26:e7:22:90:71:c7:0c:37:b5:e4:24:e4:0d:38:5e:
52:79:e3:9f:52:a1:7a:a2:ed:db:fd:2c:3c:c5:ce:
bc:05:c4:c7:71:d5:81:5d:11:cc:a8:11:4c:fd:cc:
a0:5b:54:7d:37:9b:50:48:a5:fa:37:95:68:ce:e5:
7c:02:f9:48:37:fa:1b:ec:97:52:c9:e9:8c:8d:21:
c9:13:3a:a2:11:46:cc:5c:36:0b:a9:d5:f7:4e:17:
ff:ba:3d:ce:65:9f:54:a9:c6:eb:38:07:5e:1d:41:
eb:84:bf:af:4f:37:86:09:e8:49:44:9b:ab:6a:dd:
93:b7:90:2e:bc:74:d4:eb:dd:2d:47:27:0f:bc:a3:
4f:f7:b7:ed:36:b2:16:cd:0d:32:6f:c1:b0:fc:57:
3b:6f:84:91:d7:7d:3b:a4:53:4d:d2:17:b6:58:fe:
58:c4:a2:74:54:0d:bf:d4:db:99:80:9d:a1:9e:77:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:B0:C3:6A:BD:F4:14:69:D2:9A:47:B8:27:E4:9A:37:7A:4B:37
X509v3 Authority Key Identifier:
keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3139312e35332e302e302f31362d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:84:d2:29:2f:cb:b5:b3:64:ff:64:a5:f4:1c:30:d5:44:92:
42:a7:9a:46:b4:f3:00:cd:55:7e:6b:46:56:c3:bc:c0:49:a8:
7d:75:e3:d1:ba:eb:42:bf:72:68:d8:b9:0d:12:69:08:34:bc:
11:e6:5e:b0:ee:0a:4b:03:cc:8d:4b:a4:28:18:8b:9e:04:ff:
30:ed:0b:20:6b:dd:a9:9b:1a:6d:a0:35:69:bf:43:13:b3:8a:
22:c3:c2:e9:40:03:cd:a3:69:4c:20:76:69:3e:f8:b1:d0:e5:
f2:5e:e6:47:71:28:f0:9c:c5:e3:82:53:c6:13:e7:cc:65:8b:
d8:b0:c9:5c:61:45:17:ea:2d:05:0e:44:cc:f4:6d:a0:80:89:
25:86:14:57:77:0d:6b:c1:01:d4:60:80:e6:a8:fb:58:4a:df:
2b:d8:26:2c:cf:5e:5e:1c:7f:53:11:67:6e:02:7d:27:d3:5b:
11:cf:f5:22:c1:16:5b:33:d9:67:ae:d9:95:d9:91:dc:b2:48:
e6:39:22:38:0b:1d:9a:ab:f6:64:cf:22:51:60:af:d8:47:ec:
28:d4:4b:a6:8c:01:fc:e7:17:3b:88:a0:21:90:bf:39:38:68:
e5:52:67:08:e2:db:d0:44:61:9a:f9:22:c7:cf:9a:ee:eb:bc:
9b:f9:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:32 2025 by rpki-client