Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/3134332e3133372e342e302f32322d3332203d3e203631363336.roa
File: 3134332e3133372e342e302f32322d3332203d3e203631363336.roa (raw, json)
Hash identifier: nQbTt6/sZrHZbnnVVmfwzsgXqER9GIQwZbhZ6r2VdV0=
Subject key identifier: CE:1A:05:5F:D2:0F:7B:54:B0:15:D0:99:3E:F4:D3:F2:8C:82:40:96
Certificate issuer: /CN=D725162E18A463E8576032287F7EEDA7CF72075D
Certificate serial: 6DEE8620A21F7AB540A77E875E2BA9E86436200E
Authority key identifier: D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/3134332e3133372e342e302f32322d3332203d3e203631363336.roa
Signing time: Fri 14 Feb 2025 14:50:39 +0000
ROA not before: Fri 14 Feb 2025 14:45:39 +0000
ROA not after: Fri 13 Feb 2026 14:50:39 +0000
asID: 61636
IP address blocks: 143.137.4.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ee:86:20:a2:1f:7a:b5:40:a7:7e:87:5e:2b:a9:e8:64:36:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D725162E18A463E8576032287F7EEDA7CF72075D
Validity
Not Before: Feb 14 14:45:39 2025 GMT
Not After : Feb 13 14:50:39 2026 GMT
Subject: CN=CE1A055FD20F7B54B015D0993EF4D3F28C824096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:1d:79:8d:42:2f:a3:eb:40:eb:26:d5:36:
f4:e9:aa:04:64:37:93:69:cf:06:af:3c:03:5a:57:
b8:fd:c7:a8:44:bd:b0:e4:c0:c1:2a:85:8d:39:af:
4d:4d:4d:26:f1:80:ce:08:d4:81:6b:9b:cf:3b:54:
1a:27:c5:c4:99:62:bd:da:d9:44:bc:94:7a:b7:32:
de:72:0e:d9:34:eb:ec:7d:f7:f8:a3:88:39:25:12:
13:0d:05:8a:e7:b7:e9:dc:b8:72:7d:10:6c:0f:1f:
26:0e:d1:db:f0:23:2c:39:3a:21:e8:65:c4:55:c0:
ef:68:6b:a2:44:65:37:83:a4:6b:0d:47:1b:8a:38:
2f:d3:7f:3f:24:93:d4:58:21:84:46:8e:74:61:d4:
57:19:96:b7:ae:b0:b8:57:72:2c:ce:f2:4d:b1:65:
7a:4e:e2:68:30:9b:82:d2:c8:00:86:aa:3f:ae:0e:
4a:12:e9:6f:90:fe:57:ea:73:b4:c9:1c:21:96:be:
30:30:f5:dc:55:c1:60:5f:24:5a:1f:b9:11:55:c2:
b9:f1:ab:c3:74:8b:c1:1c:9f:1a:b9:75:e5:19:22:
dc:db:35:a7:da:24:20:8f:6a:ac:aa:fc:34:02:76:
30:e3:31:fd:99:74:fc:49:ad:f3:c9:56:a1:4d:e7:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:05:5F:D2:0F:7B:54:B0:15:D0:99:3E:F4:D3:F2:8C:82:40:96
X509v3 Authority Key Identifier:
keyid:D7:25:16:2E:18:A4:63:E8:57:60:32:28:7F:7E:ED:A7:CF:72:07:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/D725162E18A463E8576032287F7EEDA7CF72075D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D725162E18A463E8576032287F7EEDA7CF72075D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oN3DxPQZdfEvjriwXrJFiuYHQnmdf3mqqkRRfNnUJMa/0/3134332e3133372e342e302f32322d3332203d3e203631363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.4.0/22
Signature Algorithm: sha256WithRSAEncryption
52:31:34:56:0e:6d:e7:75:2f:e0:ab:4f:0e:1e:39:81:da:1d:
3b:08:83:a6:27:99:b9:41:21:d7:7f:ce:83:59:77:6a:f2:45:
cb:4a:ff:d7:e7:15:47:d7:30:db:7d:63:65:b8:6d:89:61:d5:
5f:31:1a:1e:91:92:51:f9:e2:4b:d8:e2:78:d4:10:9d:f8:c7:
39:92:e0:9e:5d:f6:1a:b2:c4:14:bf:b5:36:f6:a5:29:c7:3a:
c6:6e:1b:1f:28:71:ae:c0:d6:eb:4b:f2:fc:5f:f7:b1:8b:c3:
72:53:d1:09:51:7c:7a:8a:28:0f:89:9f:0f:df:cd:0b:e2:b7:
1a:17:db:f1:bf:d7:be:3d:1e:09:f9:08:48:f0:9e:09:ea:16:
d5:5e:3f:07:e8:2e:48:d0:a7:70:2c:08:ba:58:9f:c1:5e:95:
04:3d:7e:ae:73:d0:d6:84:7b:8b:3f:b6:15:73:76:f3:10:a1:
54:cd:e8:5a:75:24:c3:6d:bd:2c:a2:03:30:01:a6:09:fe:a8:
5e:64:d9:80:98:08:46:51:8c:04:2e:ff:4c:4e:ca:c9:0e:ab:
63:7d:5b:03:d9:70:68:11:4b:2b:0c:68:0a:6d:f7:f9:71:43:
56:83:16:e6:5e:38:27:e9:10:d9:f6:b1:08:89:3c:75:8d:ad:
ea:89:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:14 2025 by rpki-client