Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e382e302f32322d3232203d3e20323632393838.roa
File: 3138362e3235312e382e302f32322d3232203d3e20323632393838.roa (raw, json)
Hash identifier: f7shxnFVDXYffGFqwm8I854l5rkmc9sdZy10TiULivw=
Subject key identifier: F5:D1:CB:C4:AB:90:5D:01:59:86:FB:F4:B4:F4:C4:29:47:E1:34:DF
Certificate issuer: /CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Certificate serial: 0350A812570DB102C2BC9C7935180B554AE25CCE
Authority key identifier: 25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject info access: rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e382e302f32322d3232203d3e20323632393838.roa
Signing time: Mon 13 Jan 2025 14:17:13 +0000
ROA not before: Mon 13 Jan 2025 14:12:13 +0000
ROA not after: Mon 12 Jan 2026 14:17:13 +0000
asID: 262988
IP address blocks: 186.251.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:50:a8:12:57:0d:b1:02:c2:bc:9c:79:35:18:0b:55:4a:e2:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252DB7997AB9FC1EBB8F7F30B7558302DB376E02
Validity
Not Before: Jan 13 14:12:13 2025 GMT
Not After : Jan 12 14:17:13 2026 GMT
Subject: CN=F5D1CBC4AB905D015986FBF4B4F4C42947E134DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:c6:8d:a0:96:10:d5:b3:63:05:ee:29:40:
c1:3b:de:2e:18:2f:db:f3:ba:f4:b1:e1:4f:13:5c:
73:90:cb:40:2a:28:4b:8f:57:cd:79:39:b1:08:65:
db:d3:0d:06:0b:e8:22:42:b4:18:c6:f9:05:5d:07:
04:ba:5e:b5:fc:d8:8c:d7:5a:18:61:42:1a:5e:28:
ee:2b:aa:df:f1:fb:1a:b3:65:1b:37:87:96:eb:e3:
71:33:c4:50:17:9e:56:90:f8:7f:44:0e:06:98:76:
db:09:bc:5f:d4:6d:81:21:18:ca:88:cf:a4:ea:c4:
da:30:e2:e0:43:0e:aa:b1:cc:13:c0:2e:6f:15:37:
f9:f8:a7:70:03:81:7c:14:30:1c:52:61:a2:8d:c7:
bc:bb:06:d7:e5:52:25:54:fa:b2:99:30:5f:d0:3b:
4d:29:2f:7c:8e:bd:92:74:61:e9:74:3a:e4:26:0c:
86:79:20:b5:4b:a6:fa:bc:c1:69:52:04:88:05:86:
59:1a:73:18:0a:9f:db:08:ab:63:fa:14:a2:53:51:
a1:d5:36:12:72:82:bd:a6:12:72:69:3c:c2:08:30:
02:76:77:69:6a:62:47:af:6d:c2:a3:86:94:cd:87:
73:f9:fb:12:12:4d:53:a4:e4:ea:2c:3e:f5:1e:b4:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D1:CB:C4:AB:90:5D:01:59:86:FB:F4:B4:F4:C4:29:47:E1:34:DF
X509v3 Authority Key Identifier:
keyid:25:2D:B7:99:7A:B9:FC:1E:BB:8F:7F:30:B7:55:83:02:DB:37:6E:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252DB7997AB9FC1EBB8F7F30B7558302DB376E02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3138362e3235312e382e302f32322d3232203d3e20323632393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.251.8.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:22:db:14:15:a7:b7:af:ec:63:46:65:8d:3c:15:56:d2:9e:
94:3a:2f:11:18:81:59:09:a1:58:0f:5b:6d:c5:73:e7:b0:f9:
fd:71:11:b7:23:2b:77:53:e4:ed:9f:35:31:67:c7:74:a6:97:
3e:c8:9e:0b:42:20:8f:1d:2e:57:5f:56:1c:9b:82:70:d3:31:
61:43:72:1a:8e:ba:ca:14:1e:ff:06:d2:c7:49:55:8a:01:2c:
fd:c7:cd:33:08:4c:8a:89:69:f5:4a:20:ed:82:3c:75:7b:92:
6d:86:7b:2c:9a:cf:31:6d:24:7f:e3:5f:62:85:09:ff:44:be:
82:3e:9d:99:10:f1:77:a8:27:c4:a1:46:a0:b6:91:77:0b:2c:
2c:fa:33:d2:3e:30:90:a8:b6:dc:f4:4b:49:98:c1:ef:1d:da:
03:3b:d6:20:f3:2e:42:84:82:df:02:96:2c:6a:6a:c6:cf:4d:
3f:82:60:23:ba:da:77:0c:73:88:d1:da:b4:57:0b:3c:89:34:
a4:12:86:07:50:ec:f9:8a:b1:37:6a:ff:be:41:6f:46:04:2b:
2b:ee:d0:f6:e5:11:22:87:36:9a:cf:de:05:c2:82:b8:b8:49:
2a:d0:0f:f9:8b:7a:4d:11:44:ee:a2:4a:91:0d:76:15:55:86:
5d:cd:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:43:36 2025 by rpki-client