Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
File: 3138362e3231362e36342e302f31382d3235203d3e203238323032.roa (raw, json)
Hash identifier: x1Sy1G8N+E560YQngIq+KEEAqmGEhRU1XU6KmSqc274=
Subject key identifier: 09:DA:43:0F:52:7F:8A:12:86:F8:F2:1B:85:44:6A:9D:A6:CB:12:4C
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 05612358DFE8276342BCA9A0035B2D45DCE37793
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:58 +0000
ROA not before: Fri 10 Jan 2025 17:17:58 +0000
ROA not after: Fri 09 Jan 2026 17:22:58 +0000
asID: 28202
IP address blocks: 186.216.64.0/18 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:61:23:58:df:e8:27:63:42:bc:a9:a0:03:5b:2d:45:dc:e3:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:58 2025 GMT
Not After : Jan 9 17:22:58 2026 GMT
Subject: CN=09DA430F527F8A1286F8F21B85446A9DA6CB124C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:73:a4:c7:0f:9b:99:cc:5d:6c:07:a3:98:
10:3e:33:af:14:0d:2b:8c:31:6f:a0:cb:3e:9d:0b:
a2:97:07:46:c1:d0:a1:1f:9d:96:99:40:90:83:d6:
35:22:36:ee:98:91:6a:4b:ce:85:78:16:c6:65:e3:
f2:23:05:e5:5c:08:5b:91:3e:36:09:3a:1f:9d:ff:
7c:86:2e:82:26:33:82:7e:f2:ea:9a:96:21:13:0e:
7d:76:35:a1:66:04:c8:b1:38:61:0f:d9:20:65:fe:
37:66:10:44:39:88:3e:cd:12:2f:4c:9e:60:4d:20:
a7:f6:c0:b7:66:02:f8:41:ed:79:87:97:54:fa:31:
1b:90:d0:0c:a4:40:78:60:57:03:7e:fb:4e:31:23:
16:23:44:aa:c6:67:59:fd:c7:56:2a:86:f8:1c:e6:
62:66:92:3c:1f:e2:33:22:01:ac:1b:76:52:ce:1b:
8e:e3:3c:4d:9c:de:6f:70:f3:a8:af:dd:71:c3:12:
4c:4a:59:4f:73:c2:2b:09:25:1c:5b:a9:49:ab:26:
50:22:97:41:20:e4:cb:e5:a0:37:62:80:fc:82:3f:
f2:34:10:bd:21:79:e6:38:a6:6c:e2:fd:d7:58:2c:
40:6a:63:69:41:2e:32:1e:5f:ee:2a:64:63:15:92:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:43:0F:52:7F:8A:12:86:F8:F2:1B:85:44:6A:9D:A6:CB:12:4C
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3138362e3231362e36342e302f31382d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.64.0/18
Signature Algorithm: sha256WithRSAEncryption
97:77:57:18:22:d5:f9:fc:73:80:3e:08:e3:57:70:5e:48:23:
06:dd:d8:61:d0:b4:c1:d7:fe:22:22:e6:53:64:9b:8d:d7:00:
ba:d8:b5:37:58:98:bc:4c:94:4f:df:da:3c:fc:b4:18:ae:15:
7d:d5:74:a4:5c:f8:92:b9:cd:80:58:ad:47:a4:fd:d3:95:16:
38:bc:38:14:a8:47:63:3b:00:96:65:ff:22:40:92:2e:4f:11:
8a:5a:1c:63:19:c9:62:03:61:36:c1:9a:bc:08:61:fc:90:60:
78:92:c1:59:1d:7f:8f:e9:63:4d:b6:bf:89:f0:a3:57:37:da:
60:7d:52:35:11:83:10:30:6d:0a:01:c3:73:bd:00:a0:0e:08:
85:28:8f:3f:f0:78:0a:fe:3b:8a:bf:4b:a1:49:c4:e6:bf:3f:
67:21:65:27:09:b3:02:a4:82:c0:e6:eb:6f:6b:1f:1e:8d:cd:
4a:d5:5f:e9:90:83:a3:93:ac:47:67:64:42:51:9e:d6:d4:f7:
11:c8:88:0b:ad:70:dd:51:fb:c0:62:a8:16:f5:a3:9e:fa:fd:
04:0b:c1:ed:1a:58:b7:8f:a6:61:1d:b4:6c:c2:04:d8:fa:5d:
25:5a:71:27:44:98:71:ea:45:2a:8b:fb:b5:25:12:74:41:14:
1b:dd:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:38:13 2025 by rpki-client