Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3139312e35332e302e302f31362d3235203d3e203238323032.roa
File: 3139312e35332e302e302f31362d3235203d3e203238323032.roa (raw, json)
Hash identifier: Kge60TThZDNDM0m9LwHUGsRywJnypSGlGKSU5eMH6Fk=
Subject key identifier: 76:E2:A4:0D:46:AC:5B:C9:C5:B2:5C:37:A1:F1:E9:13:25:37:1E:EA
Certificate issuer: /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial: 52CBBDC9B14DBDE25FAB33C6E14E2E0C9D865F7A
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3139312e35332e302e302f31362d3235203d3e203238323032.roa
Signing time: Fri 10 Jan 2025 17:22:57 +0000
ROA not before: Fri 10 Jan 2025 17:17:57 +0000
ROA not after: Fri 09 Jan 2026 17:22:57 +0000
asID: 28202
IP address blocks: 191.53.0.0/16 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cb:bd:c9:b1:4d:bd:e2:5f:ab:33:c6:e1:4e:2e:0c:9d:86:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Validity
Not Before: Jan 10 17:17:57 2025 GMT
Not After : Jan 9 17:22:57 2026 GMT
Subject: CN=76E2A40D46AC5BC9C5B25C37A1F1E91325371EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:59:d1:a0:46:8f:42:44:44:6d:b3:cd:67:
3c:22:76:0f:46:2c:8a:78:bb:c5:6d:1e:f7:1a:f2:
f9:d6:41:9b:19:8e:26:34:12:d2:3c:56:f5:be:2e:
21:f4:14:11:ac:19:07:78:11:e2:96:b8:12:16:ec:
11:16:11:80:39:7f:94:92:e5:e0:14:dc:3f:9e:f1:
4f:0f:fd:79:ec:df:fb:6a:a3:9f:cf:17:47:10:ac:
05:ea:70:3c:8e:e4:09:54:75:a1:28:6f:a1:3a:11:
bb:18:15:17:1f:44:ed:a8:ca:eb:45:18:d3:52:73:
5b:8e:51:ef:f8:70:7d:37:dc:2d:eb:90:59:51:0e:
f3:b4:93:d8:ad:2c:02:1d:b6:67:37:8d:b6:13:64:
bc:a6:8b:de:4a:90:e9:0b:6e:65:31:8d:d4:ad:e2:
bd:a2:74:9f:11:fb:37:dc:37:20:c4:dc:28:c0:75:
63:fd:fe:08:92:c9:ed:36:69:7b:60:48:ff:8a:75:
54:73:f3:33:e2:50:2e:a6:67:95:0c:b5:5f:7e:da:
cb:45:34:39:2c:07:64:6a:6b:81:f6:12:1a:6d:ad:
fe:93:0e:69:4a:1e:72:d0:b1:85:53:0f:f8:30:bf:
8a:9a:32:d1:2d:c6:d5:89:e5:15:9e:d0:dc:ad:6d:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:A4:0D:46:AC:5B:C9:C5:B2:5C:37:A1:F1:E9:13:25:37:1E:EA
X509v3 Authority Key Identifier:
keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3139312e35332e302e302f31362d3235203d3e203238323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:7e:6f:7b:87:74:e5:9b:e4:9c:32:1b:da:dd:34:dd:af:68:
94:7e:f4:1e:77:32:fa:a7:02:96:b7:4e:2c:f2:a3:cd:21:d8:
17:41:47:cf:53:93:de:50:f2:47:ef:51:05:af:f0:ad:03:03:
2a:4c:92:9b:5e:03:3e:8a:45:37:27:c4:38:03:1c:68:55:1a:
b9:37:61:b1:19:e2:8d:5d:08:5d:74:b4:99:22:59:c2:a9:4a:
bd:e9:72:c8:aa:f8:c4:0e:26:64:03:cb:4c:a9:df:c6:9b:78:
21:28:94:33:b5:b6:79:f3:e6:b3:25:e4:ad:63:e3:f4:6f:ea:
56:9b:a5:9d:6e:53:15:09:35:ec:0b:3d:32:6b:d8:9f:db:a1:
4d:48:aa:0e:51:98:e0:10:ff:6b:90:92:b1:8e:0e:c2:98:f2:
34:1c:50:66:ce:a7:b0:32:dd:f8:65:1e:ca:c6:cb:94:a0:44:
53:be:51:91:19:50:4c:11:07:ab:32:fb:63:2a:51:c7:d3:dd:
66:2f:f8:af:95:45:e5:36:dd:74:12:7b:cd:2d:9c:bd:69:30:
42:d0:d9:aa:78:bb:03:cd:21:77:22:f9:12:7e:9c:7a:a5:65:
5b:d6:e4:4c:5c:c1:df:dd:7a:f0:6c:00:5f:6a:db:6c:9b:93:
5d:b6:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:38 2025 by rpki-client