Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
File: 3139312e3234302e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier: H8+z04HCU6bFdt4jLGvJgITzYfUPkBK/c2w6icGSoVY=
Subject key identifier: 38:01:4F:EB:EF:F5:24:41:2C:A6:B6:89:C5:71:E8:37:7D:5A:3E:43
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 40FBA01A7EEBDE727BD5BC237DB47FBE0D814332
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:58 +0000
ROA not before: Fri 10 Jan 2025 17:17:58 +0000
ROA not after: Fri 09 Jan 2026 17:22:58 +0000
asID: 28202
IP address blocks: 191.240.0.0/17 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fb:a0:1a:7e:eb:de:72:7b:d5:bc:23:7d:b4:7f:be:0d:81:43:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:58 2025 GMT
Not After : Jan 9 17:22:58 2026 GMT
Subject: CN=38014FEBEFF524412CA6B689C571E8377D5A3E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:d9:19:ef:1d:37:f1:c2:3b:2a:46:69:40:
b0:e4:10:4b:10:d1:c8:7c:5a:cf:b8:35:e7:82:04:
76:8e:f8:8e:56:40:f6:16:6c:50:ef:7e:0d:2b:59:
0f:b6:09:51:da:d5:57:c1:3b:bd:d8:bb:a6:ab:55:
7b:ac:fb:25:25:65:1f:6c:31:65:64:cf:19:e9:6b:
51:fb:2c:6a:61:52:b9:6b:d2:84:c1:ee:5c:00:ae:
c9:2c:bf:d2:dd:22:86:c1:f3:74:a5:ff:b8:f5:b4:
c0:ff:c7:e5:a7:b4:16:8d:e4:71:98:0d:2a:56:dd:
df:9c:18:4b:2f:6c:83:6d:39:f6:7a:8d:52:d9:26:
80:8d:75:4f:89:40:c3:8d:d5:50:4b:c5:c9:9b:a4:
f8:4c:7a:c2:73:ab:94:8f:98:8d:dc:ed:0f:f6:c5:
df:16:d6:cc:40:15:50:67:3a:6a:40:e9:4a:4b:18:
21:3b:f2:c6:12:11:50:51:3c:cb:6f:0b:cf:1b:f8:
70:8a:28:af:e1:1f:b1:c4:f2:25:ec:ca:0a:bc:e4:
40:b2:49:20:9a:4a:1a:37:09:c4:aa:d3:b4:0b:e8:
32:f3:67:b8:28:94:8c:5c:7b:2a:46:34:92:0b:5a:
2a:c6:16:d5:2d:a9:9c:7f:54:9f:99:74:dd:42:52:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:01:4F:EB:EF:F5:24:41:2C:A6:B6:89:C5:71:E8:37:7D:5A:3E:43
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3139312e3234302e302e302f31372d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b4:b9:1f:72:af:16:cc:0f:ce:ac:66:da:85:53:59:21:b1:59:
78:af:52:31:c0:8f:b0:7b:06:fa:cc:ee:06:10:bc:cb:0c:8b:
92:48:33:53:71:25:f1:05:f7:3e:63:95:7c:4f:4a:ca:0d:e0:
a8:2d:7d:6a:b8:a0:13:3d:63:ab:85:c0:a8:c5:d2:23:c1:94:
c6:9f:d5:4c:dc:11:92:0e:d3:87:cd:3b:a7:b5:fd:e8:ed:bf:
15:56:b8:4c:27:3f:dd:56:6c:28:a4:3b:57:3e:59:e4:23:67:
f0:06:64:f6:68:4c:e5:35:5a:d7:6e:f7:54:36:d1:33:2a:2c:
f8:74:e9:d2:56:72:80:98:2f:ac:9e:11:1d:40:f5:f6:f2:06:
58:4e:a2:91:cc:b0:9a:d1:0f:ce:d4:66:b5:aa:24:d0:86:81:
fd:12:f8:b6:87:3e:b8:b8:d5:1f:f2:f6:18:4a:58:c0:09:82:
de:1d:a4:3c:b5:e7:f7:2e:a1:30:09:52:77:69:c2:87:ff:36:
47:10:f6:02:f3:50:e0:cd:13:56:2a:0e:b7:ba:d3:ca:9e:b2:
71:3b:bd:2b:54:37:b0:5a:57:8f:31:bc:61:e3:9d:f8:44:04:
4c:f5:7d:82:b4:17:11:8b:a7:21:41:7f:4b:d2:e0:0e:f2:af:
48:62:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:31 2025 by rpki-client